Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/3136382e302e3133302e302f32332d3233203d3e20323633303639.roa
File:                     3136382e302e3133302e302f32332d3233203d3e20323633303639.roa (raw, json)
Hash identifier:          ykD5n2LyDKu+Ev2b0FFEEy+D90QceY3vACnoNZWEVTI=
Subject key identifier:   AA:8A:EF:02:79:E0:90:77:33:5C:27:BA:13:FB:7E:AD:19:30:09:91
Certificate issuer:       /CN=4AAE191F9D2DE68E183E8D851C4C47742A75D479
Certificate serial:       465C3E6A249C2614E5979AB74001A360D93360A6
Authority key identifier: 4A:AE:19:1F:9D:2D:E6:8E:18:3E:8D:85:1C:4C:47:74:2A:75:D4:79
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AAE191F9D2DE68E183E8D851C4C47742A75D479.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/3136382e302e3133302e302f32332d3233203d3e20323633303639.roa
Signing time:             Mon 11 Apr 2022 18:01:19 +0000
ROA not before:           Mon 11 Apr 2022 17:56:19 +0000
ROA not after:            Mon 10 Apr 2023 18:01:19 +0000
asID:                     263069
IP address blocks:        168.0.130.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:5c:3e:6a:24:9c:26:14:e5:97:9a:b7:40:01:a3:60:d9:33:60:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4AAE191F9D2DE68E183E8D851C4C47742A75D479
        Validity
            Not Before: Apr 11 17:56:19 2022 GMT
            Not After : Apr 10 18:01:19 2023 GMT
        Subject: CN=AA8AEF0279E09077335C27BA13FB7EAD19300991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ff:c7:fe:e8:62:90:86:cc:39:83:ea:da:24:
                    8d:88:14:d7:27:ae:bd:e4:52:06:8b:81:8b:44:30:
                    1e:79:10:75:a5:f5:66:91:8b:ce:ae:55:02:71:1a:
                    5a:d6:23:e5:fb:54:a1:1a:c4:b4:e1:23:94:d4:b3:
                    22:2e:1a:20:b5:9f:b0:75:e4:41:57:96:98:d0:22:
                    be:d8:9d:1b:b2:d0:e4:7b:23:e3:5a:86:ac:78:26:
                    c2:55:5c:33:82:bf:ea:d0:f0:06:65:eb:d7:f9:e5:
                    76:2c:ab:75:48:b5:21:13:c0:7c:83:5a:e5:c4:38:
                    5d:d6:61:56:b8:18:73:fb:f6:44:54:47:f6:cf:63:
                    fb:b0:b7:ce:db:c8:88:3e:34:b8:53:89:cf:38:8f:
                    b9:72:c1:8c:85:58:f2:5d:01:d0:98:6d:f9:5c:eb:
                    47:66:8a:e5:a7:6b:d7:87:b4:f5:08:0f:d6:7a:40:
                    75:69:f7:e5:82:e5:89:f8:6f:52:60:a7:b8:70:dd:
                    56:f2:f1:6d:bf:19:06:d4:ce:11:20:36:aa:a3:22:
                    24:36:77:de:6e:79:af:5a:a0:7f:e3:44:d9:50:b6:
                    43:72:c0:e4:ed:3a:8f:80:ba:df:6f:3d:bb:5b:55:
                    02:6a:23:43:c9:66:21:27:7b:a0:1e:1b:a2:3e:0b:
                    98:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:8A:EF:02:79:E0:90:77:33:5C:27:BA:13:FB:7E:AD:19:30:09:91
            X509v3 Authority Key Identifier:
                keyid:4A:AE:19:1F:9D:2D:E6:8E:18:3E:8D:85:1C:4C:47:74:2A:75:D4:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/4AAE191F9D2DE68E183E8D851C4C47742A75D479.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4AAE191F9D2DE68E183E8D851C4C47742A75D479.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FWAYjW1UMzYC4TpjzN6tWvS37H2bipKfwU7KDB3GgZX1/0/3136382e302e3133302e302f32332d3233203d3e20323633303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:12:33:9c:21:ff:d9:05:be:87:41:ec:ea:07:78:0b:8b:79:
         56:fb:ca:5b:71:c1:e3:ba:16:47:ea:fe:aa:27:8d:c2:8b:e6:
         d1:57:23:32:79:23:82:14:05:9b:bc:c7:a7:08:58:43:9d:d1:
         8a:58:76:44:ea:90:76:cd:15:fb:64:10:90:28:cd:5e:2d:8e:
         7d:3d:18:67:2e:65:12:2a:0a:01:d4:18:af:50:d7:4b:71:cc:
         ed:5d:86:0c:c2:d7:a3:fe:d4:a2:89:7c:f2:a1:56:9f:3b:0d:
         11:00:de:ff:a9:c4:b3:6c:09:06:1e:11:0a:81:d2:3d:4a:26:
         68:fa:43:dc:15:34:97:e7:4c:db:33:bb:81:b8:b7:17:32:33:
         5d:fe:02:4f:44:f5:23:4b:da:62:73:78:f4:19:81:44:18:f3:
         fa:74:77:17:6d:3a:fc:bc:4f:e6:2e:0a:38:d7:78:5e:95:e7:
         f3:6f:b6:14:b4:55:f0:87:d6:e7:99:4e:96:dc:10:e5:2f:23:
         6a:e5:8c:81:fa:9c:48:26:b0:57:91:c1:9a:35:19:11:c1:76:
         a5:f7:8c:3d:ae:c2:82:4d:29:98:38:a8:89:e2:2b:99:c6:07:
         c9:86:15:df:ce:1a:b8:60:2f:88:b0:76:1d:99:93:a9:3d:e3:
         56:b7:98:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:40 2023 by rpki-client on console.sobornost.net