Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a643030303a3a2f33362d3336203d3e203631353932.roa
File:                     323830343a346333343a643030303a3a2f33362d3336203d3e203631353932.roa (raw, json)
Hash identifier:          YD7u6HrawY6fA1kQAJNGvBVvxaohMpcOESG8vmp5dZU=
Subject key identifier:   9C:36:41:79:B0:3C:FC:3F:29:5B:1F:4A:7D:94:0F:2A:7D:F2:AC:AF
Certificate issuer:       /CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
Certificate serial:       7B8526BC322ED67B326C7649296A00DC33C0223D
Authority key identifier: 45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a643030303a3a2f33362d3336203d3e203631353932.roa
Signing time:             Wed 12 Feb 2025 14:31:03 +0000
ROA not before:           Wed 12 Feb 2025 14:26:03 +0000
ROA not after:            Wed 11 Feb 2026 14:31:03 +0000
asID:                     61592
IP address blocks:        2804:4c34:d000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:85:26:bc:32:2e:d6:7b:32:6c:76:49:29:6a:00:dc:33:c0:22:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
        Validity
            Not Before: Feb 12 14:26:03 2025 GMT
            Not After : Feb 11 14:31:03 2026 GMT
        Subject: CN=9C364179B03CFC3F295B1F4A7D940F2A7DF2ACAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6c:bc:05:9c:10:b9:1e:da:d9:0e:59:cf:cd:
                    c2:7c:77:be:c9:8f:63:5a:9c:0c:c0:d4:5a:4d:a9:
                    c0:1f:07:51:d8:fa:ea:07:5a:27:81:de:af:42:b4:
                    46:d2:57:48:54:02:52:66:26:8b:ed:36:06:8c:fe:
                    3d:cf:38:1f:31:97:37:c9:c9:cc:ec:9c:c7:20:5f:
                    20:90:9f:38:cb:50:57:83:cb:d9:f8:f3:87:18:73:
                    9e:88:70:46:71:03:67:2a:70:16:81:bf:6c:55:a8:
                    72:05:ee:b8:28:31:fb:8b:81:16:a3:ed:34:17:2b:
                    db:28:4b:f5:17:31:a4:d1:76:14:96:81:2d:27:4f:
                    78:34:8a:9e:3a:fe:15:17:db:01:84:dd:bb:1c:29:
                    87:9a:11:b8:25:58:3f:85:16:f8:6b:65:c4:95:1e:
                    3f:16:a4:16:36:36:84:5f:0a:04:00:79:69:13:67:
                    f8:c6:28:d4:62:05:4e:df:5c:f5:4d:73:27:54:7f:
                    c4:94:38:8b:21:5b:05:68:26:85:17:c5:33:7e:04:
                    e5:04:eb:d9:3d:b0:bb:a0:bc:82:f4:64:e0:46:1a:
                    9d:51:18:a8:d7:e1:97:0f:be:d4:8d:a3:ac:27:0c:
                    05:fe:0d:49:81:d3:ba:64:44:cd:fe:27:0d:c6:69:
                    4a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:36:41:79:B0:3C:FC:3F:29:5B:1F:4A:7D:94:0F:2A:7D:F2:AC:AF
            X509v3 Authority Key Identifier:
                keyid:45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/45D8EABBB8344E57C69E3416BF523D78A65C0103.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/323830343a346333343a643030303a3a2f33362d3336203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c34:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         83:73:b0:3c:a6:01:59:49:4e:8e:46:a4:ad:a3:5d:6b:2b:24:
