Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a3a2f33362d3336203d3e203631353932.roa
File:                     323830343a346333343a3a2f33362d3336203d3e203631353932.roa (raw, json)
Hash identifier:          m9KKh9+AdzRJm7FMGurUn4lHtk7r4nXYY/C35zjwKNY=
Subject key identifier:   33:3F:92:C2:74:81:65:14:EC:60:B9:78:C0:09:EA:17:4E:1F:58:41
Certificate issuer:       /CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
Certificate serial:       2CF758E6E0E8CE3780C4847DFF8113623428D999
Authority key identifier: 45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a3a2f33362d3336203d3e203631353932.roa
Signing time:             Wed 12 Feb 2025 14:31:01 +0000
ROA not before:           Wed 12 Feb 2025 14:26:01 +0000
ROA not after:            Wed 11 Feb 2026 14:31:01 +0000
asID:                     61592
IP address blocks:        2804:4c34::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:f7:58:e6:e0:e8:ce:37:80:c4:84:7d:ff:81:13:62:34:28:d9:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
        Validity
            Not Before: Feb 12 14:26:01 2025 GMT
            Not After : Feb 11 14:31:01 2026 GMT
        Subject: CN=333F92C274816514EC60B978C009EA174E1F5841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:79:33:99:15:2e:9e:26:14:9b:2e:48:6f:59:
                    35:7a:91:1b:96:c3:48:55:58:51:a2:8f:72:5a:ea:
                    55:46:ae:be:71:eb:d4:66:d6:e6:b0:e6:2a:12:31:
                    77:28:e5:df:eb:45:0b:8b:27:6d:e5:53:a3:bd:37:
                    90:21:30:b3:8c:ab:cc:a1:93:78:8c:73:9e:aa:a3:
                    be:f8:53:c3:d6:81:ad:c6:75:bd:2f:f3:0f:fb:73:
                    fa:c3:70:86:7b:0f:6b:9e:ba:2e:05:38:44:6e:3d:
                    a5:56:46:a5:b2:c3:b3:e5:02:4c:f4:22:41:f6:85:
                    90:87:ac:c0:bd:1c:89:90:a3:c9:d2:9f:b7:86:d8:
                    fb:7a:fd:00:68:5c:0a:32:17:db:68:ab:d8:77:b7:
                    dc:a6:fc:71:22:d8:7a:e0:c5:6e:1b:81:3f:3a:9c:
                    30:75:8d:62:d4:e4:c8:fb:b2:03:bd:83:e6:5b:94:
                    6a:f2:76:6c:f4:2f:91:bb:81:31:70:5c:c1:18:eb:
                    1c:9c:93:db:d2:bc:7a:1d:03:26:78:5d:71:fd:9f:
                    2a:d6:63:9c:ce:85:cb:cb:5b:77:15:ae:c4:2d:6c:
                    1c:b4:9f:c2:78:ce:3a:95:6e:95:98:86:db:31:84:
                    48:3b:31:44:dc:91:de:c8:5d:34:08:ba:2e:07:94:
                    aa:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:3F:92:C2:74:81:65:14:EC:60:B9:78:C0:09:EA:17:4E:1F:58:41
            X509v3 Authority Key Identifier:
                keyid:45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/45D8EABBB8344E57C69E3416BF523D78A65C0103.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a3a2f33362d3336203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34::/36

