Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a343030663a3a2f34382d3438203d3e203631353932.roa
File:                     323830343a346333343a343030663a3a2f34382d3438203d3e203631353932.roa (raw, json)
Hash identifier:          lRxByuTEmqPLvvw0Sggpns2p/wlwGqD3Rq3c+S6xr1U=
Subject key identifier:   BA:DD:21:47:F3:19:E6:9F:38:97:FF:61:87:8F:1D:C0:D5:0B:5D:31
Certificate issuer:       /CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
Certificate serial:       745A5919F72CE049129F03B9A37704D3847A4B9F
Authority key identifier: 45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a343030663a3a2f34382d3438203d3e203631353932.roa
Signing time:             Wed 12 Feb 2025 14:31:02 +0000
ROA not before:           Wed 12 Feb 2025 14:26:02 +0000
ROA not after:            Wed 11 Feb 2026 14:31:02 +0000
asID:                     61592
IP address blocks:        2804:4c34:400f::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:5a:59:19:f7:2c:e0:49:12:9f:03:b9:a3:77:04:d3:84:7a:4b:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
        Validity
            Not Before: Feb 12 14:26:02 2025 GMT
            Not After : Feb 11 14:31:02 2026 GMT
        Subject: CN=BADD2147F319E69F3897FF61878F1DC0D50B5D31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2d:aa:79:34:21:20:c3:da:82:89:2a:39:8d:
                    20:e9:8b:7e:97:56:2d:e2:55:ca:08:88:b5:a3:5c:
                    07:33:1e:ae:71:f5:a4:dc:37:28:5c:44:65:81:44:
                    ca:4d:6c:ce:49:2a:aa:86:a8:20:c9:20:2e:c2:63:
                    76:0e:90:7f:59:39:dd:8f:80:bc:49:07:f4:53:0e:
                    07:b1:50:6f:67:c2:0c:09:f6:4d:d0:b3:4c:e9:07:
                    94:ab:ce:99:3f:ac:8c:52:77:51:0b:d9:95:fd:63:
                    24:14:2d:82:45:40:b5:64:7e:f6:6a:b1:9e:08:87:
                    d6:48:d7:4b:c0:97:e4:41:cf:c7:d8:e6:db:fa:0b:
                    3a:66:9b:3e:ed:68:b8:ac:d5:c4:ec:c6:3f:4c:70:
                    7e:59:49:55:db:7a:d1:63:6a:8c:93:44:60:bc:78:
                    03:82:19:54:02:ee:22:aa:b1:a9:dd:ca:ba:91:e6:
                    01:68:bb:6f:db:d7:17:f6:72:de:cb:21:24:cd:83:
                    d1:1f:9e:69:0a:08:c5:a2:fa:90:90:4b:28:2d:a3:
                    13:04:f1:a0:a6:19:da:32:70:f0:cc:76:24:87:79:
                    89:0f:66:a1:95:25:66:6c:96:fd:14:e3:bc:01:c0:
                    60:20:b2:ca:68:76:88:dc:ca:33:7d:a3:03:23:a3:
                    de:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:DD:21:47:F3:19:E6:9F:38:97:FF:61:87:8F:1D:C0:D5:0B:5D:31
            X509v3 Authority Key Identifier:
                keyid:45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/45D8EABBB8344E57C69E3416BF523D78A65C0103.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a343030663a3a2f34382d3438203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:400f::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:8a:0f:88:9b:01:54:96:87:a9:d6:31:49:9b:9a:e1:2a:96:
