Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/34352e3233342e3130302e302f32332d3233203d3e203631353932.roa
File:                     34352e3233342e3130302e302f32332d3233203d3e203631353932.roa (raw, json)
Hash identifier:          05x9Dt9/2QiqAPfafkCIZ/Ju6ijHHz3r379HaFdI0Qk=
Subject key identifier:   8E:16:D2:61:DB:6C:60:6D:3B:85:D4:DC:24:EB:19:65:26:CB:85:9C
Certificate issuer:       /CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
Certificate serial:       295DCCCDD34E90B265B499F16CCC8C76E8E801DB
Authority key identifier: 45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/34352e3233342e3130302e302f32332d3233203d3e203631353932.roa
Signing time:             Wed 12 Feb 2025 14:31:00 +0000
ROA not before:           Wed 12 Feb 2025 14:26:00 +0000
ROA not after:            Wed 11 Feb 2026 14:31:00 +0000
asID:                     61592
IP address blocks:        45.234.100.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:5d:cc:cd:d3:4e:90:b2:65:b4:99:f1:6c:cc:8c:76:e8:e8:01:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
        Validity
            Not Before: Feb 12 14:26:00 2025 GMT
            Not After : Feb 11 14:31:00 2026 GMT
        Subject: CN=8E16D261DB6C606D3B85D4DC24EB196526CB859C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2b:b6:97:39:a3:a8:c7:75:21:30:4a:1a:aa:
                    e1:62:dd:63:07:a4:63:57:b7:0b:82:35:a0:6f:c6:
                    b5:24:9a:49:52:36:00:bb:c9:14:06:17:8f:7b:19:
                    8c:52:54:8f:4b:1c:43:ad:28:7c:41:0f:e7:c3:f0:
                    1d:2d:cd:f8:52:3c:bd:d9:99:63:51:57:11:9e:d4:
                    da:d0:9f:61:e6:f6:45:d5:6d:6a:53:c7:bc:59:5c:
                    d5:12:57:05:d2:d6:e2:ba:b1:59:4b:aa:e4:37:2d:
                    b4:3b:8b:bd:2f:01:e7:7a:a4:b4:29:71:ee:0b:c0:
                    9a:1b:85:95:1c:7f:ca:77:22:d3:37:de:fa:d6:b3:
                    bb:eb:3f:34:94:48:e1:64:64:d1:18:6e:b4:63:ea:
                    06:da:66:cc:71:91:58:21:48:29:03:7b:e2:81:4a:
                    56:a7:c3:3e:de:0a:9a:6d:9b:a3:73:0e:33:8d:5f:
                    51:30:ad:7e:1e:69:d3:42:07:04:8f:ea:d4:30:c5:
                    74:81:98:d0:58:9b:51:be:37:ec:1b:0b:71:6a:55:
                    e8:56:8b:43:9e:5f:5b:07:e3:56:0b:70:4a:7d:16:
                    db:52:ac:33:e4:80:8a:fe:18:aa:4c:7f:65:c0:07:
                    e9:a8:e5:0b:9d:7c:7b:ff:7c:8f:54:e4:f2:fd:01:
                    5b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:16:D2:61:DB:6C:60:6D:3B:85:D4:DC:24:EB:19:65:26:CB:85:9C
            X509v3 Authority Key Identifier:
                keyid:45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/45D8EABBB8344E57C69E3416BF523D78A65C0103.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/34352e3233342e3130302e302f32332d3233203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b9:c1:de:ac:d8:de:16:f1:c1:9c:0f:ae:51:50:53:c1:d8:f6:
         c6:dc:79:22:0b:42:fa:8b:84:e1:52:fc:27:c7:b6:8a:4d:60:
         fb:da:30:c5:45:48:c9:7b:10:ac:19:06:dd:2d:1f:cf:90:a9:
         00:01:f7:25:0e:12:82:8e:cf:72:26:0d:83:77:2c:a7:f9:47:
         55:ab:f3:9a:e2:bb:2a:33:a4:64:1c:d8:4c:0e:18:10:45:4b:
         53:d4:9f:33:f6:1d:db:62:9f:ac:61:c8:5b:f2:00:8e:b9:f2:
         59:1e:6a:7a:d0:00:91:e6:f3:22:39:94:c8:e4:f4:89:bf:49:
         92:cc:9d:a7:6a:62:1d:40:54:9a:aa:ef:f7:58:d7:ee:f8:6f:
         97:f7:3f:3f:4b:bc:09:75:94:84:e0:b3:80:8e:40:67:2b:9a:
         cd:62:de:3a:f0:75:2a:e8:59:91:2a:f8:d2:4a:e5:12:d1:c0:
         87:a1:33:08:b5:26:7c:b2:f7:9f:fe:d2:5e:1b:f1:19:31:35:
         a9:85:6a:d4:ef:b5:85:6e:9a:69:0a:4a:73:ba:4f:5c:48:a5:
         1f:93:b0:e4:58:5a:4f:9f:b7:08:fb:5f:bb:ec:54:b5:23:60:
         2c:93:16:59:24:b0:cb:0d:ab:a7:bf:36:0e:8e:71:62:96:84:
         e4:00:08:42
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUKV3MzdNOkLJltJnxbMyMdujoAdswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDVEOEVBQkJCODM0NEU1N0M2OUUzNDE2QkY1MjNENzhB
NjVDMDEwMzAeFw0yNTAyMTIxNDI2MDBaFw0yNjAyMTExNDMxMDBaMDMxMTAvBgNV
BAMTKDhFMTZEMjYxREI2QzYwNkQzQjg1RDREQzI0RUIxOTY1MjZDQjg1OUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvK7aXOaOox3UhMEoaquFi3WMH
pGNXtwuCNaBvxrUkmklSNgC7yRQGF497GYxSVI9LHEOtKHxBD+fD8B0tzfhSPL3Z
mWNRVxGe1NrQn2Hm9kXVbWpTx7xZXNUSVwXS1uK6sVlLquQ3LbQ7i70vAed6pLQp
ce4LwJobhZUcf8p3ItM33vrWs7vrPzSUSOFkZNEYbrRj6gbaZsxxkVghSCkDe+KB
Slanwz7eCpptm6NzDjONX1EwrX4eadNCBwSP6tQwxXSBmNBYm1G+N+wbC3FqVehW
i0OeX1sH41YLcEp9FttSrDPkgIr+GKpMf2XAB+mo5QudfHv/fI9U5PL9AVsbAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUjhbSYdtsYG07hdTcJOsZZSbLhZwwHwYDVR0j
BBgwFoAURdjqu7g0TlfGnjQWv1I9eKZcAQMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkVMOW1ydlBYZ2NwTGJDUTFNbnFhSlVnUkx2YXhhWUp4QThzMzdHUG84
bXAvMC80NUQ4RUFCQkI4MzQ0RTU3QzY5RTM0MTZCRjUyM0Q3OEE2NUMwMTAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ1RDhFQUJCQjgzNDRFNTdD
NjlFMzQxNkJGNTIzRDc4QTY1QzAxMDMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJFTDltcnZQWGdjcExiQ1ExTW5xYUpVZ1JMdmF4YVlKeEE4czM3R1BvOG1wLzAv
MzQzNTJlMzIzMzM0MmUzMTMwMzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzNjMx
MzUzOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBLepkMA0GCSqGSIb3DQEBCwUAA4IBAQC5wd6s2N4W
8cGcD65RUFPB2PbG3HkiC0L6i4ThUvwnx7aKTWD72jDFRUjJexCsGQbdLR/PkKkA
AfclDhKCjs9yJg2Ddyyn+UdVq/Oa4rsqM6RkHNhMDhgQRUtT1J8z9h3bYp+sYchb
8gCOufJZHmp60ACR5vMiOZTI5PSJv0mSzJ2namIdQFSaqu/3WNfu+G+X9z8/S7wJ
dZSE4LOAjkBnK5rNYt468HUq6FmRKvjSSuUS0cCHoTMItSZ8svef/tJeG/EZMTWp
hWrU77WFbpppCkpzuk9cSKUfk7DkWFpPn7cI+1+77FS1I2AskxZZJLDLDaunvzYO
jnFiloTkAAhC
-----END CERTIFICATE-----
Generated at Fri Mar 14 03:38:14 2025 by rpki-client