Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/323830343a363438383a633030303a3a2f33342d3334203d3e20323639343333.roa
File:                     323830343a363438383a633030303a3a2f33342d3334203d3e20323639343333.roa (raw, json)
Hash identifier:          42ap00+xFqRNzWL729wXGnmm9BqX5i9Xjc21jFLg9ME=
Subject key identifier:   B9:50:F2:28:22:B7:60:3D:D6:CE:B2:6C:16:28:24:15:AD:80:42:0F
Certificate issuer:       /CN=9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3
Certificate serial:       2A16CE39C52D1D8AB805C965342B633DDF068936
Authority key identifier: 9F:47:2E:07:BB:7E:D7:1E:84:73:1C:0B:2E:8F:68:BF:7A:6F:02:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/323830343a363438383a633030303a3a2f33342d3334203d3e20323639343333.roa
Signing time:             Thu 04 Apr 2024 23:51:24 +0000
ROA not before:           Thu 04 Apr 2024 23:46:24 +0000
ROA not after:            Thu 03 Apr 2025 23:51:24 +0000
asID:                     269433
IP address blocks:        2804:6488:c000::/34 maxlen: 34
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:16:ce:39:c5:2d:1d:8a:b8:05:c9:65:34:2b:63:3d:df:06:89:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3
        Validity
            Not Before: Apr  4 23:46:24 2024 GMT
            Not After : Apr  3 23:51:24 2025 GMT
        Subject: CN=B950F22822B7603DD6CEB26C16282415AD80420F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:7c:b8:4e:54:a9:42:1c:c4:06:08:a0:a2:e1:
                    e6:ef:63:bf:bc:87:20:dd:73:32:1c:d2:52:8d:7f:
                    9f:a4:ab:7c:c1:dd:e0:72:de:8e:1b:95:3f:b7:63:
                    64:c6:d1:96:7d:07:55:ba:2c:ab:2b:5b:86:87:66:
                    09:be:a2:1f:f8:9b:dc:88:f2:90:d6:42:7f:ab:44:
                    9c:c7:c3:8b:cd:a0:7d:71:16:24:f7:71:a2:0e:c8:
                    fe:e3:40:a5:9a:15:5d:37:39:f6:f8:95:18:df:10:
                    58:ba:1d:08:4e:1e:19:ff:9b:50:fd:b2:e1:c1:08:
                    31:1e:e1:74:7b:4b:cf:e4:46:d1:08:07:77:c2:af:
                    c6:92:8b:47:6d:eb:a7:dc:40:28:70:52:34:cc:9e:
                    2f:bb:a1:08:66:3f:db:16:26:34:31:b3:86:10:63:
                    5d:9b:7f:c4:fd:79:dc:7c:49:b4:00:a9:ab:db:4a:
                    8d:1c:87:b0:70:39:9c:c6:e5:82:a8:9d:fa:9b:49:
                    02:59:19:89:25:73:3e:59:9f:f6:30:bf:a6:b7:fd:
                    e0:8a:9f:79:51:d5:4f:6c:de:97:fc:d9:7e:bb:6d:
                    62:df:ea:0a:86:1f:13:b7:76:0b:67:be:12:ba:0a:
                    bf:ec:b1:61:ef:f5:64:76:45:1d:45:2a:34:1b:05:
                    88:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:50:F2:28:22:B7:60:3D:D6:CE:B2:6C:16:28:24:15:AD:80:42:0F
            X509v3 Authority Key Identifier:
