Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/0/323830343a346538383a383030303a3a2f33332d3333203d3e20323638323637.roa
File:                     323830343a346538383a383030303a3a2f33332d3333203d3e20323638323637.roa (raw, json)
Hash identifier:          tBuu8yGLDl6o6X303hDjTMXUM/8U/ex1mOSJya+JLsk=
Subject key identifier:   6E:3C:13:3E:64:3E:79:DB:3B:22:75:72:63:F5:6E:34:BE:A5:5A:F7
Certificate issuer:       /CN=D8ECFE7B56C795535B855B9D4F0CD7E02E452649
Certificate serial:       7095CC7C089D763D944F74783424DEED4A3D00F5
Authority key identifier: D8:EC:FE:7B:56:C7:95:53:5B:85:5B:9D:4F:0C:D7:E0:2E:45:26:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8ECFE7B56C795535B855B9D4F0CD7E02E452649.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/0/323830343a346538383a383030303a3a2f33332d3333203d3e20323638323637.roa
Signing time:             Fri 16 Dec 2022 15:00:02 +0000
ROA not before:           Fri 16 Dec 2022 14:55:02 +0000
ROA not after:            Fri 15 Dec 2023 15:00:02 +0000
asID:                     268267
IP address blocks:        2804:4e88:8000::/33 maxlen: 33

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:95:cc:7c:08:9d:76:3d:94:4f:74:78:34:24:de:ed:4a:3d:00:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8ECFE7B56C795535B855B9D4F0CD7E02E452649
        Validity
            Not Before: Dec 16 14:55:02 2022 GMT
            Not After : Dec 15 15:00:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:11:17:8b:8f:c7:54:73:cd:00:f2:45:c2:ee:
                    b6:54:0e:de:d9:fe:33:fd:d0:12:46:08:c6:08:01:
                    f1:cf:9c:69:af:dc:d7:c4:cf:75:17:c0:a9:c4:85:
                    8f:f6:c9:de:33:a6:15:11:47:6e:4d:ca:0c:1d:e5:
                    5c:17:d9:5f:b4:b4:18:a3:6e:a4:46:02:f8:e2:76:
                    6b:5e:33:cb:d3:8d:fa:7d:2b:c5:d2:21:a6:e6:2a:
                    87:7f:fe:9b:cb:e7:6f:32:39:ed:ec:1d:b2:1e:51:
                    37:2d:c8:4b:e4:3e:09:6b:33:d0:32:d5:d2:cb:83:
                    2b:c0:4d:be:03:a0:ea:e7:53:b1:4a:90:9d:e5:fe:
                    a7:af:54:25:44:4c:be:1c:00:f3:e2:99:7d:4f:d8:
                    c7:5c:fb:03:4b:77:23:98:ff:f1:1b:ed:52:f4:e1:
                    a1:a1:47:d1:ca:5f:26:7e:87:4a:61:c9:80:5a:f3:
                    ee:f6:b7:3f:0b:83:c8:43:3f:63:48:1e:6d:ac:73:
                    b5:e0:44:56:78:5f:85:30:72:bb:08:84:09:a5:01:
                    4b:00:0c:ad:5a:4c:fd:fc:fe:45:65:b6:82:b8:1a:
                    14:b4:d4:04:0d:84:e2:ea:9e:90:62:56:19:8e:27:
                    7e:21:58:40:4e:14:90:54:51:4a:5f:b9:3e:18:73:
                    e8:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:3C:13:3E:64:3E:79:DB:3B:22:75:72:63:F5:6E:34:BE:A5:5A:F7
            X509v3 Authority Key Identifier:
                keyid:D8:EC:FE:7B:56:C7:95:53:5B:85:5B:9D:4F:0C:D7:E0:2E:45:26:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/0/D8ECFE7B56C795535B855B9D4F0CD7E02E452649.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D8ECFE7B56C795535B855B9D4F0CD7E02E452649.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5wbYgtGFKBQF55iQQD8Rzi9xywk6ifq3e2MCNkNtUsk2/0/323830343a346538383a383030303a3a2f33332d3333203d3e20323638323637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e88:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         7f:3e:fa:52:f9:fe:79:20:9d:d1:ab:3d:7d:9a:62:73:ca:93:
         93:0e:bc:68:9c:ee:70:f3:90:af:14:00:e0:4d:b2:e5:74:ff:
         45:86:08:8b:75:87:8a:e0:ce:10:f4:92:11:7c:37:ff:8b:11:
         58:02:47:c9:a9:77:68:d2:7a:91:ab:53:af:96:83:ec:0a:32:
         92:6c:69:19:05:7f:48:85:92:4d:7b:fb:e4:66:b4:09:a8:ab:
         91:69:0f:64:34:66:2a:94:5f:80:87:0d:dc:0f:f7:2d:5e:14:
         b2:3c:a4:43:7e:13:84:18:b6:09:d3:09:f6:af:88:94:2b:48:
         05:f3:e2:79:fb:0f:be:8e:b2:d3:ee:d4:fe:56:fe:49:98:b0:
         0b:e8:ef:3b:56:9a:56:fc:c4:08:27:eb:be:c6:99:e0:c7:25:
         d3:cb:b5:c0:a2:db:1f:51:0f:f7:c3:a3:cf:c7:53:d4:15:70:
         65:20:91:c4:fe:42:37:28:39:df:e1:73:8e:13:c3:e6:3f:09:
         68:07:d6:d1:ad:f1:8b:8e:a5:d0:72:bb:b2:f5:a7:68:cf:a2:
         af:f7:a1:6f:26:c3:b9:b9:da:b1:19:1d:1c:f7:e6:b8:cf:6a:
         fc:96:ae:66:e8:59:be:8c:0c:79:f6:8b:3f:bf:0f:c7:7e:4a:
         c6:08:fe:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----