Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/3137302e3233382e3138342e302f32332d3234203d3e20323636333338.roa
File:                     3137302e3233382e3138342e302f32332d3234203d3e20323636333338.roa (raw, json)
Hash identifier:          cLZqs/dTrLwFCbt9XNCsG90ObeLKemFIRKuuTx7OsTI=
Subject key identifier:   4C:16:DE:71:41:25:5C:93:19:D3:E8:F6:C2:67:21:EE:F1:79:7E:DF
Certificate issuer:       /CN=4EE0AA39E5673205B615B1337C24E86FBCD3C635
Certificate serial:       6E0E453A6B6AFE782A6F39BBD254F2866B0F2145
Authority key identifier: 4E:E0:AA:39:E5:67:32:05:B6:15:B1:33:7C:24:E8:6F:BC:D3:C6:35
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EE0AA39E5673205B615B1337C24E86FBCD3C635.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/3137302e3233382e3138342e302f32332d3234203d3e20323636333338.roa
Signing time:             Wed 03 Apr 2024 19:00:01 +0000
ROA not before:           Wed 03 Apr 2024 18:55:01 +0000
ROA not after:            Thu 03 Apr 2025 19:00:01 +0000
asID:                     266338
IP address blocks:        170.238.184.0/23 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:0e:45:3a:6b:6a:fe:78:2a:6f:39:bb:d2:54:f2:86:6b:0f:21:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EE0AA39E5673205B615B1337C24E86FBCD3C635
        Validity
            Not Before: Apr  3 18:55:01 2024 GMT
            Not After : Apr  3 19:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:69:9f:9b:68:30:2f:c9:b3:db:c7:46:ca:15:
                    06:91:72:5e:0d:c9:91:d1:22:db:c3:43:ca:3b:50:
                    57:8d:98:d2:c5:79:1f:9c:2e:0d:d7:03:17:e6:2c:
                    67:bd:cc:0f:58:ea:b2:d2:e8:ef:cc:9f:00:e2:ff:
                    81:a1:4e:88:8f:a2:ea:8e:21:6e:91:89:f9:3d:1c:
                    cc:63:90:f8:fa:97:5a:a5:7a:09:c0:47:b7:22:a3:
                    44:4a:b1:60:72:69:d8:d4:6e:8a:d7:c4:99:53:a3:
                    92:8b:34:00:61:d8:19:d3:97:bc:23:40:30:d7:9e:
                    4b:a4:55:3b:e9:66:8b:93:c6:1a:fe:7d:bf:5f:e5:
                    5e:67:c7:4b:ce:8f:40:06:34:97:87:6d:74:d8:62:
                    84:e6:39:c5:df:51:65:44:01:fd:8f:69:13:cd:1b:
                    be:11:8e:44:80:89:04:ef:e7:81:f2:b3:0b:9f:19:
                    4f:92:12:e0:be:59:4f:c4:ff:d3:9e:fe:7e:78:d1:
                    22:61:f5:53:09:6e:95:c4:65:0c:0d:98:b8:76:89:
                    fe:57:89:f1:d2:7f:09:82:8f:28:ec:8b:76:1d:0c:
                    78:d5:5e:7e:f1:a9:57:40:72:5e:ed:ec:7a:e2:93:
                    63:2d:6a:c6:69:83:37:8f:af:aa:c3:89:d7:b6:cf:
                    21:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:16:DE:71:41:25:5C:93:19:D3:E8:F6:C2:67:21:EE:F1:79:7E:DF
            X509v3 Authority Key Identifier:
                keyid:4E:E0:AA:39:E5:67:32:05:B6:15:B1:33:7C:24:E8:6F:BC:D3:C6:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/4EE0AA39E5673205B615B1337C24E86FBCD3C635.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4EE0AA39E5673205B615B1337C24E86FBCD3C635.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/1/3137302e3233382e3138342e302f32332d3234203d3e20323636333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bc:52:85:80:c3:6c:47:77:ab:25:d7:66:8e:72:f7:84:97:09:
         47:42:9f:67:cf:eb:40:e7:28:01:b0:33:e1:2f:ba:77:fc:57:
         f0:fa:7e:3f:c5:58:2d:b4:ad:5a:b8:f0:5a:8f:8e:0c:d2:15:
