Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/323830343a363438383a3a2f33342d3334203d3e20323639343333.roa
File:                     323830343a363438383a3a2f33342d3334203d3e20323639343333.roa (raw, json)
Hash identifier:          Buixa5GG1GTU98CgwMThRmxlMiVmIgxL7yaEXgUAbs4=
Subject key identifier:   57:26:D2:75:1D:87:B7:C5:AF:9D:79:C7:19:CA:9C:F9:58:0D:B1:12
Certificate issuer:       /CN=9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3
Certificate serial:       6C81FD73A4DD5CC27836ADB0837EF80226F74DC9
Authority key identifier: 9F:47:2E:07:BB:7E:D7:1E:84:73:1C:0B:2E:8F:68:BF:7A:6F:02:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/323830343a363438383a3a2f33342d3334203d3e20323639343333.roa
Signing time:             Thu 04 Apr 2024 23:51:23 +0000
ROA not before:           Thu 04 Apr 2024 23:46:23 +0000
ROA not after:            Thu 03 Apr 2025 23:51:23 +0000
asID:                     269433
IP address blocks:        2804:6488::/34 maxlen: 34
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:81:fd:73:a4:dd:5c:c2:78:36:ad:b0:83:7e:f8:02:26:f7:4d:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3
        Validity
            Not Before: Apr  4 23:46:23 2024 GMT
            Not After : Apr  3 23:51:23 2025 GMT
        Subject: CN=5726D2751D87B7C5AF9D79C719CA9CF9580DB112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:08:71:bc:11:db:e4:f7:bf:14:fd:f6:cb:05:
                    d7:31:42:af:db:61:b6:5f:a2:96:d5:1f:04:67:a4:
                    b8:18:0b:a1:71:8a:91:ff:3a:99:98:d3:74:3b:ca:
                    0f:e5:ad:e9:e2:aa:9b:e8:7b:2b:d9:8c:f8:4e:76:
                    b6:61:0b:1c:69:da:09:d3:f7:eb:f6:93:35:1e:46:
                    37:f4:a4:a3:a1:b5:73:08:ef:68:8f:73:50:2f:3d:
                    c8:44:96:9a:8e:be:3a:7d:70:92:bf:88:6e:6d:61:
                    61:b2:2e:76:57:6b:ab:ae:c7:fd:61:48:6b:ca:67:
                    9a:e8:52:79:7d:65:04:06:c2:53:c0:97:0d:7b:f4:
                    b5:dd:0b:4e:e3:16:06:05:b8:96:a0:54:d0:c8:bd:
                    2c:8b:e7:17:ab:ef:34:27:4b:fd:e8:cd:d8:4f:8d:
                    d4:23:7b:d4:3e:11:69:37:c6:57:07:67:fd:94:1b:
                    9f:8b:7e:f1:31:0d:8f:6b:bb:35:06:39:64:39:97:
                    13:65:19:e5:21:c4:75:5d:04:18:1e:4c:21:46:9e:
                    e9:06:f2:9b:7f:67:2d:6a:7f:02:b6:ff:97:dc:c2:
                    83:3c:12:c8:a1:dd:06:b4:59:bb:12:18:e9:06:23:
                    4d:49:82:fe:9c:f7:1c:0b:b4:99:1d:2f:d0:06:a1:
                    9c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:26:D2:75:1D:87:B7:C5:AF:9D:79:C7:19:CA:9C:F9:58:0D:B1:12
            X509v3 Authority Key Identifier:
                keyid:9F:47:2E:07:BB:7E:D7:1E:84:73:1C:0B:2E:8F:68:BF:7A:6F:02:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/323830343a363438383a3a2f33342d3334203d3e20323639343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6488::/34

    Signature Algorithm: sha256WithRSAEncryption
         22:94:91:fd:cd:c3:66:b2:cd:b4:df:f9:55:1b:4f:66:23:7c:
         fc:d3:2c:50:94:b5:7c:e9:5c:95:87:4c:6a:7f:56:db:fc:9d:
         ab:5e:88:74:56:6a:52:7f:85:24:09:23:5d:c7:9d:55:8f:35:
         94:a7:c6:b1:e2:c1:47:7d:7d:55:53:65:e4:ad:a7:a6:a1:97:
         d0:79:49:c2:d8:5f:43:e1:bb:4c:d9:05:b9:be:d5:58:1d:4c:
         73:0f:ab:46:45:73:aa:a8:35:ef:db:ca:57:df:50:0d:5f:ea:
         9f:06:62:3a:ce:d0:d4:6d:96:6a:07:ae:c7:70:33:f0:ee:50:
         f7:53:cf:28:0e:95:a1:30:a8:9e:38:71:f5:8a:24:93:04:cc:
         6a:f0:90:4a:43:e1:8d:21:6e:aa:0f:b7:83:51:e5:9e:c5:54:
         74:23:c2:41:86:f7:ea:bc:26:7d:61:98:61:9f:4b:cc:39:49:
         e9:07:d3:c1:7a:c2:33:56:5f:85:2b:5a:aa:72:f5:ef:49:0b:
         b4:31:f7:d1:bd:6e:f4:a7:5f:86:86:04:07:b2:97:dc:fc:90:
         8c:05:1f:84:93:29:db:65:1f:78:36:f9:99:37:b3:ec:09:00:
         a1:0a:4e:3c:02:e4:f4:88:16:e6:f3:b8:e5:db:9c:e9:ab:66:
         90:34:1c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:28:17 2025 by rpki-client