Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1/3137302e38342e3233362e302f32322d3234203d3e20323634323730.roa
File:                     3137302e38342e3233362e302f32322d3234203d3e20323634323730.roa (raw, json)
Hash identifier:          Mbr3KT7cgQpPtNYPOAMtYbl4oA8PGrFmcWHaWVx44rA=
Subject key identifier:   FC:5D:63:08:FE:14:87:6A:2C:04:2F:E6:8F:44:A0:0F:B8:9F:47:EC
Certificate issuer:       /CN=B48A181C2DC4482EF44411B66EBF4E215BD86B5F
Certificate serial:       79C45B065CF2E04961A89899C88228E7BD48D3C4
Authority key identifier: B4:8A:18:1C:2D:C4:48:2E:F4:44:11:B6:6E:BF:4E:21:5B:D8:6B:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1/3137302e38342e3233362e302f32322d3234203d3e20323634323730.roa
Signing time:             Thu 04 Apr 2024 07:49:45 +0000
ROA not before:           Thu 04 Apr 2024 07:44:45 +0000
ROA not after:            Thu 03 Apr 2025 07:49:45 +0000
asID:                     264270
IP address blocks:        170.84.236.0/22 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:c4:5b:06:5c:f2:e0:49:61:a8:98:99:c8:82:28:e7:bd:48:d3:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B48A181C2DC4482EF44411B66EBF4E215BD86B5F
        Validity
            Not Before: Apr  4 07:44:45 2024 GMT
            Not After : Apr  3 07:49:45 2025 GMT
        Subject: CN=FC5D6308FE14876A2C042FE68F44A00FB89F47EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:4b:bb:2e:69:37:c3:ea:6b:0b:86:57:b9:11:
                    68:d2:02:d6:16:99:d3:ac:c6:e8:97:6e:ff:ed:bd:
                    37:28:d5:e5:4b:ec:78:c7:95:d0:c4:a9:b1:b9:c1:
                    c9:c6:fa:7d:17:7b:25:7e:6e:b2:c3:19:3b:c9:89:
                    c5:54:71:80:d2:b5:ff:fd:83:b0:8e:a2:a5:74:6c:
                    33:4e:a2:14:d2:e5:34:85:59:7b:13:21:3a:dc:04:
                    90:0e:2c:e6:42:9c:91:f2:3b:43:ee:75:fc:b8:e8:
                    a4:05:0b:01:56:c5:6d:5e:c0:ad:92:1e:8a:45:a5:
                    8c:2c:a4:10:bb:f1:bf:63:32:e2:a5:df:17:b8:42:
                    e5:3a:87:34:9d:43:1a:c3:45:5a:ea:ca:b3:62:23:
                    22:9f:ac:97:ee:99:41:7d:17:09:ac:7d:20:45:79:
                    97:ac:fb:40:74:89:48:75:45:26:41:b1:6e:1e:d4:
                    7f:60:8f:0f:05:4e:89:af:d9:ac:2d:e8:16:68:d0:
                    83:a9:f3:0b:f2:6d:b4:21:e9:68:99:7f:d7:00:76:
                    e7:ee:6b:87:f7:e8:33:ab:76:7f:3f:5e:99:39:8a:
                    bb:da:61:f9:dc:04:c0:71:c4:54:f7:48:ec:b7:0a:
                    6f:a6:88:ac:72:3d:88:a4:de:0f:71:6c:a7:ff:9d:
                    b4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:5D:63:08:FE:14:87:6A:2C:04:2F:E6:8F:44:A0:0F:B8:9F:47:EC
            X509v3 Authority Key Identifier:
                keyid:B4:8A:18:1C:2D:C4:48:2E:F4:44:11:B6:6E:BF:4E:21:5B:D8:6B:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B48A181C2DC4482EF44411B66EBF4E215BD86B5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UBoyaVYNidz5UJkPpsMzUwyq7BuVLzVWD2gSpVG4Qm6/1/3137302e38342e3233362e302f32322d3234203d3e20323634323730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         74:4f:6b:19:e2:0f:58:24:d2:61:50:87:0c:c7:b1:1d:8c:85:
         d3:1c:17:d4:39:9c:51:2d:c4:b6:b0:90:a8:d5:5e:46:8a:25:
         30:d0:f0:7b:7e:f3:7c:24:f8:bc:c9:f3:c5:34:99:e9:88:50:
         b8:dc:bb:78:d1:a5:e6:a9:4b:ce:34:37:9c:18:3e:8a:5e:6e:
         69:bf:4e:b2:a4:68:6f:4c:2c:8a:a3:78:e6:6d:30:2c:85:40:
         d5:1a:48:a9:25:07:d0:af:65:0b:82:e7:b7:60:c0:b6:5c:23:
         a5:11:60:41:a3:b9:4a:41:43:60:4c:06:b4:0d:02:1d:17:10:
         f3:38:9b:08:d9:f9:ed:28:0e:68:6a:12:c4:24:76:7a:f3:1f:
         1f:1c:38:2b:fc:2c:32:7f:24:68:c6:93:42:29:20:29:31:ce:
         fe:dc:30:df:72:96:10:2c:d3:1f:11:94:19:49:19:cb:3d:de:
         9e:da:82:8e:35:27:24:5c:01:1d:c9:8a:2c:e6:1c:61:df:7a:
         d9:7c:ea:f5:26:ae:2d:bd:62:80:f3:46:50:b7:68:95:e6:98:
         1e:8e:0c:f3:b8:47:85:ca:c2:ba:99:7a:2a:28:7d:4c:8a:2e:
         a8:d1:9d:77:3f:ab:0a:a8:b1:c9:a0:e8:7f:9a:be:06:bf:01:
         35:1d:3f:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:58:00 2025 by rpki-client