Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/323830343a326363303a3a2f33322d3438203d3e20323635323431.roa
File:                     323830343a326363303a3a2f33322d3438203d3e20323635323431.roa (raw, json)
Hash identifier:          qPRrHKC25Cm6xGGjUaehI7nyBOuGbkwYkAz3iezjAwg=
Subject key identifier:   73:BE:6A:C7:40:D8:36:C5:DB:1A:F3:C5:1F:4A:8D:00:B3:5D:7E:31
Certificate issuer:       /CN=206AA74F8C9E65605FA9A3C6970DAE15CFC48016
Certificate serial:       49A3E448A5EA1E742A0370FC5FB6D7F129111956
Authority key identifier: 20:6A:A7:4F:8C:9E:65:60:5F:A9:A3:C6:97:0D:AE:15:CF:C4:80:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/206AA74F8C9E65605FA9A3C6970DAE15CFC48016.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/323830343a326363303a3a2f33322d3438203d3e20323635323431.roa
Signing time:             Wed 08 Jun 2022 04:46:01 +0000
ROA not before:           Wed 08 Jun 2022 04:41:01 +0000
ROA not after:            Wed 07 Jun 2023 04:46:01 +0000
asID:                     265241
IP address blocks:        2804:2cc0::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:a3:e4:48:a5:ea:1e:74:2a:03:70:fc:5f:b6:d7:f1:29:11:19:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=206AA74F8C9E65605FA9A3C6970DAE15CFC48016
        Validity
            Not Before: Jun  8 04:41:01 2022 GMT
            Not After : Jun  7 04:46:01 2023 GMT
        Subject: CN=73BE6AC740D836C5DB1AF3C51F4A8D00B35D7E31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:71:85:a6:a6:92:3d:79:ef:87:f0:84:1b:89:
                    ff:fe:b3:9c:bc:40:b0:e1:06:18:f6:e7:10:38:c6:
                    a8:44:20:17:18:6f:df:dc:5a:85:b0:28:37:9c:3e:
                    0c:21:9c:a9:cd:67:d2:25:ba:16:e3:9f:71:9d:d6:
                    f0:f1:74:02:39:18:ca:4b:f2:00:3b:d0:2d:61:db:
                    59:26:f3:fb:f4:56:6d:e6:09:eb:d7:7b:17:3e:17:
                    d9:2a:80:25:04:47:7f:27:d3:35:16:42:e7:7d:41:
                    01:6d:78:4e:d2:e9:59:ce:20:8f:43:9c:2f:41:1e:
                    3b:28:02:2c:78:b8:27:5a:09:48:eb:65:6b:a5:45:
                    b2:24:5e:aa:2e:1e:b6:61:a5:70:88:88:3a:7b:46:
                    ab:2f:2b:87:b9:38:d3:2b:76:07:67:13:ea:a3:f7:
                    37:43:8b:cf:7f:5b:70:55:53:c5:18:51:d3:24:f0:
                    bf:0b:30:72:43:23:c2:14:fe:63:12:4a:09:c5:ac:
                    7e:f2:99:e8:70:aa:26:f8:41:25:1d:44:83:0f:e4:
                    3b:67:c0:98:3f:ab:75:23:04:a6:ab:74:00:70:4b:
                    c6:3e:b4:93:51:89:29:98:62:43:19:0c:01:fc:e3:
                    58:ad:47:94:20:5a:27:0b:80:bf:4f:52:6b:c6:cb:
                    6d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:BE:6A:C7:40:D8:36:C5:DB:1A:F3:C5:1F:4A:8D:00:B3:5D:7E:31
            X509v3 Authority Key Identifier:
