Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EVyD9P7s8WmVmYoTrwjJYy1fbjzbpg8qmz9Ycbmddaoc/0/323830343a363762383a3a2f33322d3332203d3e20323639363436.roa
File:                     323830343a363762383a3a2f33322d3332203d3e20323639363436.roa (raw, json)
Hash identifier:          O1Fdd6ypWsaAJUlc0d6sK4e9Tqs55+k9V1F/g/BrOgs=
Subject key identifier:   1D:4A:AE:F7:55:97:00:F1:02:22:BD:DC:17:A7:9C:36:56:AE:C3:E6
Certificate issuer:       /CN=05BA7EB590D7201C9EADD3334D8C85898551C385
Certificate serial:       377BC4FA4C687D517EDD4585D0652E1D15905FED
Authority key identifier: 05:BA:7E:B5:90:D7:20:1C:9E:AD:D3:33:4D:8C:85:89:85:51:C3:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/05BA7EB590D7201C9EADD3334D8C85898551C385.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EVyD9P7s8WmVmYoTrwjJYy1fbjzbpg8qmz9Ycbmddaoc/0/323830343a363762383a3a2f33322d3332203d3e20323639363436.roa
Signing time:             Sat 22 Jan 2022 23:31:39 +0000
ROA not before:           Sat 22 Jan 2022 23:26:39 +0000
ROA not after:            Sat 21 Jan 2023 23:31:39 +0000
asID:                     269646
IP address blocks:        2804:67b8::/32 maxlen: 32

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:7b:c4:fa:4c:68:7d:51:7e:dd:45:85:d0:65:2e:1d:15:90:5f:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05BA7EB590D7201C9EADD3334D8C85898551C385
        Validity
            Not Before: Jan 22 23:26:39 2022 GMT
            Not After : Jan 21 23:31:39 2023 GMT
        Subject: CN=1D4AAEF7559700F10222BDDC17A79C3656AEC3E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f0:6b:af:c2:af:20:d0:6d:cc:77:50:a6:07:
                    a1:72:91:26:29:37:35:97:b1:ea:d1:96:6a:1f:6b:
                    e6:b7:82:30:0f:b0:e9:f9:c3:9c:36:c1:9e:16:f3:
                    22:d0:e8:99:13:7e:9b:1b:f1:4c:de:00:a0:3b:a2:
                    c6:f4:5a:ea:39:9e:12:dd:3a:5e:04:84:38:bb:4c:
                    ae:79:c1:99:a6:af:38:a8:0d:95:48:ec:78:ae:1c:
                    73:68:c5:0d:e4:ca:72:51:38:eb:61:8c:c4:b7:c8:
                    10:26:44:84:fc:34:21:82:b3:ec:76:4b:f0:d1:1c:
                    0e:34:ca:ee:38:64:17:51:55:f3:a0:3a:58:9b:f4:
                    be:75:38:ec:3f:5d:61:3e:1d:58:09:3c:ee:6f:b4:
                    2d:d2:e6:87:99:04:64:69:ff:c4:36:99:5f:66:1b:
                    cc:e3:f6:64:00:9e:70:10:9f:33:55:06:66:1f:85:
                    1a:a6:0b:76:10:05:24:f7:cf:e2:72:b8:fc:81:68:
                    10:3d:34:83:26:7c:2e:5c:15:d9:5e:72:6a:85:2a:
                    e2:2e:55:e2:ba:0f:19:84:6c:ad:8b:17:95:e2:82:
                    6c:51:52:ce:1a:a9:30:75:69:e3:3f:45:ee:fd:57:
                    f3:5d:30:16:51:e0:91:9a:da:d5:78:f3:07:42:fe:
                    c8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:4A:AE:F7:55:97:00:F1:02:22:BD:DC:17:A7:9C:36:56:AE:C3:E6
            X509v3 Authority Key Identifier:
                keyid:05:BA:7E:B5:90:D7:20:1C:9E:AD:D3:33:4D:8C:85:89:85:51:C3:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EVyD9P7s8WmVmYoTrwjJYy1fbjzbpg8qmz9Ycbmddaoc/0/05BA7EB590D7201C9EADD3334D8C85898551C385.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/05BA7EB590D7201C9EADD3334D8C85898551C385.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EVyD9P7s8WmVmYoTrwjJYy1fbjzbpg8qmz9Ycbmddaoc/0/323830343a363762383a3a2f33322d3332203d3e20323639363436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:67b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:55:d3:f0:12:48:d5:b0:a8:d1:ca:fc:21:03:7d:3e:ab:30:
         35:eb:ea:21:b1:72:8a:16:67:4e:55:88:6b:fe:a6:a7:dc:fd:
         01:af:c1:cb:8f:89:f6:a9:76:61:e9:fd:4e:9f:2a:e9:ab:b9:
         41:75:22:a0:62:2f:72:cc:5a:a8:e0:90:4f:ef:14:73:6f:98:
         31:43:e2:ae:91:31:03:50:fd:16:4d:2f:10:61:48:e4:4f:ed:
         0c:8f:f1:f7:d8:4d:d2:92:63:e5:50:8e:b3:ff:38:83:e1:07:
         77:ee:46:fa:9c:6b:ee:92:96:21:00:a0:88:e1:e2:76:27:bc:
         e2:34:7f:2d:98:2b:9a:15:1b:d8:b7:99:7d:56:11:db:be:b5:
         34:26:81:6d:f5:ec:b8:2d:f1:52:86:e8:77:0e:a9:91:8f:0e:
         cd:d2:73:09:e1:a8:29:b1:62:8f:5b:08:d3:ab:36:64:46:94:
         76:83:d4:16:4c:87:9b:dd:3c:5f:2a:06:9f:62:fb:1f:b8:c6:
         75:41:fa:b6:18:5c:c3:3e:17:78:ba:7c:f8:74:01:d8:82:34:
         dc:ac:44:b6:65:55:82:9d:a1:2f:30:1a:47:b3:d9:22:e0:be:
         27:f8:42:6b:f9:ad:9e:c6:ae:76:34:1e:f5:62:d1:39:25:d4:
         30:49:04:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----