Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/0/34352e3138352e3232382e302f32322d3232203d3e20323639343333.roa
File:                     34352e3138352e3232382e302f32322d3232203d3e20323639343333.roa (raw, json)
Hash identifier:          PVKzcDwlj+CSqFWgcbOn8GheSXlaz905CWVY7aoo5ic=
Subject key identifier:   EA:EA:75:93:EA:74:9A:3E:DF:EE:F0:F0:10:89:7A:4B:B7:46:5F:5B
Certificate issuer:       /CN=5BAB3FF323D6A7D4A97FF77435AA4AD5072A0115
Certificate serial:       3639DE729A9023CBB0A0FFCAA6F92F45A2BDAE14
Authority key identifier: 5B:AB:3F:F3:23:D6:A7:D4:A9:7F:F7:74:35:AA:4A:D5:07:2A:01:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BAB3FF323D6A7D4A97FF77435AA4AD5072A0115.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/0/34352e3138352e3232382e302f32322d3232203d3e20323639343333.roa
Signing time:             Mon 18 Jul 2022 17:16:29 +0000
ROA not before:           Mon 18 Jul 2022 17:11:29 +0000
ROA not after:            Mon 17 Jul 2023 17:16:29 +0000
asID:                     269433
IP address blocks:        45.185.228.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:39:de:72:9a:90:23:cb:b0:a0:ff:ca:a6:f9:2f:45:a2:bd:ae:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5BAB3FF323D6A7D4A97FF77435AA4AD5072A0115
        Validity
            Not Before: Jul 18 17:11:29 2022 GMT
            Not After : Jul 17 17:16:29 2023 GMT
        Subject: CN=EAEA7593EA749A3EDFEEF0F010897A4BB7465F5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:b7:a2:07:7c:86:90:41:29:f9:8c:45:9c:d4:
                    0c:d8:b9:e1:33:1b:4c:bf:4f:35:c2:ca:b4:51:c3:
                    e4:1c:5f:f9:19:50:7f:6d:7c:d9:ce:eb:bd:99:0c:
                    4f:51:bb:56:2d:17:d9:f5:50:59:70:1d:37:0c:c3:
                    92:5a:cd:03:ab:42:9e:49:f5:84:32:e8:a0:41:7a:
                    46:94:b9:a4:73:ca:93:c0:46:01:5d:8a:b1:24:2d:
                    96:21:b6:5a:39:19:44:3a:98:65:ba:2a:d4:37:fa:
                    6d:56:58:6e:0c:48:a7:72:e1:ab:0e:46:86:b5:7b:
                    ff:4b:7c:a2:eb:39:f7:8f:c2:ed:95:8c:57:a8:59:
                    27:3f:b8:02:2c:27:56:c6:1b:ac:30:08:e7:22:68:
                    03:f9:52:a0:74:57:59:dc:60:94:cf:a1:4d:f8:85:
                    2c:db:ec:96:dd:89:c1:e9:0c:64:62:07:30:e8:79:
                    f7:54:f8:6f:8a:7e:5f:df:95:a5:3f:32:63:f3:46:
                    dc:89:3a:88:d2:07:12:36:c4:3a:a3:fb:3e:c8:8f:
                    58:a4:fb:1f:75:d7:e8:a6:45:13:cf:37:06:8c:af:
                    e8:23:cd:60:f0:34:10:c2:ec:7f:06:ec:68:d6:c3:
                    92:91:c1:eb:46:a5:3e:5e:6e:a1:9c:81:e1:bd:d5:
                    66:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:EA:75:93:EA:74:9A:3E:DF:EE:F0:F0:10:89:7A:4B:B7:46:5F:5B
            X509v3 Authority Key Identifier:
                keyid:5B:AB:3F:F3:23:D6:A7:D4:A9:7F:F7:74:35:AA:4A:D5:07:2A:01:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/0/5BAB3FF323D6A7D4A97FF77435AA4AD5072A0115.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5BAB3FF323D6A7D4A97FF77435AA4AD5072A0115.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6i6Rh4rU2y661ghc9heZQQUeApePx62NPddc7q5xFADh/0/34352e3138352e3232382e302f32322d3232203d3e20323639343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         ac:b9:3d:83:ed:0f:b7:f8:36:6d:6d:d8:90:35:bd:e5:53:4d:
         88:86:b9:70:e6:67:47:8e:95:b2:d1:ff:96:5a:90:d5:c3:89:
         be:84:0a:ca:32:39:ec:e9:76:07:17:ad:f0:8f:e0:ef:5e:89:
         3e:ef:db:9b:62:15:13:8b:1f:52:fc:90:06:02:56:0c:ee:99:
         3c:8f:18:54:4a:01:2d:7b:22:aa:2b:f5:9f:9b:ab:6f:65:f2:
         21:b7:5b:39:c3:8e:9c:39:ac:39:64:12:a0:91:68:3e:fc:f9:
         12:b1:0c:f3:72:e4:d7:02:f1:c9:50:b1:cf:44:63:0f:85:9c:
         b9:43:0b:cb:9a:4b:09:af:df:38:e5:b2:4c:9c:6b:8d:6f:9d:
         28:8e:b0:04:1d:9e:cd:5e:69:d3:62:06:3a:2d:63:cd:63:17:
         74:8d:3a:24:15:15:8d:7c:57:9f:83:5c:61:84:15:5e:e4:89:
         8c:f9:04:8b:04:8e:75:47:c3:de:64:4a:c6:31:b7:47:c5:6f:
         e5:52:f2:74:e9:98:4f:19:cb:35:16:00:5f:2a:ce:a9:ac:f3:
         a7:12:ba:be:b7:e6:10:6b:00:66:69:6b:71:b1:6e:e9:86:45:
         02:6f:af:e6:bd:d9:ab:21:23:de:10:cf:c1:c7:8f:f5:2d:1c:
         9a:65:72:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:22 2023 by rpki-client on console.sobornost.net