Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/0/3139302e3131352e3139362e302f32342d3234203d3e203331383938.roa
File:                     3139302e3131352e3139362e302f32342d3234203d3e203331383938.roa (raw, json)
Hash identifier:          2pakZNfW3bPTbDU6WAMf/RgqYQ+TtOI/cls9+3vzJHI=
Subject key identifier:   75:93:8B:94:E8:DA:64:CC:FE:FF:A6:D5:C9:DA:7D:43:99:24:58:28
Certificate issuer:       /CN=D46D9B53AD78E55F078DA7D69B411BF181E1973D
Certificate serial:       6EFB1C2BF663AB9EFF21D848D8FFCD8942A6C3E1
Authority key identifier: D4:6D:9B:53:AD:78:E5:5F:07:8D:A7:D6:9B:41:1B:F1:81:E1:97:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D46D9B53AD78E55F078DA7D69B411BF181E1973D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/0/3139302e3131352e3139362e302f32342d3234203d3e203331383938.roa
Signing time:             Fri 15 Jul 2022 19:16:00 +0000
ROA not before:           Fri 15 Jul 2022 19:11:00 +0000
ROA not after:            Fri 14 Jul 2023 19:16:00 +0000
asID:                     31898
IP address blocks:        190.115.196.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:fb:1c:2b:f6:63:ab:9e:ff:21:d8:48:d8:ff:cd:89:42:a6:c3:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D46D9B53AD78E55F078DA7D69B411BF181E1973D
        Validity
            Not Before: Jul 15 19:11:00 2022 GMT
            Not After : Jul 14 19:16:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b1:1d:8e:3d:cf:3d:d3:c1:94:c4:d7:45:4e:
                    d1:d5:2c:fd:1e:4a:9c:b1:c6:09:79:97:6b:0d:18:
                    60:4c:9c:a4:13:7c:13:de:f6:6d:12:82:bc:4c:83:
                    29:6a:e5:52:2a:e5:61:4f:bc:7b:46:c9:ed:77:b4:
                    5c:0b:8b:9e:6a:c9:8c:c0:b3:2e:04:55:c7:01:1d:
                    4c:c6:28:8e:35:8f:e5:08:ad:10:e0:fc:b9:e9:08:
                    cb:4f:88:79:85:5d:41:6f:40:ab:a3:20:b8:cb:e1:
                    61:4c:fb:84:6e:34:e8:c7:a5:55:68:22:c4:55:eb:
                    35:8c:40:44:73:0e:67:bc:95:15:86:a4:db:1f:9b:
                    ee:38:f4:da:ff:7a:cb:1b:6a:dd:24:10:79:9f:62:
                    39:52:97:5e:4f:b6:a7:c7:93:3c:fc:11:41:77:fb:
                    20:2c:94:65:89:72:f7:fe:f5:19:b3:4c:ef:6e:df:
                    d1:2f:cf:b8:3e:f5:5b:6e:ee:ee:fc:19:2a:87:e8:
                    65:1c:22:56:cc:c3:44:85:ea:e3:bf:e9:14:bb:53:
                    2e:c2:f4:9b:52:88:72:56:62:01:53:34:f6:3b:9e:
                    d2:e4:29:70:1a:a6:78:50:24:01:28:1d:6f:db:c3:
                    a9:04:51:b9:8a:a5:50:03:dd:37:16:05:98:b2:b6:
                    a5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:93:8B:94:E8:DA:64:CC:FE:FF:A6:D5:C9:DA:7D:43:99:24:58:28
            X509v3 Authority Key Identifier:
                keyid:D4:6D:9B:53:AD:78:E5:5F:07:8D:A7:D6:9B:41:1B:F1:81:E1:97:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/0/D46D9B53AD78E55F078DA7D69B411BF181E1973D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D46D9B53AD78E55F078DA7D69B411BF181E1973D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUVq4sxVyWYRMBtq4y6Kk9KdVRBYxMTsjaJgLKS3CpJM/0/3139302e3131352e3139362e302f32342d3234203d3e203331383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.115.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:4b:da:0d:3d:4d:2f:fb:38:a8:4b:eb:de:f6:39:69:cd:d9:
