Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a363030303a3a2f33362d3336203d3e20323634323437.roa
File:                     323830343a323465343a363030303a3a2f33362d3336203d3e20323634323437.roa (raw, json)
Hash identifier:          M7YZ5e706E7dIMLk8h6QUDdrANHdHSjQuVyWjPGXQLQ=
Subject key identifier:   21:77:F8:F9:6F:7F:5E:96:98:3F:1D:A1:BD:5B:39:F1:77:53:5F:79
Certificate issuer:       /CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
Certificate serial:       730556E6A3E8FCD5AF5C1C26A2EAF53AF0F20DA7
Authority key identifier: 12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a363030303a3a2f33362d3336203d3e20323634323437.roa
Signing time:             Wed 03 Apr 2024 18:31:20 +0000
ROA not before:           Wed 03 Apr 2024 18:26:20 +0000
ROA not after:            Wed 02 Apr 2025 18:31:20 +0000
asID:                     264247
IP address blocks:        2804:24e4:6000::/36 maxlen: 36
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:05:56:e6:a3:e8:fc:d5:af:5c:1c:26:a2:ea:f5:3a:f0:f2:0d:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=12FE16FACD299316FCEF73CFEA782844D7C2E698
        Validity
            Not Before: Apr  3 18:26:20 2024 GMT
            Not After : Apr  2 18:31:20 2025 GMT
        Subject: CN=2177F8F96F7F5E96983F1DA1BD5B39F177535F79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:32:a0:fe:55:a5:9d:d1:98:05:39:b3:b4:24:
                    65:d3:25:63:dc:be:c8:94:98:5c:7c:c7:2a:34:87:
                    4f:68:78:84:ff:ff:c8:22:3f:a6:ba:f4:ac:fc:83:
                    d5:40:66:1a:5f:1f:88:12:cd:fc:6e:ca:57:27:00:
                    51:b4:e5:21:d5:9f:2a:b6:19:44:9d:da:46:c7:e8:
                    3c:02:77:f5:ab:4d:3e:87:9b:d8:59:f2:45:ae:a0:
                    b3:0c:74:87:64:c8:13:ac:59:18:45:60:b7:94:3d:
                    3a:b3:c0:94:18:bd:6b:03:30:42:5a:06:e0:8b:a4:
                    0d:a0:08:9c:5c:01:21:bf:97:24:b1:bf:6a:30:8d:
                    14:73:5e:10:aa:be:98:a7:37:df:d0:01:40:01:ba:
                    4a:37:78:86:30:e4:bc:7c:62:b0:df:c2:3d:a9:31:
                    b9:68:75:f3:14:b7:8c:29:b3:c4:1b:30:ce:96:47:
                    b0:b4:0e:10:10:6f:f4:b9:ab:f5:89:e1:21:0d:93:
                    ed:5f:2d:ad:9a:5e:2c:fb:07:12:ab:81:f9:e0:55:
                    28:40:f7:8a:6c:f6:c3:7d:9a:54:4a:55:78:4e:2f:
                    29:3b:1e:4d:c2:1d:0e:aa:8f:a2:d4:16:db:b1:d8:
                    cd:ed:94:94:21:37:a6:09:20:e9:49:a9:a5:c9:e6:
                    b9:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:77:F8:F9:6F:7F:5E:96:98:3F:1D:A1:BD:5B:39:F1:77:53:5F:79
            X509v3 Authority Key Identifier:
                keyid:12:FE:16:FA:CD:29:93:16:FC:EF:73:CF:EA:78:28:44:D7:C2:E6:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/12FE16FACD299316FCEF73CFEA782844D7C2E698.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiAttLiDLirDR32qgefNhL3svHSaHtUym3GqhuZXV4ts/1/323830343a323465343a363030303a3a2f33362d3336203d3e20323634323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24e4:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         6f:25:04:29:f2:93:67:e2:f0:01:10:0c:94:36:cb:4d:1c:34:
         2c:e1:e4:a8:00:61:5c:31:ef:9c:af:41:52:90:d5:8c:34:2a:
         e8:5c:ad:14:09:41:de:6d:96:77:8f:2f:58:d2:ec:a3:a1:c0:
         22:0c:26:8f:46:cf:4c:d5:44:7d:d1:d3:a1:b3:c1:83:9f:e2:
         57:ef:d2:0b:62:3d:4f:5b:23:6e:a3:57:5f:64:62:94:43:0a:
         ff:39:3c:6c:87:c9:6e:51:f4:84:99:09:a2:6a:a6:3a:40:2d:
         05:8a:a2:2f:8d:42:b8:fa:67:98:5d:13:9b:42:2b:bf:d9:ab:
         9e:8d:60:43:ad:fc:16:d3:ee:d9:07:90:3b:f5:81:55:94:1c:
         c4:ba:3f:fb:a4:9e:00:ee:04:87:1c:9f:2f:0b:50:65:82:18:
         24:25:92:30:39:d4:bf:d3:14:c2:c7:83:1d:b5:8f:3f:dc:71:
         8a:9c:fa:0e:04:ff:b6:f5:1c:75:d2:7b:b7:13:b3:21:00:54:
         89:3c:19:49:d9:92:be:86:c7:99:27:0b:95:62:1d:06:e1:39:
         7e:f0:11:02:29:68:7a:e6:3e:8b:9c:5c:46:b7:e2:65:49:06:
         f4:f9:f4:00:f3:ae:ea:09:67:4d:67:80:70:44:89:13:57:a7:
         e6:56:58:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 13:59:54 2025 by rpki-client