Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B2kSgNDzxeuVXWerC2LiuYQTdt3G3nGKvKXqJajjHc7y/0/3137302e38322e37362e302f32322d3234203d3e20323636343335.roa
File:                     3137302e38322e37362e302f32322d3234203d3e20323636343335.roa (raw, json)
Hash identifier:          eoaxT+9TJ1PdOSvVmNVapVwIYQOYyOApc5/ocDMXy18=
Subject key identifier:   EE:C1:22:18:55:A4:4F:40:78:FE:90:66:9E:09:3E:15:C0:82:8D:44
Certificate issuer:       /CN=98BB84CC473634554A0B9F54BAEC3ED50E8A000F
Certificate serial:       58C2CAB53E3ADA69CF12C8ADC0C998F8EEC56AD0
Authority key identifier: 98:BB:84:CC:47:36:34:55:4A:0B:9F:54:BA:EC:3E:D5:0E:8A:00:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98BB84CC473634554A0B9F54BAEC3ED50E8A000F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B2kSgNDzxeuVXWerC2LiuYQTdt3G3nGKvKXqJajjHc7y/0/3137302e38322e37362e302f32322d3234203d3e20323636343335.roa
Signing time:             Mon 28 Mar 2022 12:18:49 +0000
ROA not before:           Mon 28 Mar 2022 12:13:49 +0000
ROA not after:            Mon 27 Mar 2023 12:18:49 +0000
asID:                     266435
IP address blocks:        170.82.76.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:c2:ca:b5:3e:3a:da:69:cf:12:c8:ad:c0:c9:98:f8:ee:c5:6a:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98BB84CC473634554A0B9F54BAEC3ED50E8A000F
        Validity
            Not Before: Mar 28 12:13:49 2022 GMT
            Not After : Mar 27 12:18:49 2023 GMT
        Subject: CN=EEC1221855A44F4078FE90669E093E15C0828D44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:9e:45:d4:d4:d9:73:45:d0:d9:b8:4b:37:55:
                    cb:01:6f:d5:45:c6:a6:e5:a2:fb:f5:0d:b3:26:53:
                    cf:25:2c:78:09:55:02:08:6f:0c:fd:4d:a1:cc:53:
                    cb:1c:ad:49:b3:a5:6e:15:56:e0:c3:2e:3b:ed:31:
                    e6:d5:66:7a:58:ac:af:2e:47:0f:0c:a7:e7:3c:4f:
                    85:07:78:a4:e4:06:1d:1e:11:2c:bd:0a:aa:d5:81:
                    20:af:3a:d0:93:60:53:f0:48:9b:6c:c8:fe:25:3a:
                    02:c9:49:d3:47:79:d1:fd:02:0b:bc:a5:b4:7d:7e:
                    63:62:10:f1:96:90:4c:36:01:b7:76:05:fe:69:cf:
                    8b:07:0c:19:7f:68:2b:9c:52:77:9e:c5:33:63:17:
                    4e:46:5b:a1:e7:2e:02:ee:94:50:ca:b6:f5:2b:01:
                    4d:34:bd:3d:0e:b0:02:6f:68:56:87:f5:c9:2b:e8:
                    52:3e:ca:31:ba:c4:c2:fb:a7:e8:28:8c:15:ca:5c:
                    15:ee:7f:21:6c:bf:d9:76:75:f9:0a:70:5d:a3:dd:
                    a4:79:e1:3b:71:d8:a1:b1:c5:93:9d:78:ee:69:0b:
                    d9:1e:b5:2b:fe:92:92:cf:b6:c2:be:1e:84:a1:c4:
                    a8:82:7f:6c:e4:60:85:d7:12:f9:92:dd:3f:42:40:
                    a3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:C1:22:18:55:A4:4F:40:78:FE:90:66:9E:09:3E:15:C0:82:8D:44
            X509v3 Authority Key Identifier:
                keyid:98:BB:84:CC:47:36:34:55:4A:0B:9F:54:BA:EC:3E:D5:0E:8A:00:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B2kSgNDzxeuVXWerC2LiuYQTdt3G3nGKvKXqJajjHc7y/0/98BB84CC473634554A0B9F54BAEC3ED50E8A000F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98BB84CC473634554A0B9F54BAEC3ED50E8A000F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B2kSgNDzxeuVXWerC2LiuYQTdt3G3nGKvKXqJajjHc7y/0/3137302e38322e37362e302f32322d3234203d3e20323636343335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.82.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ae:0e:a9:88:dd:90:a4:20:ef:20:91:0d:52:c3:b1:16:6b:e4:
         65:ba:84:c4:00:da:16:06:7c:8b:0b:42:a4:dd:80:be:16:1d:
         26:6e:30:1d:44:c5:7d:e4:4d:e1:2d:99:c8:3e:59:af:91:b3:
         3e:c2:82:52:84:e6:be:9d:a9:27:06:cc:61:1e:23:87:f7:2e:
         80:4d:7f:2f:13:c0:19:b9:a1:e5:a5:96:01:60:03:19:3c:f3:
         2e:02:a1:f0:2e:ac:e9:ff:ab:43:f8:57:67:52:8b:5c:cb:c2:
         5b:56:fa:0c:3e:5d:0a:49:7a:6e:62:83:3d:3c:7f:8d:38:23:
         5e:c9:53:a6:6d:92:a1:17:7e:c5:f4:13:aa:02:31:ff:6a:48:
         6b:5f:2c:35:b9:1c:fe:c0:e7:c9:8b:24:45:5c:08:4f:e0:38:
         02:b0:32:0b:ff:e8:77:4b:31:6d:2c:b0:7b:33:c8:62:ec:f2:
         04:6a:f0:c2:51:3f:9f:bf:3c:60:4f:dd:20:ce:c3:17:0d:1f:
         cb:9f:b8:24:54:1a:ed:ce:35:04:fd:25:83:5d:f1:f8:19:15:
         36:e2:ff:40:ad:8a:98:4d:f4:ca:a0:6b:2c:d7:ec:29:8e:64:
         6c:54:0e:61:35:d6:b1:06:b3:af:90:c7:ae:57:a6:e1:b3:a6:
         03:e0:52:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:15:43 2023 by rpki-client on console-fra.rpki-client.org