Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FHT77kH5sF7PVFSVw5mekKA3CxFaGjNgMe5BDRjEJtfg/0/34352e3232342e3132332e302f32342d3234203d3e20323731333135.roa
File:                     34352e3232342e3132332e302f32342d3234203d3e20323731333135.roa (raw, json)
Hash identifier:          X8UxZSMq5znjwVJa39c82G+Hwp4CkNMSDdFbEAj1sa4=
Subject key identifier:   6E:1A:43:DC:55:88:28:3F:85:C1:4E:9B:FF:5F:73:BE:4D:3E:0F:94
Certificate issuer:       /CN=4D1BAA4B1EAC52416F42BEFE1426CF39F9B42542
Certificate serial:       48AEA8894F6FDC37CBA0FF68D2759E42C934AB1B
Authority key identifier: 4D:1B:AA:4B:1E:AC:52:41:6F:42:BE:FE:14:26:CF:39:F9:B4:25:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D1BAA4B1EAC52416F42BEFE1426CF39F9B42542.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FHT77kH5sF7PVFSVw5mekKA3CxFaGjNgMe5BDRjEJtfg/0/34352e3232342e3132332e302f32342d3234203d3e20323731333135.roa
Signing time:             Thu 19 Jan 2023 00:28:33 +0000
ROA not before:           Thu 19 Jan 2023 00:23:33 +0000
ROA not after:            Thu 18 Jan 2024 00:28:33 +0000
asID:                     271315
IP address blocks:        45.224.123.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:ae:a8:89:4f:6f:dc:37:cb:a0:ff:68:d2:75:9e:42:c9:34:ab:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D1BAA4B1EAC52416F42BEFE1426CF39F9B42542
        Validity
            Not Before: Jan 19 00:23:33 2023 GMT
            Not After : Jan 18 00:28:33 2024 GMT
        Subject: CN=6E1A43DC5588283F85C14E9BFF5F73BE4D3E0F94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:b6:e4:9f:03:e1:a9:67:fa:79:15:ae:24:e4:
                    16:5c:a6:88:2c:f4:b0:a3:70:06:c7:35:c9:c5:a5:
                    b0:18:6c:58:0a:52:2d:3e:89:06:4d:5e:3c:7e:24:
                    b6:21:d5:f6:c7:4a:1c:f6:ec:64:b1:05:71:f5:2f:
                    9f:49:60:9d:7b:48:24:92:1e:90:fa:48:cc:1c:51:
                    fa:0e:22:c1:4f:95:6f:ed:74:bc:cb:fe:8e:31:e0:
                    15:08:46:2c:fb:04:56:21:0d:7e:de:8c:ba:14:80:
                    e3:a6:d0:7c:dc:c6:4f:ee:d6:05:2b:86:d7:ff:72:
                    ca:d7:e2:ed:45:e2:3f:6c:9d:8d:a1:5e:97:3c:c8:
                    6e:d5:71:c1:09:03:61:1a:da:f4:30:42:b9:d2:5a:
                    c3:08:b4:31:11:7d:8c:c4:9d:7b:70:9c:e5:3d:0e:
                    01:28:95:30:e6:e8:32:e2:0a:26:3b:d1:7a:3f:cb:
                    9a:d1:c0:8e:77:d9:14:ab:c5:7e:f8:ef:19:89:0e:
                    1e:2b:bc:7b:1e:12:00:a9:36:a4:53:4b:69:3e:be:
                    ed:f1:23:fa:81:a0:f4:40:da:bf:c0:56:31:ca:93:
                    fe:b2:9c:a0:6d:32:4e:10:8e:c8:5e:6f:c6:04:72:
                    2e:fd:b3:b5:81:2e:96:25:5c:d3:a7:f1:7b:1f:76:
                    f3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:1A:43:DC:55:88:28:3F:85:C1:4E:9B:FF:5F:73:BE:4D:3E:0F:94
            X509v3 Authority Key Identifier:
                keyid:4D:1B:AA:4B:1E:AC:52:41:6F:42:BE:FE:14:26:CF:39:F9:B4:25:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FHT77kH5sF7PVFSVw5mekKA3CxFaGjNgMe5BDRjEJtfg/0/4D1BAA4B1EAC52416F42BEFE1426CF39F9B42542.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D1BAA4B1EAC52416F42BEFE1426CF39F9B42542.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FHT77kH5sF7PVFSVw5mekKA3CxFaGjNgMe5BDRjEJtfg/0/34352e3232342e3132332e302f32342d3234203d3e20323731333135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:e0:e6:db:27:de:6a:95:79:72:e5:4d:14:44:20:81:b1:aa:
         61:1d:71:17:87:fb:9b:e2:21:e6:24:6c:e8:24:ca:d3:10:f7:
         b7:87:b6:80:1d:43:a2:9e:20:2a:82:53:ff:b2:3b:57:1e:d0:
         17:0b:bd:e6:df:27:ca:a4:1e:fd:0e:5c:54:af:61:4f:1a:04:
         a4:2a:9b:99:ab:a9:28:de:cc:c2:dd:c0:08:95:df:a2:35:9b:
         bf:ec:84:fb:7a:bf:3c:76:34:02:82:9a:01:f7:19:66:2d:67:
         d2:75:30:03:b8:a1:4e:2e:3c:6f:d7:63:16:07:94:c4:35:cc:
         8c:0a:b7:91:23:66:00:52:1c:47:68:57:f2:83:eb:15:cd:31:
         f3:6c:1f:19:e3:ff:29:00:3d:14:11:27:28:43:e5:31:86:c0:
         c7:2a:f2:b2:8e:3a:54:5a:e4:69:1e:5e:c1:ae:ae:b4:2f:f0:
         5e:49:dd:a5:45:cb:a8:3f:39:af:24:dc:26:7b:cb:9f:25:f4:
         d3:9f:ad:5b:86:25:4f:c3:c8:53:7c:56:99:91:e2:09:4a:ec:
         d2:ee:dd:d2:0f:12:59:98:60:d0:ab:fe:d1:77:f8:9d:e5:fc:
         83:cc:b3:57:fd:43:38:1c:2c:3d:c5:4d:62:59:8a:0b:77:73:
         81:dd:0b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 21:53:45 2025 by rpki-client