         21:80:fe:56:a3:62:a6:f0:79:dd:29:16:74:70:c0:df:27:41:
         f7:1f:b8:ae:fd:3c:98:0b:a4:50:c3:67:ed:41:ec:3d:95:b3:
         73:cc:f6:94:bf:7e:67:25:7a:88:e3:9f:46:f5:47:a5:60:84:
         a7:ce:aa:8e:a4:43:c8:fa:e7:58:ea:60:41:13:9c:ed:b9:33:
         ab:02:48:b4:24:a2:8d:69:fd:39:3f:8a:2c:ef:ac:61:d5:92:
         f0:68:9e:08:65:3b:33:b6:30:9d:e7:e0:f2:87:66:c5:05:ec:
         b2:cd:b1:4e:bb:53:fc:6f:35:0b:18:c3:09:af:49:38:9e:95:
         7b:44:67:82:89:b2:bd:e4:cf:2c:a7:83:68:7a:97:78:fb:11:
         4c:05:db:82:0b:54:9e:ee:07:90:13:29:34:de:12:4c:07:56:
         d8:cc:3e:cc:89:8b:75:8f:81:2d:e5:04:94:6a:48:dd:c1:29:
         ac:1a:f9:17:89:f9:93:e5:30:06:82:fa:0a:8c:65:3d:ed:74:
         eb:5c:b3:54:54:42:51:cd:c2:4d:6d:a6:45:6c:7a:00:93:b8:
         a5:8c:f7:9e:1b:86:b7:95:fb:10:9f:d6:ff:a3:0c:dc:72:4b:
         1e:b4:8a:1f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUe4UmvDIu1nsybHZJKWoA3DPAIj0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDVEOEVBQkJCODM0NEU1N0M2OUUzNDE2QkY1MjNENzhB
NjVDMDEwMzAeFw0yNTAyMTIxNDI2MDNaFw0yNjAyMTExNDMxMDNaMDMxMTAvBgNV
BAMTKDlDMzY0MTc5QjAzQ0ZDM0YyOTVCMUY0QTdEOTQwRjJBN0RGMkFDQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCbLwFnBC5HtrZDlnPzcJ8d77J
j2NanAzA1FpNqcAfB1HY+uoHWieB3q9CtEbSV0hUAlJmJovtNgaM/j3POB8xlzfJ
yczsnMcgXyCQnzjLUFeDy9n484cYc56IcEZxA2cqcBaBv2xVqHIF7rgoMfuLgRaj
7TQXK9soS/UXMaTRdhSWgS0nT3g0ip46/hUX2wGE3bscKYeaEbglWD+FFvhrZcSV
Hj8WpBY2NoRfCgQAeWkTZ/jGKNRiBU7fXPVNcydUf8SUOIshWwVoJoUXxTN+BOUE
69k9sLugvIL0ZOBGGp1RGKjX4ZcPvtSNo6wnDAX+DUmB07pkRM3+Jw3GaUrlAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUnDZBebA8/D8pWx9KfZQPKn3yrK8wHwYDVR0j
BBgwFoAURdjqu7g0TlfGnjQWv1I9eKZcAQMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkVMOW1ydlBYZ2NwTGJDUTFNbnFhSlVnUkx2YXhhWUp4QThzMzdHUG84
bXAvMC80NUQ4RUFCQkI4MzQ0RTU3QzY5RTM0MTZCRjUyM0Q3OEE2NUMwMTAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ1RDhFQUJCQjgzNDRFNTdD
NjlFMzQxNkJGNTIzRDc4QTY1QzAxMDMuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJFTDltcnZQWGdjcExiQ1ExTW5xYUpVZ1JMdmF4YVlKeEE4czM3R1BvOG1wLzAv
MzIzODMwMzQzYTM0NjMzMzM0M2E2NDMwMzAzMDNhM2EyZjMzMzYyZDMzMzYyMDNk
M2UyMDM2MzEzNTM5MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQoBEw00DANBgkqhkiG9w0BAQsFAAOC
AQEAg3OwPKYBWUlOjkakraNdayskIYD+VqNipvB53SkWdHDA3ydB9x+4rv08mAuk
UMNn7UHsPZWzc8z2lL9+ZyV6iOOfRvVHpWCEp86qjqRDyPrnWOpgQROc7bkzqwJI
tCSijWn9OT+KLO+sYdWS8GieCGU7M7Ywnefg8odmxQXsss2xTrtT/G81CxjDCa9J
OJ6Ve0RngomyveTPLKeDaHqXePsRTAXbggtUnu4HkBMpNN4STAdW2Mw+zImLdY+B
LeUElGpI3cEprBr5F4n5k+UwBoL6CoxlPe1061yzVFRCUc3CTW2mRWx6AJO4pYz3
nhuGt5X7EJ/W/6MM3HJLHrSKHw==
-----END CERTIFICATE-----
Generated at Wed Apr 9 19:30:24 2025 by rpki-client