Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/34352e3138352e3232392e302f32342d3234203d3e20323639343333.roa
File:                     34352e3138352e3232392e302f32342d3234203d3e20323639343333.roa (raw, json)
Hash identifier:          c3vSAdaHzwkm4eT3o/jWbF2qiCHA3biq6nPKZhgeUWk=
Subject key identifier:   44:33:30:80:E4:C0:98:44:3C:41:7E:A8:57:81:79:34:2C:81:38:4A
Certificate issuer:       /CN=9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3
Certificate serial:       464A4686AF7E2B8F9BD4291D9C80DCA9D9AD5DD6
Authority key identifier: 9F:47:2E:07:BB:7E:D7:1E:84:73:1C:0B:2E:8F:68:BF:7A:6F:02:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/34352e3138352e3232392e302f32342d3234203d3e20323639343333.roa
Signing time:             Thu 04 Apr 2024 23:51:24 +0000
ROA not before:           Thu 04 Apr 2024 23:46:24 +0000
ROA not after:            Thu 03 Apr 2025 23:51:24 +0000
asID:                     269433
IP address blocks:        45.185.229.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:4a:46:86:af:7e:2b:8f:9b:d4:29:1d:9c:80:dc:a9:d9:ad:5d:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3
        Validity
            Not Before: Apr  4 23:46:24 2024 GMT
            Not After : Apr  3 23:51:24 2025 GMT
        Subject: CN=44333080E4C098443C417EA8578179342C81384A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:75:68:01:8c:a6:48:b7:6a:c7:ae:1e:66:6c:
                    40:25:c1:9d:a9:b6:fe:b8:0d:e5:47:43:c7:17:4e:
                    c4:c0:69:33:ab:19:4f:fa:34:b8:fc:42:a9:8b:8e:
                    c9:a7:e9:19:c1:c3:38:6e:3d:74:28:b1:ed:e7:ee:
                    bd:98:a5:34:25:a1:6c:8e:fb:c2:c3:36:9c:88:d0:
                    c0:1a:66:55:6d:1e:8e:33:2d:ad:14:ec:64:ec:f9:
                    86:c4:9c:22:76:96:6d:f8:9d:01:61:51:a7:36:90:
                    d3:53:91:f9:22:4d:e4:06:33:52:b1:5f:aa:87:1b:
                    f5:d2:7b:5b:3f:d7:5b:77:d2:0c:17:1d:a4:0f:d2:
                    86:ad:ab:72:1a:37:8e:4d:92:96:86:23:e8:a6:1e:
                    1f:41:e9:7f:5b:83:69:30:2b:ff:fd:08:a0:c4:27:
                    25:97:26:a8:44:96:33:b3:74:45:ae:a5:97:70:4a:
                    9a:fc:38:8b:bf:88:f3:94:2a:88:a1:13:73:4f:60:
                    d9:7c:b3:dc:a8:70:66:9e:ff:0d:5e:d7:2f:73:6f:
                    5f:59:bb:2f:41:77:de:f2:3f:25:ca:71:7a:b9:9d:
                    da:fd:ad:43:45:87:30:b2:f6:6c:d6:a2:e3:0e:13:
                    bb:89:fc:cc:c3:17:1b:cd:76:cf:55:70:ac:28:91:
                    a5:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:33:30:80:E4:C0:98:44:3C:41:7E:A8:57:81:79:34:2C:81:38:4A
            X509v3 Authority Key Identifier:
                keyid:9F:47:2E:07:BB:7E:D7:1E:84:73:1C:0B:2E:8F:68:BF:7A:6F:02:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9F472E07BB7ED71E84731C0B2E8F68BF7A6F02D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/1/34352e3138352e3232392e302f32342d3234203d3e20323639343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:f4:b1:d6:5c:d1:91:b3:d2:d0:2b:51:57:70:99:88:fc:bd:
