Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a323030303a3a2f33362d3336203d3e203631353932.roa
File:                     323830343a346333343a323030303a3a2f33362d3336203d3e203631353932.roa (raw, json)
Hash identifier:          KpLwBL58dewTHYPLuBm9V/DNhhe85/nWe3ohGgNqQ6Y=
Subject key identifier:   9C:A2:90:4C:A6:74:2B:81:46:13:A5:A6:4A:27:1A:A8:6A:81:D7:C3
Certificate issuer:       /CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
Certificate serial:       2BBB3CE46274660FD26F82EBF7DD01C6F8B5D7DB
Authority key identifier: 45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a323030303a3a2f33362d3336203d3e203631353932.roa
Signing time:             Wed 12 Feb 2025 14:31:00 +0000
ROA not before:           Wed 12 Feb 2025 14:26:00 +0000
ROA not after:            Wed 11 Feb 2026 14:31:00 +0000
asID:                     61592
IP address blocks:        2804:4c34:2000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:bb:3c:e4:62:74:66:0f:d2:6f:82:eb:f7:dd:01:c6:f8:b5:d7:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
        Validity
            Not Before: Feb 12 14:26:00 2025 GMT
            Not After : Feb 11 14:31:00 2026 GMT
        Subject: CN=9CA2904CA6742B814613A5A64A271AA86A81D7C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b7:7a:80:7a:09:2c:a2:98:13:3a:a1:51:83:
                    9f:4e:29:6a:06:de:92:fb:90:c9:6d:29:f6:ce:32:
                    67:95:82:20:21:dd:c9:c7:6f:94:08:fa:d0:5b:f9:
                    82:eb:f4:6c:8d:bb:dc:1c:92:57:7e:52:c0:10:62:
                    85:5a:ef:70:12:9d:c7:a0:81:34:fa:66:aa:0a:d5:
                    84:61:15:dc:5d:9b:e8:35:c9:87:8e:be:f6:df:e1:
                    ce:f3:4b:9b:cf:d7:8a:a5:ec:9f:1d:7d:4c:2b:fb:
                    16:af:c5:18:62:56:7e:37:c9:aa:55:20:7a:2e:55:
                    ae:c1:c0:5d:50:d7:52:92:7b:15:74:9f:f3:b9:15:
                    b9:4c:12:be:dc:49:f9:1f:e8:7d:77:a0:a9:d8:e4:
                    e5:fb:0c:af:11:85:d9:9d:fc:e2:2b:7b:9d:14:e4:
                    b4:ab:24:bb:da:b5:18:2c:0f:46:70:73:9e:e9:fa:
                    66:8f:9d:00:d2:1b:c1:5e:af:64:33:0b:1b:24:cf:
                    2f:28:ad:2f:c9:b1:ea:01:f3:77:24:7d:68:75:ae:
                    f1:da:0a:0f:c2:2e:96:19:d2:e8:a9:76:c3:57:0a:
                    06:ce:62:81:85:44:4b:a4:d8:6b:6e:d7:e4:9e:1e:
                    fd:69:9e:9b:ac:9e:74:0e:70:71:4b:1e:89:4f:d7:
                    b0:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:A2:90:4C:A6:74:2B:81:46:13:A5:A6:4A:27:1A:A8:6A:81:D7:C3
            X509v3 Authority Key Identifier:
                keyid:45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/45D8EABBB8344E57C69E3416BF523D78A65C0103.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a323030303a3a2f33362d3336203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         44:12:7f:aa:45:eb:63:a3:78:ee:ef:90:ed:1f:92:70:15:1b:
         ec:17:8b:38:89:4a:4c:a9:e2:ff:07:4a:fd:e2:7c:ea:63:ac:
         75:2c:22:d9:d1:7e:47:ea:e8:75:13:e5:8b:05:15:8b:23:87:
         b9:ff:fe:52:91:e0:c6:9c:a9:52:3e:a4:14:8e:ad:45:ea:71:
         17:e2:60:53:27:b1:35:5f:cf:2a:e2:61:88:56:e5:29:6e:8d:
         88:91:f5:8d:65:86:49:e0:2f:cb:53:d5:6f:c2:05:c7:79:5f:
         11:3b:36:3c:54:d1:48:52:c3:cb:58:ea:0a:5f:d2:ac:b4:59:
         fb:ad:ba:8b:0e:52:21:53:23:11:23:da:08:c3:ef:c2:ce:8e:
         7c:5a:83:8f:a2:0f:dc:e8:2a:f5:e5:75:1e:66:c9:74:52:21:
         eb:c4:40:8e:52:bb:6c:a9:ed:10:cc:5e:87:47:35:b8:5c:b7:
         58:31:68:6c:1f:d9:c9:d3:30:82:a7:03:4b:39:f9:21:4d:bc:
         1d:95:38:dd:0c:03:9c:a0:3b:ff:0b:2f:ac:e6:9a:7b:da:e4:
         0a:eb:d5:8b:6c:e6:71:76:84:4c:75:2d:23:b2:0e:3e:05:c6:
         e2:a6:bb:54:75:01:1e:08:03:4e:66:9b:84:63:f4:0d:a2:93:
         4e:0d:4d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 19:55:38 2025 by rpki-client