                keyid:20:6A:A7:4F:8C:9E:65:60:5F:A9:A3:C6:97:0D:AE:15:CF:C4:80:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/206AA74F8C9E65605FA9A3C6970DAE15CFC48016.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/206AA74F8C9E65605FA9A3C6970DAE15CFC48016.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/0/323830343a326363303a3a2f33322d3438203d3e20323635323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2cc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a8:f0:f2:9b:bc:78:a2:1c:49:a3:f3:41:b7:03:ab:53:73:e3:
         a0:e1:b8:f6:3c:ae:8b:c6:76:58:07:0f:76:0a:27:52:4a:13:
         90:27:29:f3:01:2d:69:2a:4e:83:cc:c6:be:e2:19:28:eb:98:
         6a:b0:0f:6f:42:c4:3e:11:d8:ee:2b:5a:a7:67:a2:7a:64:28:
         53:bc:e6:20:6b:70:58:a2:65:c5:90:dd:75:4d:8c:66:7d:7e:
         19:54:05:48:2f:e9:45:f8:c6:53:13:64:ef:6a:85:ec:07:ac:
         38:20:e2:67:55:ed:24:87:91:8f:37:a1:19:db:16:f6:80:b3:
         66:11:12:3b:c4:e6:1a:cf:ba:19:82:7b:3f:56:a0:1f:c5:41:
         4f:4e:7e:69:c9:9b:9a:7d:6c:eb:b2:bf:2b:f2:cf:3f:23:8b:
         7a:ce:2d:ee:9c:b0:f4:98:8a:1a:dc:d3:0e:1e:ac:cd:a5:a8:
         de:bf:0a:ea:1e:0e:2c:e9:96:0a:50:f0:74:13:e5:7b:c8:fb:
         17:3b:9c:65:f7:38:73:ab:16:5c:d1:bc:33:e0:b3:cf:b6:2b:
         1c:0d:e1:89:55:8e:5b:89:d2:ee:03:b5:16:43:2c:72:b0:bd:
         25:a0:c8:45:0e:35:e9:e7:57:60:88:f2:84:83:1c:1b:8e:2c:
         d0:7f:b1:0d
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUSaPkSKXqHnQqA3D8X7bX8SkRGVYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjA2QUE3NEY4QzlFNjU2MDVGQTlBM0M2OTcwREFFMTVD
RkM0ODAxNjAeFw0yMjA2MDgwNDQxMDFaFw0yMzA2MDcwNDQ2MDFaMDMxMTAvBgNV
BAMTKDczQkU2QUM3NDBEODM2QzVEQjFBRjNDNTFGNEE4RDAwQjM1RDdFMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLcYWmppI9ee+H8IQbif/+s5y8
QLDhBhj25xA4xqhEIBcYb9/cWoWwKDecPgwhnKnNZ9Iluhbjn3Gd1vDxdAI5GMpL
8gA70C1h21km8/v0Vm3mCevXexc+F9kqgCUER38n0zUWQud9QQFteE7S6VnOII9D
nC9BHjsoAix4uCdaCUjrZWulRbIkXqouHrZhpXCIiDp7RqsvK4e5ONMrdgdnE+qj
9zdDi89/W3BVU8UYUdMk8L8LMHJDI8IU/mMSSgnFrH7ymehwqib4QSUdRIMP5Dtn
wJg/q3UjBKardABwS8Y+tJNRiSmYYkMZDAH841itR5QgWicLgL9PUmvGy22nAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUc75qx0DYNsXbGvPFH0qNALNdfjEwHwYDVR0j
BBgwFoAUIGqnT4yeZWBfqaPGlw2uFc/EgBYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMk5zQzFvUVdUdjI5ZVM4YkdwWnFFQWpRQjd5ZXZwZDFvY1J1aHFhZVNQ
Sm0vMC8yMDZBQTc0RjhDOUU2NTYwNUZBOUEzQzY5NzBEQUUxNUNGQzQ4MDE2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzIwNkFBNzRGOEM5RTY1NjA1
RkE5QTNDNjk3MERBRTE1Q0ZDNDgwMTYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJOc0Mxb1FXVHYyOWVTOGJHcFpxRUFqUUI3eWV2cGQxb2NSdWhxYWVTUEptLzAv
MzIzODMwMzQzYTMyNjM2MzMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM1
MzIzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKAQswDANBgkqhkiG9w0BAQsFAAOCAQEAqPDym7x4
ohxJo/NBtwOrU3PjoOG49jyui8Z2WAcPdgonUkoTkCcp8wEtaSpOg8zGvuIZKOuY
arAPb0LEPhHY7itap2eiemQoU7zmIGtwWKJlxZDddU2MZn1+GVQFSC/pRfjGUxNk
72qF7AesOCDiZ1XtJIeRjzehGdsW9oCzZhESO8TmGs+6GYJ7P1agH8VBT05+acmb
mn1s67K/K/LPPyOLes4t7pyw9JiKGtzTDh6szaWo3r8K6h4OLOmWClDwdBPle8j7
FzucZfc4c6sWXNG8M+Czz7YrHA3hiVWOW4nS7gO1FkMscrC9JaDIRQ416edXYIjy
hIMcG44s0H+xDQ==
-----END CERTIFICATE-----