Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a353030303a3a2f33362d3336203d3e203631353932.roa
File:                     323830343a346333343a353030303a3a2f33362d3336203d3e203631353932.roa (raw, json)
Hash identifier:          2NfLMcWpDFv9skY8iLZqHtvKv9cP03qS6MotggjRON8=
Subject key identifier:   E4:4E:81:DC:92:94:36:6D:F9:A4:96:F1:A9:52:32:F0:BA:2F:79:62
Certificate issuer:       /CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
Certificate serial:       73C163DB281B49E430A7A3F4981B40804F5696C9
Authority key identifier: 45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a353030303a3a2f33362d3336203d3e203631353932.roa
Signing time:             Wed 12 Feb 2025 14:30:59 +0000
ROA not before:           Wed 12 Feb 2025 14:25:59 +0000
ROA not after:            Wed 11 Feb 2026 14:30:59 +0000
asID:                     61592
IP address blocks:        2804:4c34:5000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:c1:63:db:28:1b:49:e4:30:a7:a3:f4:98:1b:40:80:4f:56:96:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
        Validity
            Not Before: Feb 12 14:25:59 2025 GMT
            Not After : Feb 11 14:30:59 2026 GMT
        Subject: CN=E44E81DC9294366DF9A496F1A95232F0BA2F7962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1c:60:8a:31:61:7d:c3:8b:d1:9b:7c:4b:d8:
                    eb:b6:56:ea:87:8a:9a:ad:eb:dd:d5:13:53:91:59:
                    c9:10:b4:00:8a:e7:77:a0:5c:c1:6e:89:86:5b:7b:
                    28:00:be:ec:61:00:bc:a6:65:93:40:0b:2b:07:79:
                    12:6f:26:af:15:22:12:66:3a:9f:28:ca:4f:d9:b5:
                    49:4a:d4:fc:15:2d:eb:ab:4f:40:5b:25:f8:a2:95:
                    c4:ea:7e:6b:05:71:d7:34:d9:e1:4c:aa:45:58:8b:
                    d3:af:94:bb:cf:5f:fa:de:23:6d:32:26:b4:7e:c7:
                    fa:73:2b:8e:ad:93:36:c5:4e:7b:9f:51:8b:33:fc:
                    78:95:cc:df:0b:8a:47:a6:1e:4b:20:fd:9f:f7:97:
                    79:e9:0c:e0:6a:e7:ca:08:ba:f6:3b:67:72:57:3d:
                    00:52:6c:1d:cf:ae:7e:52:ef:d3:41:da:58:e4:9f:
                    1c:94:79:9c:a6:3d:92:61:54:08:51:ab:88:c6:db:
                    67:12:fc:c1:57:fd:2a:c0:5c:df:3b:4a:38:b2:25:
                    8a:5d:c2:2f:5c:dc:f5:b2:4e:b2:20:c4:d7:7a:ae:
                    df:34:a5:1a:87:1f:fe:fc:e1:36:fe:41:c4:b1:12:
                    a9:98:41:74:09:b7:30:84:bc:18:a5:d7:32:23:4d:
                    8f:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:4E:81:DC:92:94:36:6D:F9:A4:96:F1:A9:52:32:F0:BA:2F:79:62
            X509v3 Authority Key Identifier:
                keyid:45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/45D8EABBB8344E57C69E3416BF523D78A65C0103.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a353030303a3a2f33362d3336203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         a3:10:3c:c3:95:72:58:c4:7c:8d:67:7c:ad:4a:fe:a4:a6:bf:
