Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/323830343a353030343a3a2f33322d3334203d3e20323638333634.roa
File:                     323830343a353030343a3a2f33322d3334203d3e20323638333634.roa (raw, json)
Hash identifier:          JIS3eldU5w6xneaNhbNwXRmSn3gRtZYvp/z5n9QUlv4=
Subject key identifier:   F3:14:FA:DE:04:B5:C8:E6:0A:9A:DE:12:91:DE:4F:C3:00:A4:06:85
Certificate issuer:       /CN=3BC3484DBFF02B8671B397AA4277D6C416FABF7B
Certificate serial:       23216AA4272642D2D912BB60328884FFDEA4E567
Authority key identifier: 3B:C3:48:4D:BF:F0:2B:86:71:B3:97:AA:42:77:D6:C4:16:FA:BF:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3BC3484DBFF02B8671B397AA4277D6C416FABF7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/323830343a353030343a3a2f33322d3334203d3e20323638333634.roa
Signing time:             Tue 04 Jan 2022 02:04:31 +0000
ROA not before:           Tue 04 Jan 2022 01:59:31 +0000
ROA not after:            Tue 03 Jan 2023 02:04:31 +0000
asID:                     268364
IP address blocks:        2804:5004::/32 maxlen: 34

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:21:6a:a4:27:26:42:d2:d9:12:bb:60:32:88:84:ff:de:a4:e5:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BC3484DBFF02B8671B397AA4277D6C416FABF7B
        Validity
            Not Before: Jan  4 01:59:31 2022 GMT
            Not After : Jan  3 02:04:31 2023 GMT
        Subject: CN=F314FADE04B5C8E60A9ADE1291DE4FC300A40685
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e3:73:b7:17:9a:10:53:3a:91:11:71:50:89:
                    21:42:83:d3:ce:08:37:2e:63:aa:80:72:de:c3:43:
                    8d:30:0c:b8:a5:06:61:03:06:4c:c0:02:a3:1c:64:
                    63:1d:09:f2:b7:27:66:36:42:35:bd:50:a7:43:67:
                    8b:98:44:d1:a7:8d:45:33:8a:3f:da:dc:5e:11:d5:
                    39:c5:92:ef:2e:ec:db:31:71:8f:3b:5e:21:85:d1:
                    18:4a:2b:2b:07:29:24:23:54:46:76:1c:a8:b6:a4:
                    fd:85:06:45:fa:44:e1:58:a6:f0:42:eb:19:0d:cc:
                    bb:73:32:1e:1c:4e:89:4b:1b:ab:c2:64:d3:af:16:
                    3a:ee:81:e2:11:29:cd:b6:01:58:e3:93:39:cc:53:
                    07:71:a8:78:40:76:d9:ae:09:96:d2:41:39:09:0c:
                    d3:13:9a:11:1c:9c:92:46:a2:b6:19:b6:fb:55:fd:
                    06:69:e1:55:e3:55:9f:51:32:c7:2b:a7:89:07:9e:
                    09:42:e5:29:25:1d:87:bf:60:ce:35:a9:e8:2e:65:
                    ec:2f:44:82:1c:2a:9e:3b:cd:db:50:fc:98:c3:1c:
                    68:9c:9c:79:f7:34:b4:cf:9d:b8:33:b1:a1:37:df:
                    96:42:48:88:51:77:71:1c:83:52:3d:47:cb:ff:07:
                    03:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:14:FA:DE:04:B5:C8:E6:0A:9A:DE:12:91:DE:4F:C3:00:A4:06:85
            X509v3 Authority Key Identifier:
                keyid:3B:C3:48:4D:BF:F0:2B:86:71:B3:97:AA:42:77:D6:C4:16:FA:BF:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/3BC3484DBFF02B8671B397AA4277D6C416FABF7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3BC3484DBFF02B8671B397AA4277D6C416FABF7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H1hE7ixputFNkz7TikNiLeqnWcSEnioEiGJSkwHY3ZBL/0/323830343a353030343a3a2f33322d3334203d3e20323638333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5004::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:11:eb:55:f7:68:c2:d9:dd:3d:a0:c9:96:fa:b8:80:bd:46:
         18:c8:8a:3c:93:28:da:93:52:0d:30:63:41:e1:88:c5:14:99:
         9e:e7:b7:ab:90:44:63:8d:7c:4c:bd:1d:2c:f1:c8:77:b2:ff:
         f6:e7:33:a2:f9:c9:ea:ef:d1:fc:b4:5a:a2:ac:a2:b1:3e:8e:
         c3:76:7e:5a:0a:f5:96:47:9b:ff:cd:2e:71:8f:70:fe:6e:7b:
         ab:91:fd:7b:66:da:4b:4b:47:ce:3f:39:b5:5e:9b:d7:82:a5:
         65:43:34:67:b8:2f:68:d5:fa:be:b8:d4:5b:12:65:fe:ed:88:
         75:82:58:05:7c:c7:6b:d0:ec:26:08:d7:bc:dc:cb:54:0c:bf:
         4d:b5:32:e9:4a:97:4d:2b:64:f4:5e:50:b8:c9:44:a3:a6:8f:
         99:75:f7:32:e0:99:f3:fc:7d:6e:d9:c0:fc:b7:79:c5:72:1f:
         64:28:7c:ea:47:82:42:2f:cb:e2:6c:5c:98:91:30:78:92:88:
         25:b1:12:0c:d2:e3:69:c1:3e:d6:b2:dd:5e:2f:90:ab:a6:8b:
         d7:2c:25:ef:49:67:99:3e:6b:1b:5b:a4:90:d7:6c:12:70:5a:
         e9:09:da:46:6d:b8:9f:d6:f0:7c:7b:62:ec:e9:1f:7a:c2:9d:
         e7:47:12:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----