Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/0/3133382e3138352e32322e302f32342d3234203d3e20323634333332.roa
File:                     3133382e3138352e32322e302f32342d3234203d3e20323634333332.roa (raw, json)
Hash identifier:          dnirKIbDQpdXoWapP5UtguiWRf3czcRWzPcem0YM8j8=
Subject key identifier:   25:9C:89:F7:51:84:A6:21:AE:68:5E:72:13:CF:5F:84:0F:D8:3C:E6
Certificate issuer:       /CN=F427EBED04EEA9E14CD726DEB3CC299993C1802E
Certificate serial:       5882A28B57A9FAE41C1F040F9BAB51701EBD1A65
Authority key identifier: F4:27:EB:ED:04:EE:A9:E1:4C:D7:26:DE:B3:CC:29:99:93:C1:80:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F427EBED04EEA9E14CD726DEB3CC299993C1802E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/0/3133382e3138352e32322e302f32342d3234203d3e20323634333332.roa
Signing time:             Mon 04 Apr 2022 13:42:11 +0000
ROA not before:           Mon 04 Apr 2022 13:37:11 +0000
ROA not after:            Mon 03 Apr 2023 13:42:11 +0000
asID:                     264332
IP address blocks:        138.185.22.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:82:a2:8b:57:a9:fa:e4:1c:1f:04:0f:9b:ab:51:70:1e:bd:1a:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F427EBED04EEA9E14CD726DEB3CC299993C1802E
        Validity
            Not Before: Apr  4 13:37:11 2022 GMT
            Not After : Apr  3 13:42:11 2023 GMT
        Subject: CN=259C89F75184A621AE685E7213CF5F840FD83CE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e8:a9:bf:2f:53:b6:15:a3:a7:66:6d:84:d6:
                    5a:d0:70:80:f9:07:d4:f8:9a:ef:0a:f3:79:5c:e9:
                    67:91:97:dc:35:94:e6:bd:04:f1:98:f5:86:a2:b6:
                    b0:91:c7:ba:5a:bc:37:7d:ee:58:00:8e:45:30:89:
                    98:fd:2a:3a:7c:05:e7:24:41:3a:3a:5d:46:4c:92:
                    41:9b:06:85:26:d4:a5:f2:85:cf:30:44:3a:21:30:
                    e8:a7:a6:cb:35:b6:b8:1b:0d:31:49:1d:67:31:12:
                    52:8b:41:8f:ce:c3:00:24:42:60:49:bf:04:95:76:
                    3a:06:c6:41:49:f9:cd:31:3c:84:9f:b0:49:3f:b1:
                    80:67:20:94:f6:3e:40:f5:e8:cc:77:06:4a:9d:fe:
                    fe:aa:a4:56:00:25:2b:d5:35:24:cb:12:60:d6:55:
                    ac:bb:7e:82:b5:2f:7b:fe:b3:a1:72:f3:55:21:83:
                    8f:fb:35:f0:1e:18:46:4e:af:32:04:09:19:3f:39:
                    42:b9:0d:5e:0e:94:ca:ab:0f:d9:6d:c1:3c:88:80:
                    da:c9:47:75:cc:b4:05:2c:c3:bd:78:79:43:98:aa:
                    1f:10:d8:28:fa:17:f3:0b:62:ce:42:0d:a3:77:b3:
                    ac:47:6f:fe:75:42:f6:21:89:ae:36:86:9d:2b:6b:
                    04:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:9C:89:F7:51:84:A6:21:AE:68:5E:72:13:CF:5F:84:0F:D8:3C:E6
            X509v3 Authority Key Identifier:
                keyid:F4:27:EB:ED:04:EE:A9:E1:4C:D7:26:DE:B3:CC:29:99:93:C1:80:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/0/F427EBED04EEA9E14CD726DEB3CC299993C1802E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F427EBED04EEA9E14CD726DEB3CC299993C1802E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/0/3133382e3138352e32322e302f32342d3234203d3e20323634333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:59:1a:9a:8a:f5:a6:85:53:c8:dd:fd:e6:61:2b:67:c4:da:
         3f:7b:4a:57:d2:e9:b2:33:6f:66:47:9e:2d:81:5a:70:30:ea:
         24:3a:82:ab:4a:4d:60:1e:1e:cc:1a:07:9a:f5:fa:49:05:28:
         59:1e:58:ae:e1:66:c6:64:fd:23:f2:9d:78:04:96:35:5e:38:
         83:cf:44:f4:54:69:ac:39:d4:00:3c:6c:ce:d1:51:98:d2:63:
         33:b7:58:43:79:ea:f5:79:1b:7e:49:ed:19:59:d7:1c:10:d7:
         0f:17:1a:8e:f6:20:a0:94:97:b1:2b:45:7f:b8:e2:2d:a8:ee:
         f1:56:ad:86:a8:47:b2:1e:f3:63:c5:a4:c9:1e:27:89:79:cc:
         aa:0e:a7:12:ac:5c:79:5e:49:1c:4f:c9:94:fe:99:64:76:ff:
         2e:46:20:76:81:e5:f8:de:d8:af:40:fa:47:dd:6a:43:b5:45:
         4b:e1:b6:06:b5:33:d1:43:7c:75:06:6b:d9:55:f6:04:cf:9c:
         73:6e:cf:7b:87:b2:7f:d9:26:33:bc:0d:f7:15:af:ce:9b:22:
         5a:b5:c5:10:13:87:f8:9f:2a:4b:f7:e4:e5:a2:3b:8c:3a:c0:
         05:06:61:b7:e5:e8:f9:e0:7a:d9:06:07:a9:ef:c7:e0:fa:e0:
         9a:e9:b0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:36 2023 by rpki-client on console.sobornost.net