Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/34352e3138352e3232382e302f32342d3234203d3e20323639343333.roa
File:                     34352e3138352e3232382e302f32342d3234203d3e20323639343333.roa (raw, json)
Hash identifier:          HIZLFzz3t4jHmE6BJD2+a0O8thp4dZogXOQgiuKro6E=
Subject key identifier:   6B:D6:5C:48:A5:BE:15:21:01:74:28:CD:32:04:89:27:CF:C4:33:CA
Certificate issuer:       /CN=9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3
Certificate serial:       5AC33A55EDDF63EFE8C8A8EA26797A49B26C4215
Authority key identifier: 9F:47:2E:07:BB:7E:D7:1E:84:73:1C:0B:2E:8F:68:BF:7A:6F:02:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/34352e3138352e3232382e302f32342d3234203d3e20323639343333.roa
Signing time:             Thu 04 Apr 2024 23:51:23 +0000
ROA not before:           Thu 04 Apr 2024 23:46:23 +0000
ROA not after:            Thu 03 Apr 2025 23:51:23 +0000
asID:                     269433
IP address blocks:        45.185.228.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:c3:3a:55:ed:df:63:ef:e8:c8:a8:ea:26:79:7a:49:b2:6c:42:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3
        Validity
            Not Before: Apr  4 23:46:23 2024 GMT
            Not After : Apr  3 23:51:23 2025 GMT
        Subject: CN=6BD65C48A5BE1521017428CD32048927CFC433CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:57:93:2e:1d:80:8a:9a:0c:99:9c:42:e9:ec:
                    6a:7a:f1:91:08:9a:72:2d:d7:ea:a8:c3:3f:29:7a:
                    eb:fd:d1:4e:41:29:78:a8:d3:df:0d:25:36:a9:1f:
                    d3:23:03:24:7a:45:88:64:f3:ce:c2:53:32:09:4c:
                    a0:af:f6:80:ae:07:50:36:33:17:cc:ac:42:20:24:
                    7b:a5:47:0f:fa:0b:ce:27:ce:89:47:99:c7:eb:2a:
                    9f:bb:c3:41:28:1e:8a:e2:8d:bc:81:0d:5a:d1:17:
                    80:8b:60:4e:43:e1:2b:25:8c:b7:bd:62:69:e1:ed:
                    05:42:e0:bb:4d:2c:04:4d:e6:99:7d:09:0c:44:89:
                    d3:a0:02:4d:5b:a0:a7:02:9e:b0:43:72:3a:5f:2a:
                    50:f9:28:d4:40:45:a8:49:8b:39:ed:71:a1:c5:f5:
                    d1:5b:ad:33:cd:1d:1e:e3:25:82:a8:26:08:2e:f5:
                    ae:a5:0f:75:2a:73:e2:11:18:4e:33:25:ca:1c:fe:
                    bb:1c:88:89:36:23:3d:ef:45:51:2a:85:bf:1c:61:
                    b6:91:55:93:2d:f9:9c:c3:11:11:34:2b:4b:4d:41:
                    a4:88:09:34:13:7f:6f:06:ba:8c:f7:19:ff:cf:e2:
                    81:5c:bb:e7:7a:4e:ae:ec:a6:f0:f0:7e:4e:48:d1:
                    22:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:D6:5C:48:A5:BE:15:21:01:74:28:CD:32:04:89:27:CF:C4:33:CA
            X509v3 Authority Key Identifier:
                keyid:9F:47:2E:07:BB:7E:D7:1E:84:73:1C:0B:2E:8F:68:BF:7A:6F:02:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/34352e3138352e3232382e302f32342d3234203d3e20323639343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:17:56:a1:e5:12:bb:8a:16:77:51:37:8f:94:9d:c9:f6:ea:
         26:0a:f5:c5:2f:80:eb:86:33:b4:2c:2e:c2:35:de:c1:31:34:
         75:bf:99:b9:80:41:6a:b6:10:52:03:6d:bc:63:80:d9:a4:1f:
         2e:09:14:6d:42:0d:03:af:ab:36:84:44:d6:3b:87:c5:f3:c2:
         74:f4:49:36:d5:7c:77:d9:0a:01:ac:b9:a7:1d:98:56:2c:9b:
         b0:f8:27:2d:6b:12:77:a8:9f:ec:1e:b9:9b:47:78:ae:9c:f3:
         91:ea:e7:0c:cc:00:d1:58:ec:81:d7:ec:ce:13:b2:19:05:be:
         04:75:86:75:30:bb:06:e4:db:ba:3d:27:53:9b:a1:03:48:b1:
         46:97:e9:3f:98:3c:02:c5:36:b0:ca:ce:9f:d8:52:ea:46:18:
         27:48:a1:59:cc:23:9c:98:94:96:f3:08:88:73:f9:ef:7d:22:
         98:21:2e:64:5f:39:be:e9:1a:23:ba:33:71:d4:58:7b:f8:d8:
         10:66:94:c0:66:fc:83:b7:d8:34:df:92:80:5c:66:54:d5:75:
         41:f2:5a:a7:22:f1:58:69:d0:f3:b6:bb:04:af:89:5e:ec:a2:
         6b:24:6e:12:bf:04:64:f7:6b:5a:20:69:a8:f6:12:88:34:0a:
         44:1b:cf:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 19:37:40 2025 by rpki-client