         57:19:6d:a3:f6:56:c2:9f:34:ad:16:ca:4a:2e:32:28:53:4e:
         d6:7b:56:ab:aa:dd:35:98:a8:6c:fe:e6:31:6c:ed:16:19:48:
         21:59:84:eb:1b:d6:85:5d:9b:06:cf:11:71:46:ef:32:ed:ff:
         c0:3d:a5:2d:6d:a3:ed:82:11:5c:b3:b4:e3:73:8f:de:af:ed:
         4c:a2:85:23:d9:b0:5d:91:33:c7:3d:da:72:39:09:85:e5:7c:
         33:c3:24:1a:7d:ba:b0:5f:db:0e:32:88:77:8e:01:84:1a:2a:
         38:15:9e:83:37:ac:e3:f8:f1:1c:ea:ab:13:3c:e7:9c:c8:82:
         c7:1d:3b:c8:73:0b:ae:88:35:6f:4f:a2:74:c2:47:c4:e9:77:
         ea:28:f8:f3:2b:fe:25:f1:24:08:96:8f:53:ac:61:18:bf:55:
         10:0b:f3:61:6d:57:87:3d:d9:63:0b:f6:84:cc:68:d5:3a:c4:
         3d:48:e7:c8:44:a3:c4:f5:16:37:1d:ba:34:67:e4:ca:12:b7:
         92:98:e9:0f:dc:37:53:5c:23:78:ba:24:1e:48:ea:0e:87:02:
         aa:d5:d6:fd:13:f5:88:6e:5a:e4:13:25:37:31:69:30:a0:12:
         fe:c3:1d:87
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUc8Fj2ygbSeQwp6P0mBtAgE9WlskwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDVEOEVBQkJCODM0NEU1N0M2OUUzNDE2QkY1MjNENzhB
NjVDMDEwMzAeFw0yNTAyMTIxNDI1NTlaFw0yNjAyMTExNDMwNTlaMDMxMTAvBgNV
BAMTKEU0NEU4MURDOTI5NDM2NkRGOUE0OTZGMUE5NTIzMkYwQkEyRjc5NjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfHGCKMWF9w4vRm3xL2Ou2VuqH
ipqt693VE1ORWckQtACK53egXMFuiYZbeygAvuxhALymZZNACysHeRJvJq8VIhJm
Op8oyk/ZtUlK1PwVLeurT0BbJfiilcTqfmsFcdc02eFMqkVYi9OvlLvPX/reI20y
JrR+x/pzK46tkzbFTnufUYsz/HiVzN8LikemHksg/Z/3l3npDOBq58oIuvY7Z3JX
PQBSbB3Prn5S79NB2ljknxyUeZymPZJhVAhRq4jG22cS/MFX/SrAXN87SjiyJYpd
wi9c3PWyTrIgxNd6rt80pRqHH/784Tb+QcSxEqmYQXQJtzCEvBil1zIjTY+jAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQU5E6B3JKUNm35pJbxqVIy8LoveWIwHwYDVR0j
BBgwFoAURdjqu7g0TlfGnjQWv1I9eKZcAQMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkVMOW1ydlBYZ2NwTGJDUTFNbnFhSlVnUkx2YXhhWUp4QThzMzdHUG84
bXAvMC80NUQ4RUFCQkI4MzQ0RTU3QzY5RTM0MTZCRjUyM0Q3OEE2NUMwMTAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ1RDhFQUJCQjgzNDRFNTdD
NjlFMzQxNkJGNTIzRDc4QTY1QzAxMDMuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJFTDltcnZQWGdjcExiQ1ExTW5xYUpVZ1JMdmF4YVlKeEE4czM3R1BvOG1wLzAv
MzIzODMwMzQzYTM0NjMzMzM0M2EzNTMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDM2MzEzNTM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQoBEw0UDANBgkqhkiG9w0BAQsFAAOC
AQEAoxA8w5VyWMR8jWd8rUr+pKa/Vxlto/ZWwp80rRbKSi4yKFNO1ntWq6rdNZio
bP7mMWztFhlIIVmE6xvWhV2bBs8RcUbvMu3/wD2lLW2j7YIRXLO043OP3q/tTKKF
I9mwXZEzxz3acjkJheV8M8MkGn26sF/bDjKId44BhBoqOBWegzes4/jxHOqrEzzn
nMiCxx07yHMLrog1b0+idMJHxOl36ij48yv+JfEkCJaPU6xhGL9VEAvzYW1Xhz3Z
Ywv2hMxo1TrEPUjnyESjxPUWNx26NGfkyhK3kpjpD9w3U1wjeLokHkjqDocCqtXW
/RP1iG5a5BMlNzFpMKAS/sMdhw==
-----END CERTIFICATE-----
Generated at Wed Apr 9 19:50:41 2025 by rpki-client