         77:10:ba:df:dc:82:31:59:77:1d:b1:86:82:8a:8f:7f:13:0c:
         be:4d:ea:ee:d7:11:64:92:f3:7b:3e:09:0b:75:59:ee:0b:37:
         32:c1:e3:91:db:a3:8b:13:13:3f:9f:72:cf:aa:70:dd:47:cf:
         cb:11:d1:e2:24:a2:d9:74:a6:90:d0:09:5c:e3:84:3a:86:36:
         ce:d9:28:2b:0a:5e:8f:2f:47:e0:36:25:91:eb:c0:3b:50:bf:
         f1:b1:c5:40:7e:c7:e0:59:a4:ca:10:5c:c5:6d:0b:04:d8:ea:
         d4:86:dc:ab:c3:99:ef:2f:ff:b9:fd:67:5f:d3:b6:1b:a5:95:
         b6:f2:ac:6d:72:5d:a2:c4:15:dc:47:37:e4:7e:9e:6c:6a:0f:
         86:30:40:a7:b1:98:d6:ac:fe:df:5e:7d:7b:ef:af:5f:07:0a:
         04:4d:09:62:e5:f2:bc:89:ec:f8:d8:84:16:83:60:c3:2b:63:
         a4:32:77:2a:76:ff:68:51:23:48:b2:a8:c1:a7:21:93:f6:59:
         c4:57:49:f6
-----BEGIN CERTIFICATE-----
MIIHRTCCBi2gAwIBAgIUbg5FOmtq/ngqbzm70lTyhmsPIUUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEVFMEFBMzlFNTY3MzIwNUI2MTVCMTMzN0MyNEU4NkZC
Q0QzQzYzNTAeFw0yNDA0MDMxODU1MDFaFw0yNTA0MDMxOTAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzc2OTlGOUI2ODMwMkZDOUIz
REJDNzQ2Q0ExNTA2OTE3MjVFMERDOTkxRDEyMkRCQzM0M0NBM0I1MDU3OEQ5OEQy
QzU3OTFGOUMyRTBERDcwMzE3RTYyQzY3QkRDQzBGNThFQUIyRDJFOEVGQ0M5RjAw
RTJGRjgxQTE0RTg4OEZBMkVBOEUyMTZFOTE4OUY5M0QxQ0NDNjM5MEY4RkE5NzVB
QTU3QTA5QzA0N0I3MjJBMzQ0NEFCMTYwNzI2OUQ4RDQ2RThBRDdDNDk5NTNBMzky
OEIzNDAwNjFEODE5RDM5N0JDMjM0MDMwRDc5RTRCQTQ1NTNCRTk2NjhCOTNDNjFB
RkU3REJGNUZFNTVFNjdDNzRCQ0U4RjQwMDYzNDk3ODc2RDc0RDg2Mjg0RTYzOUM1
REY1MTY1NDQwMUZEOEY2OTEzQ0QxQkJFMTE4RTQ0ODA4OTA0RUZFNzgxRjJCMzBC
OUYxOTRGOTIxMkUwQkU1OTRGQzRGRkQzOUVGRTdFNzhEMTIyNjFGNTUzMDk2RTk1
QzQ2NTBDMEQ5OEI4NzY4OUZFNTc4OUYxRDI3RjA5ODI4RjI4RUM4Qjc2MUQwQzc4
RDU1RTdFRjFBOTU3NDA3MjVFRURFQzdBRTI5MzYzMkQ2QUM2Njk4MzM3OEZBRkFB
QzM4OUQ3QjZDRjIxMUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAx2mfm2gwL8mz28dGyhUGkXJeDcmR0SLbw0PKO1BXjZjSxXkfnC4N
1wMX5ixnvcwPWOqy0ujvzJ8A4v+BoU6Ij6LqjiFukYn5PRzMY5D4+pdapXoJwEe3
IqNESrFgcmnY1G6K18SZU6OSizQAYdgZ05e8I0Aw155LpFU76WaLk8Ya/n2/X+Ve
Z8dLzo9ABjSXh2102GKE5jnF31FlRAH9j2kTzRu+EY5EgIkE7+eB8rMLnxlPkhLg
vllPxP/Tnv5+eNEiYfVTCW6VxGUMDZi4don+V4nx0n8Jgo8o7It2HQx41V5+8alX
QHJe7ex64pNjLWrGaYM3j6+qw4nXts8hHwIDAQABo4ICUzCCAk8wHQYDVR0OBBYE
FEwW3nFBJVyTGdPo9sJnIe7xeX7fMB8GA1UdIwQYMBaAFE7gqjnlZzIFthWxM3wk
6G+808Y1MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0NNNjFZWDQ4Rnh2cTlV
VEs1N2FHUTVaZmhLMWo4cGppb2hwVUtOcGVrSDU1LzEvNEVFMEFBMzlFNTY3MzIw
NUI2MTVCMTMzN0MyNEU4NkZCQ0QzQzYzNS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS80RUUwQUEzOUU1NjczMjA1QjYxNUIxMzM3QzI0RTg2RkJDRDND
NjM1LmNlcjCBsAYIKwYBBQUHAQsEgaMwgaAwgZ0GCCsGAQUFBzALhoGQcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9DTTYxWVg0OEZ4dnE5VVRLNTdh
R1E1WmZoSzFqOHBqaW9ocFVLTnBla0g1NS8xLzMxMzczMDJlMzIzMzM4MmUzMTM4
MzQyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMjM2MzYzMzMzMzgucm9hMBgGA1Ud
IAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAGq7rgwDQYJKoZIhvcNAQELBQADggEBALxShYDDbEd3qyXXZo5y94SXCUdCn2fP
60DnKAGwM+Evunf8V/D6fj/FWC20rVq48FqPjgzSFXcQut/cgjFZdx2xhoKKj38T
DL5N6u7XEWSS83s+CQt1We4LNzLB45Hbo4sTEz+fcs+qcN1Hz8sR0eIkotl0ppDQ
CVzjhDqGNs7ZKCsKXo8vR+A2JZHrwDtQv/GxxUB+x+BZpMoQXMVtCwTY6tSG3KvD
me8v/7n9Z1/TthullbbyrG1yXaLEFdxHN+R+nmxqD4YwQKexmNas/t9efXvvr18H
CgRNCWLl8ryJ7PjYhBaDYMMrY6Qydyp2/2hRI0iyqMGnIZP2WcRXSfY=
-----END CERTIFICATE-----
Generated at Sun Apr 13 00:01:24 2025 by rpki-client