    Signature Algorithm: sha256WithRSAEncryption
         7d:40:98:25:d2:ef:0f:49:99:43:27:cd:82:64:2a:c7:bb:ab:
         a3:8c:e1:15:8f:2c:a2:61:de:41:6a:a9:c6:5a:68:29:e4:74:
         04:23:2f:fe:55:56:3f:e2:ba:04:d1:d1:92:03:f5:6e:14:a6:
         42:bc:d7:38:14:96:a2:ff:73:26:b1:b3:56:76:30:28:5a:7d:
         df:3a:74:23:30:32:1d:c7:88:33:7a:8c:10:1d:6b:b6:f8:6e:
         55:b5:25:98:a4:68:89:5b:42:94:df:36:ac:da:35:9e:89:09:
         8e:12:d9:8f:da:9e:49:41:5c:1a:4b:c2:86:3e:14:b6:44:b2:
         cd:82:68:45:89:24:14:45:74:60:fe:bb:cb:5e:d8:4b:62:0a:
         1d:b8:86:dc:85:c5:79:46:4a:ec:20:63:ef:7e:94:fd:90:65:
         e2:2c:e6:13:ce:ed:60:5e:fc:59:82:4f:8e:57:8c:bc:5d:db:
         4c:32:7d:72:d2:21:f7:e8:91:e7:c9:95:1c:dc:91:bc:35:3f:
         7a:e5:6f:97:7b:f0:90:02:66:53:77:95:f9:18:3b:ad:30:f1:
         f8:7e:63:4f:fa:ea:05:e5:b2:2a:30:6e:42:f8:6a:2a:6a:14:
         2d:a2:13:1f:0b:f3:e9:28:ed:11:66:72:1c:ab:6e:e0:13:31:
         a0:5f:40:53
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIULPdY5uDozjeAxIR9/4ETYjQo2ZkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDVEOEVBQkJCODM0NEU1N0M2OUUzNDE2QkY1MjNENzhB
NjVDMDEwMzAeFw0yNTAyMTIxNDI2MDFaFw0yNjAyMTExNDMxMDFaMDMxMTAvBgNV
BAMTKDMzM0Y5MkMyNzQ4MTY1MTRFQzYwQjk3OEMwMDlFQTE3NEUxRjU4NDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWeTOZFS6eJhSbLkhvWTV6kRuW
w0hVWFGij3Ja6lVGrr5x69Rm1uaw5ioSMXco5d/rRQuLJ23lU6O9N5AhMLOMq8yh
k3iMc56qo774U8PWga3Gdb0v8w/7c/rDcIZ7D2ueui4FOERuPaVWRqWyw7PlAkz0
IkH2hZCHrMC9HImQo8nSn7eG2Pt6/QBoXAoyF9toq9h3t9ym/HEi2HrgxW4bgT86
nDB1jWLU5Mj7sgO9g+ZblGrydmz0L5G7gTFwXMEY6xyck9vSvHodAyZ4XXH9nyrW
Y5zOhcvLW3cVrsQtbBy0n8J4zjqVbpWYhtsxhEg7MUTckd7IXTQIui4HlKphAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUMz+SwnSBZRTsYLl4wAnqF04fWEEwHwYDVR0j
BBgwFoAURdjqu7g0TlfGnjQWv1I9eKZcAQMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkVMOW1ydlBYZ2NwTGJDUTFNbnFhSlVnUkx2YXhhWUp4QThzMzdHUG84
bXAvMC80NUQ4RUFCQkI4MzQ0RTU3QzY5RTM0MTZCRjUyM0Q3OEE2NUMwMTAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ1RDhFQUJCQjgzNDRFNTdD
NjlFMzQxNkJGNTIzRDc4QTY1QzAxMDMuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJFTDltcnZQWGdjcExiQ1ExTW5xYUpVZ1JMdmF4YVlKeEE4czM3R1BvOG1wLzAv
MzIzODMwMzQzYTM0NjMzMzM0M2EzYTJmMzMzNjJkMzMzNjIwM2QzZTIwMzYzMTM1
MzkzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwDgQCAAIwCAMGBCgETDQAMA0GCSqGSIb3DQEBCwUAA4IBAQB9QJgl0u8P
SZlDJ82CZCrHu6ujjOEVjyyiYd5BaqnGWmgp5HQEIy/+VVY/4roE0dGSA/VuFKZC
vNc4FJai/3MmsbNWdjAoWn3fOnQjMDIdx4gzeowQHWu2+G5VtSWYpGiJW0KU3zas
2jWeiQmOEtmP2p5JQVwaS8KGPhS2RLLNgmhFiSQURXRg/rvLXthLYgoduIbchcV5
RkrsIGPvfpT9kGXiLOYTzu1gXvxZgk+OV4y8XdtMMn1y0iH36JHnyZUc3JG8NT96
5W+Xe/CQAmZTd5X5GDutMPH4fmNP+uoF5bIqMG5C+GoqahQtohMfC/PpKO0RZnIc
q27gEzGgX0BT
-----END CERTIFICATE-----
Generated at Wed Apr 9 19:27:59 2025 by rpki-client