                keyid:9F:47:2E:07:BB:7E:D7:1E:84:73:1C:0B:2E:8F:68:BF:7A:6F:02:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/323830343a363438383a633030303a3a2f33342d3334203d3e20323639343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6488:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         b7:fe:81:d4:b8:4e:d0:c2:75:4b:03:b4:2f:ee:c8:b0:47:26:
         15:6f:47:7d:b1:6f:ce:21:33:1d:bd:af:7b:7b:e5:91:16:56:
         41:41:91:fa:c8:3c:e4:96:02:aa:d4:87:9c:54:20:ea:d3:78:
         2f:e9:04:1d:1b:bc:ce:d2:f8:c9:18:dd:5a:24:b7:68:06:39:
         ff:97:f8:ce:bd:bf:02:d8:68:69:4c:68:17:b3:01:1d:87:b3:
         60:28:1a:f6:ba:e1:9c:f4:27:66:89:ce:cc:9d:f8:c5:26:b6:
         ce:6b:bc:01:b1:29:a5:dc:5d:c1:c7:0e:3d:58:57:dc:8c:53:
         70:ea:ee:9c:2d:fc:c3:ec:c9:31:b5:2f:7b:c2:f4:73:56:72:
         7f:66:e3:36:d9:e8:cc:2a:bf:83:05:64:27:ac:94:d1:7a:7c:
         2b:99:47:67:de:b9:bd:65:6c:f5:c5:6b:1b:3d:82:8c:88:5d:
         70:83:f7:e2:cd:ff:18:b0:68:42:74:d2:1a:39:bc:57:a5:cf:
         24:5a:fd:bf:84:c5:f8:78:2a:65:4f:e9:ab:1a:28:f2:20:dc:
         b7:4a:8a:a6:c1:d4:22:88:93:d3:7f:ba:97:56:99:c7:38:02:
         03:5b:00:4d:11:1d:db:86:03:57:e6:b8:8e:47:1b:28:e7:2b:
         ed:93:6e:63
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUKhbOOcUtHYq4BcllNCtjPd8GiTYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUY0NzJFMDdCQjdFRDcxRTg0NzMxQzBCMkU4RjY4QkY3
QTZGMDJEMzAeFw0yNDA0MDQyMzQ2MjRaFw0yNTA0MDMyMzUxMjRaMDMxMTAvBgNV
BAMTKEI5NTBGMjI4MjJCNzYwM0RENkNFQjI2QzE2MjgyNDE1QUQ4MDQyMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHfLhOVKlCHMQGCKCi4ebvY7+8
hyDdczIc0lKNf5+kq3zB3eBy3o4blT+3Y2TG0ZZ9B1W6LKsrW4aHZgm+oh/4m9yI
8pDWQn+rRJzHw4vNoH1xFiT3caIOyP7jQKWaFV03Ofb4lRjfEFi6HQhOHhn/m1D9
suHBCDEe4XR7S8/kRtEIB3fCr8aSi0dt66fcQChwUjTMni+7oQhmP9sWJjQxs4YQ
Y12bf8T9edx8SbQAqavbSo0ch7BwOZzG5YKonfqbSQJZGYklcz5Zn/Ywv6a3/eCK
n3lR1U9s3pf82X67bWLf6gqGHxO3dgtnvhK6Cr/ssWHv9WR2RR1FKjQbBYgvAgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUuVDyKCK3YD3WzrJsFigkFa2AQg8wHwYDVR0j
BBgwFoAUn0cuB7t+1x6EcxwLLo9ov3pvAtMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmk2Umg0clUyeTY2MWdoYzloZVpRUVVlQXBlUHg2Mk5QZGRjN3E1eEZB
RGgvMS85RjQ3MkUwN0JCN0VENzFFODQ3MzFDMEIyRThGNjhCRjdBNkYwMkQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlGNDcyRTA3QkI3RUQ3MUU4
NDczMUMwQjJFOEY2OEJGN0E2RjAyRDMuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZpNlJoNHJVMnk2NjFnaGM5aGVaUVFVZUFwZVB4NjJOUGRkYzdxNXhGQURoLzEv
MzIzODMwMzQzYTM2MzQzODM4M2E2MzMwMzAzMDNhM2EyZjMzMzQyZDMzMzQyMDNk
M2UyMDMyMzYzOTM0MzMzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBigEZIjAMA0GCSqGSIb3DQEBCwUA
A4IBAQC3/oHUuE7QwnVLA7Qv7siwRyYVb0d9sW/OITMdva97e+WRFlZBQZH6yDzk
lgKq1IecVCDq03gv6QQdG7zO0vjJGN1aJLdoBjn/l/jOvb8C2GhpTGgXswEdh7Ng
KBr2uuGc9Cdmic7MnfjFJrbOa7wBsSml3F3Bxw49WFfcjFNw6u6cLfzD7MkxtS97
wvRzVnJ/ZuM22ejMKr+DBWQnrJTRenwrmUdn3rm9ZWz1xWsbPYKMiF1wg/fizf8Y
sGhCdNIaObxXpc8kWv2/hMX4eCplT+mrGijyINy3SoqmwdQiiJPTf7qXVpnHOAID
WwBNER3bhgNX5riORxso5yvtk25j
-----END CERTIFICATE-----
Generated at Fri Apr 18 19:32:26 2025 by rpki-client