Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3139302e38332e33342e302f32342d3234203d3e20323635393131.roa
File:                     3139302e38332e33342e302f32342d3234203d3e20323635393131.roa (raw, json)
Hash identifier:          oTzWYP2kNLP3ttIEAG6Y2XSo+S5njulVY8kYy4OPAU8=
Subject key identifier:   7D:B0:2E:A4:52:7F:3B:84:12:6B:4A:2A:CD:3B:71:36:9D:EA:B4:92
Certificate issuer:       /CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
Certificate serial:       538CE1BBF6FCBB45F0291783AA5570747A2714F8
Authority key identifier: E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3139302e38332e33342e302f32342d3234203d3e20323635393131.roa
Signing time:             Thu 04 Apr 2024 01:17:17 +0000
ROA not before:           Thu 04 Apr 2024 01:12:17 +0000
ROA not after:            Thu 03 Apr 2025 01:17:17 +0000
asID:                     265911
IP address blocks:        190.83.34.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:8c:e1:bb:f6:fc:bb:45:f0:29:17:83:aa:55:70:74:7a:27:14:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6115C4B0DDF3566D87F3783DD8730497E3CCE05
        Validity
            Not Before: Apr  4 01:12:17 2024 GMT
            Not After : Apr  3 01:17:17 2025 GMT
        Subject: CN=7DB02EA4527F3B84126B4A2ACD3B71369DEAB492
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a7:9b:0d:03:b4:4b:1a:2f:1c:0c:7a:d1:98:
                    6e:aa:80:a8:68:39:55:59:5a:52:a0:37:66:50:c2:
                    2e:b8:78:e8:bc:c8:05:e2:d1:94:b1:7a:be:18:1d:
                    74:af:c5:5f:52:7f:31:38:c6:4c:94:a4:70:49:b9:
                    8d:0d:c8:70:fc:b9:fb:3f:0a:75:85:67:d6:2d:76:
                    17:c5:ef:fd:7d:62:81:96:0a:62:a1:21:9a:ef:1c:
                    69:f3:a4:9a:b2:95:a9:7b:cf:40:9c:54:cd:64:fd:
                    10:ba:2c:0f:e4:1b:6a:33:a6:1e:19:3b:7c:7f:4f:
                    3a:87:31:ef:52:b2:86:23:79:03:26:e1:3c:c6:c4:
                    e0:42:28:9d:ca:0f:b4:c1:64:67:70:ce:3c:a1:8e:
                    db:52:6c:d3:a5:3b:18:4c:b7:fd:ca:85:dc:19:c0:
                    16:c8:36:9e:6b:7e:89:b8:48:3b:a9:e1:7b:6e:d4:
                    5a:54:47:b7:0d:a1:32:78:6e:1d:33:d9:f8:5c:c9:
                    b9:1f:6b:a0:cb:d8:bf:19:45:51:08:ab:5c:3f:53:
                    d0:4d:df:57:6c:83:c7:29:79:bd:e3:62:24:cc:53:
                    74:30:e8:d4:81:18:54:19:b7:91:42:56:b2:33:73:
                    0c:e3:7b:9f:b8:bc:3b:c3:c9:71:e7:5e:7b:1c:a2:
                    e8:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:B0:2E:A4:52:7F:3B:84:12:6B:4A:2A:CD:3B:71:36:9D:EA:B4:92
            X509v3 Authority Key Identifier:
                keyid:E6:11:5C:4B:0D:DF:35:66:D8:7F:37:83:DD:87:30:49:7E:3C:CE:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E6115C4B0DDF3566D87F3783DD8730497E3CCE05.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/udcpwPeLCyyZHX2DPiomkkvC6vTsPXSKqgudMDhJUia/1/3139302e38332e33342e302f32342d3234203d3e20323635393131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:ba:17:c9:67:f4:c9:40:d1:88:4e:3b:4a:1f:30:69:3c:af:
         c9:15:93:86:d5:3d:fc:a5:c5:e4:b6:7c:e7:b4:3b:b5:83:27:
         18:94:3d:e7:7e:d1:17:ac:80:a5:43:2f:86:49:e8:77:62:5c:
         57:64:26:bb:ac:ee:73:92:df:2a:04:6b:85:f3:61:34:55:3c:
         cd:5f:15:c1:07:39:22:bd:29:02:b4:d9:20:85:35:45:c3:d6:
         cc:55:a4:51:5d:b3:cc:34:f8:64:7f:34:8e:19:4f:51:67:ac:
         db:88:48:fc:a1:6d:89:1a:43:fa:19:35:3c:27:a6:be:30:d6:
         81:63:dd:b9:99:76:23:b3:ed:13:41:44:83:1b:ed:6f:30:e6:
         b9:41:4a:6b:fa:87:6a:2f:e9:7b:4b:56:52:bd:91:f7:9d:d8:
         b1:29:89:c9:22:68:47:8f:d8:e8:d9:6b:1f:3f:4e:76:63:0a:
         d7:65:25:83:0b:6a:ee:5e:a0:5b:c7:a4:6a:4e:d5:99:e8:6c:
         23:78:7c:ae:4b:92:e7:8f:58:a9:da:fd:3a:b0:3e:ae:fe:f4:
         b8:0a:3e:ee:cf:2e:4d:fe:a9:90:36:c3:94:02:1f:9d:27:8c:
         6f:e1:a1:bb:b5:87:56:d8:f5:dd:9d:f5:e8:76:85:29:e0:3a:
         66:dc:84:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 23 07:01:24 2025 by rpki-client