         f4:3d:e5:d8:dc:5c:7a:02:fa:2c:ba:bb:ee:a5:97:ba:80:02:
         41:69:de:17:17:3f:b8:d0:fb:29:d7:9d:88:07:12:36:9c:99:
         b5:df:1c:95:da:ff:f0:2a:49:82:33:fa:dc:76:31:6e:71:48:
         71:ac:08:ff:b4:06:b9:30:43:3f:6d:fb:16:de:81:08:c2:42:
         5d:d1:2e:d6:f6:08:6b:07:20:4e:38:98:c2:00:d3:57:05:c4:
         6e:1d:a8:9a:a9:7f:aa:cf:27:4b:6a:eb:3e:f1:76:a3:f0:c3:
         08:08:e6:f8:4f:70:20:f1:ce:39:2b:39:64:36:85:73:29:ed:
         63:73:0a:ef:cb:a1:cb:88:b5:d1:f3:4b:2b:08:de:05:c1:56:
         0d:f0:cd:27:02:15:30:cb:d1:66:bf:59:f1:ce:d0:3c:88:be:
         eb:f3:05:88:6e:5a:77:56:56:bd:0a:b2:48:0f:39:ce:4b:ab:
         4c:76:8e:16:ea:5f:11:19:10:4e:b9:99:b2:94:20:ec:c2:7a:
         be:3f:5a:c8:4d:74:74:1d:40:d4:cd:2f:f8:24:67:1f:ac:81:
         73:ee:de:87:68:ed:cc:47:01:4b:d7:24:ff:6f:06:24:a9:85:
         75:7f:94:00
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURkpGhq9+K4+b1CkdnIDcqdmtXdYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUY0NzJFMDdCQjdFRDcxRTg0NzMxQzBCMkU4RjY4QkY3
QTZGMDJEMzAeFw0yNDA0MDQyMzQ2MjRaFw0yNTA0MDMyMzUxMjRaMDMxMTAvBgNV
BAMTKDQ0MzMzMDgwRTRDMDk4NDQzQzQxN0VBODU3ODE3OTM0MkM4MTM4NEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFdWgBjKZIt2rHrh5mbEAlwZ2p
tv64DeVHQ8cXTsTAaTOrGU/6NLj8QqmLjsmn6RnBwzhuPXQose3n7r2YpTQloWyO
+8LDNpyI0MAaZlVtHo4zLa0U7GTs+YbEnCJ2lm34nQFhUac2kNNTkfkiTeQGM1Kx
X6qHG/XSe1s/11t30gwXHaQP0oatq3IaN45NkpaGI+imHh9B6X9bg2kwK//9CKDE
JyWXJqhEljOzdEWupZdwSpr8OIu/iPOUKoihE3NPYNl8s9yocGae/w1e1y9zb19Z
uy9Bd97yPyXKcXq5ndr9rUNFhzCy9mzWouMOE7uJ/MzDFxvNds9VcKwokaXPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQURDMwgOTAmEQ8QX6oV4F5NCyBOEowHwYDVR0j
BBgwFoAUn0cuB7t+1x6EcxwLLo9ov3pvAtMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmk2Umg0clUyeTY2MWdoYzloZVpRUVVlQXBlUHg2Mk5QZGRjN3E1eEZB
RGgvMS85RjQ3MkUwN0JCN0VENzFFODQ3MzFDMEIyRThGNjhCRjdBNkYwMkQzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlGNDcyRTA3QkI3RUQ3MUU4
NDczMUMwQjJFOEY2OEJGN0E2RjAyRDMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZpNlJoNHJVMnk2NjFnaGM5aGVaUVFVZUFwZVB4NjJOUGRkYzdxNXhGQURoLzEv
MzQzNTJlMzEzODM1MmUzMjMyMzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzNDMzMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtueUwDQYJKoZIhvcNAQELBQADggEBAL70sdZc
0ZGz0tArUVdwmYj8vfQ95djcXHoC+iy6u+6ll7qAAkFp3hcXP7jQ+ynXnYgHEjac
mbXfHJXa//AqSYIz+tx2MW5xSHGsCP+0BrkwQz9t+xbegQjCQl3RLtb2CGsHIE44
mMIA01cFxG4dqJqpf6rPJ0tq6z7xdqPwwwgI5vhPcCDxzjkrOWQ2hXMp7WNzCu/L
ocuItdHzSysI3gXBVg3wzScCFTDL0Wa/WfHO0DyIvuvzBYhuWndWVr0KskgPOc5L
q0x2jhbqXxEZEE65mbKUIOzCer4/WshNdHQdQNTNL/gkZx+sgXPu3odo7cxHAUvX
JP9vBiSphXV/lAA=
-----END CERTIFICATE-----
Generated at Fri Apr 18 19:37:45 2025 by rpki-client