Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a313030303a3a2f33362d3336203d3e203631353932.roa
File:                     323830343a346333343a313030303a3a2f33362d3336203d3e203631353932.roa (raw, json)
Hash identifier:          Ly/vEqovtrrTyyhhmpBvks8UUkE1370PNv7v6gtraGU=
Subject key identifier:   6B:AE:10:FD:9D:F0:E9:E7:BE:96:AE:56:BF:B5:B6:18:00:03:67:88
Certificate issuer:       /CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
Certificate serial:       3827071A1880BDF2E66FD70574FF8D69AD75B3F1
Authority key identifier: 45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a313030303a3a2f33362d3336203d3e203631353932.roa
Signing time:             Wed 12 Feb 2025 14:31:02 +0000
ROA not before:           Wed 12 Feb 2025 14:26:02 +0000
ROA not after:            Wed 11 Feb 2026 14:31:02 +0000
asID:                     61592
IP address blocks:        2804:4c34:1000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:27:07:1a:18:80:bd:f2:e6:6f:d7:05:74:ff:8d:69:ad:75:b3:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
        Validity
            Not Before: Feb 12 14:26:02 2025 GMT
            Not After : Feb 11 14:31:02 2026 GMT
        Subject: CN=6BAE10FD9DF0E9E7BE96AE56BFB5B61800036788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6f:bf:6e:b1:79:ef:ca:c4:4c:a0:5e:8b:8f:
                    f9:5a:40:87:5b:17:c9:2c:c4:b6:7f:3b:a1:00:1b:
                    ba:73:f6:e4:04:f4:7a:cc:22:3b:bc:0e:d7:2a:6e:
                    1a:d2:ac:c9:69:ad:1e:bb:4e:fc:f2:6b:d9:af:d8:
                    d3:4a:32:ac:52:34:a2:5f:a7:72:4f:58:26:cc:a1:
                    08:62:36:c6:4c:3c:5d:1a:3a:61:e0:cf:53:e6:70:
                    f2:13:14:39:04:68:26:f7:27:8c:5a:5d:bd:86:df:
                    c4:1e:af:c9:bf:e4:84:11:5a:e4:99:54:ef:1e:f0:
                    cf:e1:e1:35:91:34:26:a4:c3:d0:bf:3c:7a:bd:79:
                    35:01:9f:ad:4c:93:42:ea:12:5b:eb:90:34:6f:2a:
                    a6:7d:43:bd:1c:62:0a:8e:73:e0:bc:dc:06:4a:6c:
                    6b:d9:a8:ba:e1:2d:b5:8d:4a:88:3d:95:2d:01:38:
                    78:9a:98:9a:99:d3:c9:7b:c4:2f:30:63:90:87:41:
                    6c:13:67:8f:f1:e0:fe:eb:b7:f4:e9:fe:c1:22:c3:
                    59:ac:cc:ea:a7:78:19:61:43:84:12:4a:f2:c4:69:
                    62:67:df:99:c8:b5:17:7f:7e:d0:30:a6:74:af:94:
                    e8:23:93:8b:00:94:12:d1:60:9a:68:1d:cc:31:2b:
                    bd:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:AE:10:FD:9D:F0:E9:E7:BE:96:AE:56:BF:B5:B6:18:00:03:67:88
            X509v3 Authority Key Identifier:
                keyid:45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/45D8EABBB8344E57C69E3416BF523D78A65C0103.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a313030303a3a2f33362d3336203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         14:ed:fb:81:81:1d:76:4d:8f:f9:9f:63:77:21:a5:e9:17:02:
         57:8c:4b:b5:c3:d1:d5:a0:4b:16:fc:9e:02:59:0b:93:53:dd:
         d4:9c:f7:b4:28:3a:d6:0c:ca:15:f2:51:7e:f0:95:ad:5d:a9:
         4e:de:6c:bf:2f:d0:4f:53:d5:9f:34:6b:84:d0:d3:6e:79:bc:
         33:06:00:64:ba:da:5c:d1:f0:a8:99:88:7c:57:52:89:84:c6:
         c9:fa:48:74:f2:5d:47:fd:1b:0b:63:87:45:1d:e9:42:6d:48:
         e0:bd:a8:e4:bd:33:fe:e9:33:e4:ca:12:69:8b:ba:2d:5f:7e:
         91:51:28:1b:66:7c:da:64:17:ad:7c:36:4a:51:dc:d5:09:23:
         6b:cc:e8:3c:64:40:14:0e:09:64:b6:68:7f:34:87:19:13:d7:
         02:dc:a7:5d:5a:9a:2d:ab:dc:0b:1f:2b:4c:44:ce:d7:00:30:
         e1:86:df:de:f1:af:cd:18:60:0a:d3:ce:b3:ba:68:79:45:6c:
         b9:dc:22:e6:8e:2d:80:74:db:e1:b9:74:89:53:dd:71:f9:d0:
         b1:50:a4:3a:98:f9:c6:82:75:59:98:23:83:31:42:c0:2f:5a:
         ea:a4:5e:c9:c4:d4:48:43:85:07:a2:c0:f9:e7:8b:c0:23:1b:
         c5:f3:5f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:39:56 2025 by rpki-client