         1d:02:14:42:65:40:3d:9c:ac:48:a6:13:2b:68:87:09:92:85:
         8b:c4:06:62:4a:2e:3c:c3:01:3a:05:db:fc:d8:c0:ef:41:65:
         f5:4a:f1:92:aa:c7:fe:f1:73:31:7e:ef:3d:28:79:ab:f7:3c:
         6e:86:d9:cb:46:6d:cb:f4:c5:0c:4a:85:0d:8e:83:e2:b3:e9:
         2c:91:af:af:e0:21:58:4c:7c:3b:88:c2:76:08:f9:64:4f:16:
         31:88:34:10:eb:4d:75:8b:2b:34:e5:5b:7f:1f:a3:c6:aa:ae:
         42:70:65:a0:44:c7:ab:60:22:29:07:88:94:09:ba:33:0d:34:
         23:33:42:3a:17:cb:b1:fa:ac:61:3b:37:f6:9d:90:73:53:5d:
         db:89:54:8a:24:bc:79:c7:8e:7e:a1:86:93:8c:f6:d0:b5:bf:
         45:bb:15:28:6d:a0:9d:0b:d8:79:6b:7c:16:51:58:84:3e:61:
         f4:dd:6f:3c:c0:f3:bb:3f:8a:64:40:8d:00:9c:e0:d4:ff:0f:
         5a:e7:0e:63:12:03:1f:bc:15:b1:44:9c:fb:07:48:13:dc:d1:
         91:39:cc:a8:5a:c4:46:f2:67:c5:ce:17:ec:0c:1e:66:43:18:
         c4:54:1e:fb
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUbvscK/Zjq57/IdhI2P/NiUKmw+EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDQ2RDlCNTNBRDc4RTU1RjA3OERBN0Q2OUI0MTFCRjE4
MUUxOTczRDAeFw0yMjA3MTUxOTExMDBaFw0yMzA3MTQxOTE2MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTBCMTFEOEUzRENGM0REM0Mx
OTRDNEQ3NDU0RUQxRDUyQ0ZEMUU0QTlDQjFDNjA5Nzk5NzZCMEQxODYwNEM5Q0E0
MTM3QzEzREVGNjZEMTI4MkJDNEM4MzI5NkFFNTUyMkFFNTYxNEZCQzdCNDZDOUVE
NzdCNDVDMEI4QjlFNkFDOThDQzBCMzJFMDQ1NUM3MDExRDRDQzYyODhFMzU4RkU1
MDhBRDEwRTBGQ0I5RTkwOENCNEY4ODc5ODU1RDQxNkY0MEFCQTMyMEI4Q0JFMTYx
NENGQjg0NkUzNEU4QzdBNTU1NjgyMkM0NTVFQjM1OEM0MDQ0NzMwRTY3QkM5NTE1
ODZBNERCMUY5QkVFMzhGNERBRkY3QUNCMUI2QUREMjQxMDc5OUY2MjM5NTI5NzVF
NEZCNkE3Qzc5MzNDRkMxMTQxNzdGQjIwMkM5NDY1ODk3MkY3RkVGNTE5QjM0Q0VG
NkVERkQxMkZDRkI4M0VGNTVCNkVFRUVFRkMxOTJBODdFODY1MUMyMjU2Q0NDMzQ0
ODVFQUUzQkZFOTE0QkI1MzJFQzJGNDlCNTI4ODcyNTY2MjAxNTMzNEY2M0I5RUQy
RTQyOTcwMUFBNjc4NTAyNDAxMjgxRDZGREJDM0E5MDQ1MUI5OEFBNTUwMDNERDM3
MTYwNTk4QjJCNkE1RTUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA4LEdjj3PPdPBlMTXRU7R1Sz9HkqcscYJeZdrDRhgTJykE3wT3vZt
EoK8TIMpauVSKuVhT7x7Rsntd7RcC4ueasmMwLMuBFXHAR1MxiiONY/lCK0Q4Py5
6QjLT4h5hV1Bb0CroyC4y+FhTPuEbjTox6VVaCLEVes1jEBEcw5nvJUVhqTbH5vu
OPTa/3rLG2rdJBB5n2I5UpdeT7anx5M8/BFBd/sgLJRliXL3/vUZs0zvbt/RL8+4
PvVbbu7u/Bkqh+hlHCJWzMNEherjv+kUu1MuwvSbUohyVmIBUzT2O57S5ClwGqZ4
UCQBKB1v28OpBFG5iqVQA903FgWYsral5QIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FHWTi5To2mTM/v+m1cnafUOZJFgoMB8GA1UdIwQYMBaAFNRtm1OteOVfB42n1ptB
G/GB4Zc9MA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dVVnE0c3hWeVdZUk1C
dHE0eTZLazlLZFZSQll4TVRzamFKZ0xLUzNDcEpNLzAvRDQ2RDlCNTNBRDc4RTU1
RjA3OERBN0Q2OUI0MTFCRjE4MUUxOTczRC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9ENDZEOUI1M0FENzhFNTVGMDc4REE3RDY5QjQxMUJGMTgxRTE5
NzNELmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVVZxNHN4VnlXWVJNQnRxNHk2
S2s5S2RWUkJZeE1Uc2phSmdMS1MzQ3BKTS8wLzMxMzkzMDJlMzEzMTM1MmUzMTM5
MzYyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMzMxMzgzOTM4LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
vnPEMA0GCSqGSIb3DQEBCwUAA4IBAQBwS9oNPU0v+zioS+ve9jlpzdkdAhRCZUA9
nKxIphMraIcJkoWLxAZiSi48wwE6Bdv82MDvQWX1SvGSqsf+8XMxfu89KHmr9zxu
htnLRm3L9MUMSoUNjoPis+kska+v4CFYTHw7iMJ2CPlkTxYxiDQQ6011iys05Vt/
H6PGqq5CcGWgRMerYCIpB4iUCbozDTQjM0I6F8ux+qxhOzf2nZBzU13biVSKJLx5
x45+oYaTjPbQtb9FuxUobaCdC9h5a3wWUViEPmH03W88wPO7P4pkQI0AnODU/w9a
5w5jEgMfvBWxRJz7B0gT3NGROcyoWsRG8mfFzhfsDB5mQxjEVB77
-----END CERTIFICATE-----