         00:d6:8d:91:82:fe:85:3a:b6:d6:2d:7b:1a:be:3a:3c:ff:cd:
         b7:b3:34:94:4c:fd:c0:91:29:41:e8:87:cb:26:a9:12:e5:f5:
         4e:cc:a6:da:e1:00:76:5c:07:d5:4a:96:47:ef:25:04:8f:70:
         27:80:3e:85:25:9a:30:27:78:9e:d1:4e:59:b3:c7:a6:5f:20:
         93:f5:5c:09:6e:61:cf:bb:c1:63:49:ed:cf:ba:77:36:42:5e:
         4b:06:5f:ad:37:b5:65:60:44:2d:18:13:85:c7:0e:53:b7:f8:
         d4:f1:ef:14:6d:5a:69:3d:d2:36:0d:c5:e6:f6:9e:e7:e2:c9:
         36:5d:2c:8e:51:9d:00:ee:b6:4d:c6:81:05:a5:af:c7:be:77:
         ed:74:38:d4:f1:6d:cd:57:fe:d5:fa:5c:81:40:92:56:76:fd:
         6f:cb:92:9c:22:e2:90:8f:0e:25:81:6b:81:63:2c:d3:16:9c:
         fd:71:fb:9f:f0:6f:6f:6e:9c:62:94:74:f5:82:07:be:1f:4c:
         4d:23:83:bb:64:fd:b3:07:fb:5d:cd:ff:48:12:8b:67:7d:50:
         d2:47:a6:fc:49:bc:9d:60:d9:35:8d:bf:7e:62:ab:33:01:75:
         74:89:15:49
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUdFpZGfcs4EkSnwO5o3cE04R6S58wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDVEOEVBQkJCODM0NEU1N0M2OUUzNDE2QkY1MjNENzhB
NjVDMDEwMzAeFw0yNTAyMTIxNDI2MDJaFw0yNjAyMTExNDMxMDJaMDMxMTAvBgNV
BAMTKEJBREQyMTQ3RjMxOUU2OUYzODk3RkY2MTg3OEYxREMwRDUwQjVEMzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7Lap5NCEgw9qCiSo5jSDpi36X
Vi3iVcoIiLWjXAczHq5x9aTcNyhcRGWBRMpNbM5JKqqGqCDJIC7CY3YOkH9ZOd2P
gLxJB/RTDgexUG9nwgwJ9k3Qs0zpB5Srzpk/rIxSd1EL2ZX9YyQULYJFQLVkfvZq
sZ4Ih9ZI10vAl+RBz8fY5tv6Czpmmz7taLis1cTsxj9McH5ZSVXbetFjaoyTRGC8
eAOCGVQC7iKqsandyrqR5gFou2/b1xf2ct7LISTNg9EfnmkKCMWi+pCQSygtoxME
8aCmGdoycPDMdiSHeYkPZqGVJWZslv0U47wBwGAgsspodojcyjN9owMjo94ZAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUut0hR/MZ5p84l/9hh48dwNULXTEwHwYDVR0j
BBgwFoAURdjqu7g0TlfGnjQWv1I9eKZcAQMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkVMOW1ydlBYZ2NwTGJDUTFNbnFhSlVnUkx2YXhhWUp4QThzMzdHUG84
bXAvMC80NUQ4RUFCQkI4MzQ0RTU3QzY5RTM0MTZCRjUyM0Q3OEE2NUMwMTAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ1RDhFQUJCQjgzNDRFNTdD
NjlFMzQxNkJGNTIzRDc4QTY1QzAxMDMuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJFTDltcnZQWGdjcExiQ1ExTW5xYUpVZ1JMdmF4YVlKeEE4czM3R1BvOG1wLzAv
MzIzODMwMzQzYTM0NjMzMzM0M2EzNDMwMzA2NjNhM2EyZjM0MzgyZDM0MzgyMDNk
M2UyMDM2MzEzNTM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAoBEw0QA8wDQYJKoZIhvcNAQELBQAD
ggEBABWKD4ibAVSWh6nWMUmbmuEqlgDWjZGC/oU6ttYtexq+Ojz/zbezNJRM/cCR
KUHoh8smqRLl9U7MptrhAHZcB9VKlkfvJQSPcCeAPoUlmjAneJ7RTlmzx6ZfIJP1
XAluYc+7wWNJ7c+6dzZCXksGX603tWVgRC0YE4XHDlO3+NTx7xRtWmk90jYNxeb2
nufiyTZdLI5RnQDutk3GgQWlr8e+d+10ONTxbc1X/tX6XIFAklZ2/W/Lkpwi4pCP
DiWBa4FjLNMWnP1x+5/wb29unGKUdPWCB74fTE0jg7tk/bMH+13N/0gSi2d9UNJH
pvxJvJ1g2TWNv35iqzMBdXSJFUk=
-----END CERTIFICATE-----
Generated at Wed Apr 9 19:30:28 2025 by rpki-client