Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ApE4saDhXZKsctXbwTzFRNAmKAVxx2PnP62vymXoymim/1/323830343a363939383a3a2f33322d3333203d3e20323632353734.roa
File:                     323830343a363939383a3a2f33322d3333203d3e20323632353734.roa (raw, json)
Hash identifier:          r4jkt3GYqicWc7jA5l2JMQjdO8U0jnj7k/2+hQqKzwQ=
Subject key identifier:   69:7C:69:4C:93:2A:42:E5:F9:A9:4A:48:88:65:52:E1:AC:CA:A0:78
Certificate issuer:       /CN=748787010CE9A73A6FC8B212C63184EE1F098B46
Certificate serial:       74690925A38591D5A8386B8B61B41AB0AAFCAD50
Authority key identifier: 74:87:87:01:0C:E9:A7:3A:6F:C8:B2:12:C6:31:84:EE:1F:09:8B:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/748787010CE9A73A6FC8B212C63184EE1F098B46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ApE4saDhXZKsctXbwTzFRNAmKAVxx2PnP62vymXoymim/1/323830343a363939383a3a2f33322d3333203d3e20323632353734.roa
Signing time:             Thu 04 Apr 2024 21:51:12 +0000
ROA not before:           Thu 04 Apr 2024 21:46:12 +0000
ROA not after:            Thu 03 Apr 2025 21:51:12 +0000
asID:                     262574
IP address blocks:        2804:6998::/32 maxlen: 33
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:69:09:25:a3:85:91:d5:a8:38:6b:8b:61:b4:1a:b0:aa:fc:ad:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=748787010CE9A73A6FC8B212C63184EE1F098B46
        Validity
            Not Before: Apr  4 21:46:12 2024 GMT
            Not After : Apr  3 21:51:12 2025 GMT
        Subject: CN=697C694C932A42E5F9A94A48886552E1ACCAA078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:96:6c:0a:c1:a1:c4:fa:9d:30:c9:31:f8:8c:
                    1b:fe:de:22:c5:66:9a:fa:e0:eb:7f:ea:81:fd:aa:
                    5b:b8:8d:eb:1a:1f:a5:60:ca:28:fb:86:b2:f7:47:
                    bd:74:15:43:f7:59:2e:15:5a:38:5e:c4:46:6e:f8:
                    31:45:54:a3:dd:be:51:85:fc:33:72:67:2f:16:55:
                    2b:f1:22:63:0e:30:65:58:80:c4:88:da:ec:04:8e:
                    6d:cd:33:3b:ac:d3:42:3a:c9:3c:31:0c:f8:1a:2a:
                    c3:fb:7c:79:e7:58:51:7c:ed:42:90:7d:4c:67:97:
                    57:16:82:ff:50:29:fd:94:18:a0:18:47:3f:af:39:
                    02:fc:36:a8:0b:4a:04:f3:c4:71:f1:3c:6e:30:c3:
                    04:73:7a:b2:1d:11:ee:41:a7:b8:b0:ac:3b:c4:6c:
                    0e:6a:27:11:22:71:22:38:d5:67:66:94:5d:1c:ef:
                    0d:97:81:9f:56:96:99:ad:be:e8:f0:0f:23:66:c4:
                    42:ec:c0:f8:5c:06:cd:75:09:e3:d3:c3:fa:29:1c:
                    ab:d2:52:af:5c:a3:a3:50:46:01:b0:4f:41:fd:b5:
                    ee:49:aa:8b:fa:8e:f7:d4:72:39:a5:a5:9e:6e:bd:
                    d3:1f:35:84:41:77:88:ef:41:56:d9:c6:6a:d3:f2:
                    cc:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:7C:69:4C:93:2A:42:E5:F9:A9:4A:48:88:65:52:E1:AC:CA:A0:78
            X509v3 Authority Key Identifier:
                keyid:74:87:87:01:0C:E9:A7:3A:6F:C8:B2:12:C6:31:84:EE:1F:09:8B:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ApE4saDhXZKsctXbwTzFRNAmKAVxx2PnP62vymXoymim/1/748787010CE9A73A6FC8B212C63184EE1F098B46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/748787010CE9A73A6FC8B212C63184EE1F098B46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ApE4saDhXZKsctXbwTzFRNAmKAVxx2PnP62vymXoymim/1/323830343a363939383a3a2f33322d3333203d3e20323632353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6998::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:f4:4f:7d:39:7f:bd:1d:4d:c6:6e:42:d5:68:71:13:ee:e1:
         d1:76:50:42:5e:ce:1a:7d:ff:b9:2d:cc:21:29:b5:59:3c:3b:
         c7:ff:ca:aa:36:b0:0d:d8:04:4e:9d:72:d3:46:d3:8c:1d:3d:
         94:e8:5e:a8:f6:d8:55:ff:0b:e0:20:b1:74:14:8d:b0:e8:3b:
         b2:87:cc:a6:d2:fb:c6:cb:f9:05:e3:d0:fb:7a:ed:ba:9b:82:
         2f:e6:6b:b2:69:a2:1e:ee:89:0d:4a:6a:b0:d6:3c:66:7e:4c:
         8c:c8:4d:5f:d8:ce:36:42:13:99:fa:5f:8a:9b:dc:7e:10:bc:
         4b:42:8c:73:42:59:ff:1a:4e:9b:60:a9:50:b0:3b:16:7d:3e:
         42:22:17:8b:bf:61:2d:4d:de:ab:e1:c3:64:92:29:23:a1:13:
         82:4c:53:f2:6b:5b:10:07:d6:a5:3b:5e:1b:81:b8:26:4e:e8:
         ec:31:d1:7a:7a:4d:3f:5e:15:65:5c:d7:cd:89:cb:63:7c:ab:
         87:8e:d7:0e:2f:dd:77:cc:a3:c5:53:61:b6:0c:02:cb:09:6f:
         f3:bf:fb:76:d1:13:b2:7f:f9:8a:5f:60:87:9f:0d:43:41:3a:
         5a:16:a3:5b:9d:90:79:be:4f:19:43:de:0b:3d:ca:67:74:05:
         f3:21:54:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 13:06:14 2025 by rpki-client