Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/34352e3233342e3130302e302f32342d3234203d3e203631353932.roa
File:                     34352e3233342e3130302e302f32342d3234203d3e203631353932.roa (raw, json)
Hash identifier:          qtTbbALdIST1akZjzsb0lUm6Va3iK8FTVi96FGY9gPw=
Subject key identifier:   5D:EB:AB:ED:46:E9:E1:DF:C0:67:E1:08:CC:AE:37:92:C4:46:44:78
Certificate issuer:       /CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
Certificate serial:       3C6DA84A743721EE90BB2303EF634D16C848C44A
Authority key identifier: 45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/34352e3233342e3130302e302f32342d3234203d3e203631353932.roa
Signing time:             Wed 12 Feb 2025 14:31:02 +0000
ROA not before:           Wed 12 Feb 2025 14:26:02 +0000
ROA not after:            Wed 11 Feb 2026 14:31:02 +0000
asID:                     61592
IP address blocks:        45.234.100.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:6d:a8:4a:74:37:21:ee:90:bb:23:03:ef:63:4d:16:c8:48:c4:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
        Validity
            Not Before: Feb 12 14:26:02 2025 GMT
            Not After : Feb 11 14:31:02 2026 GMT
        Subject: CN=5DEBABED46E9E1DFC067E108CCAE3792C4464478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cd:f6:b3:00:6a:44:1c:fb:58:7b:21:bb:83:
                    b7:7a:6a:71:5f:e6:98:7d:a2:b1:1e:ff:cb:03:e6:
                    bb:9c:2a:70:63:3b:40:64:6f:06:1d:f0:73:74:76:
                    58:4a:17:8b:c4:a3:1d:ef:67:ad:0c:5d:35:e4:b5:
                    17:ea:5d:28:14:4a:2f:86:13:d4:88:e9:19:38:bb:
                    6d:52:6e:be:43:28:34:5a:27:09:cb:a7:50:6a:a9:
                    40:c0:04:3f:b2:0f:15:94:05:57:77:cb:7e:de:aa:
                    8f:64:f7:f1:67:3c:87:4a:b0:28:cb:d5:19:5b:c4:
                    08:2f:b2:b1:e4:98:3d:8e:a1:7b:cb:2c:53:08:e0:
                    a6:47:af:a9:54:7d:9d:30:13:0e:5a:4d:9c:ce:76:
                    35:c9:58:2e:d9:8f:63:bc:48:fe:06:2a:42:15:82:
                    c8:ab:fa:5c:2e:fa:5e:9a:69:47:a9:a8:79:ad:bd:
                    8d:d1:1c:d6:18:98:4a:df:d4:9a:15:d1:ce:91:20:
                    af:7f:55:ef:af:00:dc:8a:d8:7b:2c:83:82:97:c5:
                    04:73:f3:1f:83:00:43:5e:8a:0d:6d:f7:69:0b:8c:
                    f9:7c:f1:4c:d9:ca:22:00:35:e7:c6:a2:ec:20:72:
                    b0:ea:81:84:73:e3:7e:52:36:66:d1:9e:41:c7:50:
                    26:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:EB:AB:ED:46:E9:E1:DF:C0:67:E1:08:CC:AE:37:92:C4:46:44:78
            X509v3 Authority Key Identifier:
                keyid:45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/45D8EABBB8344E57C69E3416BF523D78A65C0103.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/34352e3233342e3130302e302f32342d3234203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:05:75:5d:1b:5b:59:e9:c0:4c:00:13:71:a0:e3:67:3a:28:
         4d:d0:9b:cd:98:34:98:57:2f:ea:6e:be:0e:e4:48:0e:e0:34:
         7a:2a:09:04:5c:40:98:57:64:b5:4e:b8:77:6f:1e:a4:71:53:
         93:7b:6d:47:12:8a:30:e7:3e:01:1c:97:b3:19:4f:dd:cb:1d:
         f6:7b:1a:b8:9b:29:7b:74:de:bd:0a:5d:4a:b2:04:17:2c:ba:
         c3:c8:92:c3:9e:a3:51:a8:f2:21:05:8a:4a:08:b8:20:09:a2:
         e8:d2:e5:9d:a0:7d:47:6f:11:97:39:37:ac:3b:74:e6:82:1b:
         8c:46:c1:d6:35:57:ec:20:66:2a:21:34:bc:ed:36:d7:ca:d3:
         68:65:fd:5c:16:ca:d6:29:ff:b1:4b:d0:89:32:e8:09:0f:ab:
         d7:ba:4d:a3:ba:df:4f:00:f6:4f:03:3e:51:6e:46:fa:4a:df:
         6d:69:e2:80:af:b5:75:90:eb:bb:47:f1:7d:38:32:03:f9:14:
         84:26:f6:80:4f:20:f7:7b:99:9b:6b:6e:af:c1:5a:0f:14:6d:
         6e:59:82:e2:32:a0:4d:96:e3:b7:df:aa:c1:8e:fa:59:84:cf:
         1f:ac:a0:1d:eb:0f:e5:94:97:6e:7f:d0:79:34:3c:61:d7:95:
         b2:58:54:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:24:24 2025 by rpki-client