Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/323830343a363438383a3a2f33332d3333203d3e20323639343333.roa
File:                     323830343a363438383a3a2f33332d3333203d3e20323639343333.roa (raw, json)
Hash identifier:          Pq3po+a4beYxPoLis1SpgASrNGfY9p44Yx8hfR9LnpA=
Subject key identifier:   AB:C9:27:0A:F9:8D:6F:F7:D5:F8:BB:A8:CA:1D:9D:4C:3C:1E:23:FC
Certificate issuer:       /CN=9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3
Certificate serial:       403142EE6C033F58BA2C542796BF367845BD4676
Authority key identifier: 9F:47:2E:07:BB:7E:D7:1E:84:73:1C:0B:2E:8F:68:BF:7A:6F:02:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/323830343a363438383a3a2f33332d3333203d3e20323639343333.roa
Signing time:             Thu 04 Apr 2024 23:51:23 +0000
ROA not before:           Thu 04 Apr 2024 23:46:23 +0000
ROA not after:            Thu 03 Apr 2025 23:51:23 +0000
asID:                     269433
IP address blocks:        2804:6488::/33 maxlen: 33
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:31:42:ee:6c:03:3f:58:ba:2c:54:27:96:bf:36:78:45:bd:46:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3
        Validity
            Not Before: Apr  4 23:46:23 2024 GMT
            Not After : Apr  3 23:51:23 2025 GMT
        Subject: CN=ABC9270AF98D6FF7D5F8BBA8CA1D9D4C3C1E23FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:54:e7:c1:fd:56:46:8c:5f:65:46:66:38:d5:
                    60:1f:70:77:f6:b4:ea:35:a1:7a:f9:70:a4:4c:5c:
                    99:87:89:aa:bb:3e:ee:da:6f:66:13:52:c6:6d:89:
                    6d:87:f0:b7:94:24:55:c0:4c:75:72:7a:c5:aa:ee:
                    34:6b:eb:7d:22:47:ff:04:b5:63:bc:03:51:fc:32:
                    96:4c:5d:ed:b8:b3:6e:5e:02:a0:52:71:bc:e6:ca:
                    7f:a4:96:33:6c:be:82:3b:a4:22:4a:50:06:3d:b4:
                    7e:10:87:15:b6:a9:fe:44:7c:88:6f:05:13:86:48:
                    33:50:59:06:a4:d3:d4:4a:6b:eb:51:8f:e3:cf:f4:
                    ec:88:2c:59:f6:98:48:14:48:36:92:94:7b:30:1d:
                    16:16:b7:98:c2:10:48:e9:42:c7:37:dd:af:ed:b7:
                    ae:ff:e8:1b:92:7f:c0:e9:bc:55:d5:35:fc:ae:ae:
                    ac:47:30:73:12:0c:00:e0:38:11:2d:dd:af:f1:b1:
                    97:0d:7f:35:75:e1:d2:bd:44:d3:d4:62:72:21:1f:
                    eb:82:a2:7a:d5:3f:a7:c9:62:03:be:24:49:f0:af:
                    25:e0:48:73:b4:9d:44:2d:ff:16:93:92:33:3f:3b:
                    3e:66:08:33:00:31:1d:34:79:7b:d5:a1:2c:fb:3b:
                    de:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:C9:27:0A:F9:8D:6F:F7:D5:F8:BB:A8:CA:1D:9D:4C:3C:1E:23:FC
            X509v3 Authority Key Identifier:
                keyid:9F:47:2E:07:BB:7E:D7:1E:84:73:1C:0B:2E:8F:68:BF:7A:6F:02:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/323830343a363438383a3a2f33332d3333203d3e20323639343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6488::/33

    Signature Algorithm: sha256WithRSAEncryption
         5b:74:08:ff:b2:20:7b:a5:21:51:90:a7:58:95:8c:fd:58:8e:
         be:cd:88:0a:a7:31:39:8a:71:3c:7e:14:48:b7:d3:86:bb:f2:
         7e:0d:03:49:23:aa:c8:86:32:70:d1:21:b0:c3:06:2f:39:46:
         35:29:c8:7a:b7:cd:ac:c9:87:9c:92:90:b2:31:f0:3e:1c:86:
         19:35:fa:21:b5:4a:b8:00:60:dd:bd:50:10:f4:f6:a8:f0:7b:
         ff:85:ca:d6:eb:55:0b:f1:a5:54:1d:a0:d7:bb:b3:ca:28:2f:
         e2:c2:62:e2:c3:41:88:0f:a8:29:fb:0d:35:5e:69:a3:1d:56:
         82:1f:aa:29:d7:8c:41:08:c6:5a:c3:ae:47:f4:3e:0c:a1:ae:
         21:44:4b:d5:14:7c:e9:90:c4:e9:fa:fb:c5:90:58:13:d5:af:
         f5:7c:f3:6c:a6:3a:39:3c:60:5e:0b:3a:c4:45:59:72:9f:7c:
         b9:b2:da:25:91:0c:21:97:d9:98:fc:4c:c3:d0:5b:b3:89:24:
         6b:fd:82:fc:4a:5e:20:9a:cd:e9:7f:cb:49:53:7b:ad:82:49:
         5e:81:ec:b7:8d:00:95:5f:3d:50:0f:5d:97:73:a2:a0:68:55:
         b6:f6:bd:d4:cd:19:74:b7:94:a4:37:1b:68:fa:d6:73:4f:27:
         be:37:70:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 02:33:34 2025 by rpki-client