Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/34352e3233342e3130312e302f32342d3234203d3e203631353932.roa
File:                     34352e3233342e3130312e302f32342d3234203d3e203631353932.roa (raw, json)
Hash identifier:          ijRUkNgqj9xYgw94fyyLe69b23ED6Iyj3qs/WDWK/jg=
Subject key identifier:   8C:C6:69:35:8C:7E:D2:A6:BF:37:68:09:3F:06:FA:80:B3:D2:FD:3E
Certificate issuer:       /CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
Certificate serial:       6B6A126798C3D36F6EF8784DB4002558C072EC6F
Authority key identifier: 45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/34352e3233342e3130312e302f32342d3234203d3e203631353932.roa
Signing time:             Wed 12 Feb 2025 14:31:03 +0000
ROA not before:           Wed 12 Feb 2025 14:26:03 +0000
ROA not after:            Wed 11 Feb 2026 14:31:03 +0000
asID:                     61592
IP address blocks:        45.234.101.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:6a:12:67:98:c3:d3:6f:6e:f8:78:4d:b4:00:25:58:c0:72:ec:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45D8EABBB8344E57C69E3416BF523D78A65C0103
        Validity
            Not Before: Feb 12 14:26:03 2025 GMT
            Not After : Feb 11 14:31:03 2026 GMT
        Subject: CN=8CC669358C7ED2A6BF3768093F06FA80B3D2FD3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e7:b0:ff:1d:a6:f4:c1:59:97:71:de:8b:24:
                    70:87:67:51:e0:49:39:e4:60:0f:45:38:ba:76:66:
                    fe:ef:fb:4a:84:fd:21:78:6a:47:08:31:be:5e:30:
                    b4:88:da:f9:30:57:12:3b:f4:fc:9a:e2:e0:8a:a6:
                    17:81:23:64:2b:48:c3:3f:5a:00:ed:5f:d5:b3:cc:
                    24:25:6a:2a:02:ed:43:0b:4b:f8:13:bc:27:12:d4:
                    0a:27:ce:8b:fe:bd:9d:d5:bf:7f:51:41:b7:7f:0a:
                    8b:e7:87:76:84:15:f3:ef:81:a0:55:8d:ff:d3:1b:
                    84:8a:4d:df:c6:06:2b:ee:6e:dc:a7:b5:f2:12:23:
                    7f:2d:88:67:eb:40:fc:4c:ae:a5:5c:b2:e2:d5:1c:
                    cb:49:2a:c5:5b:36:5f:64:db:93:55:fe:4e:da:5a:
                    05:c7:85:5b:fb:ed:9f:6f:35:38:07:22:5b:35:84:
                    9a:85:ce:51:b4:19:72:ca:72:07:ae:b1:3d:26:b7:
                    b8:30:0d:bc:3e:e4:cf:37:02:a2:dc:6a:58:20:22:
                    b4:84:06:4f:7d:ec:4a:39:41:ef:a5:0a:2f:e8:25:
                    2d:14:9c:32:7b:41:d0:fe:05:35:f8:95:0f:ae:f3:
                    d6:64:3b:33:a5:7c:10:20:de:4c:6a:85:8c:93:52:
                    2a:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C6:69:35:8C:7E:D2:A6:BF:37:68:09:3F:06:FA:80:B3:D2:FD:3E
            X509v3 Authority Key Identifier:
                keyid:45:D8:EA:BB:B8:34:4E:57:C6:9E:34:16:BF:52:3D:78:A6:5C:01:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/45D8EABBB8344E57C69E3416BF523D78A65C0103.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/45D8EABBB8344E57C69E3416BF523D78A65C0103.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2EL9mrvPXgcpLbCQ1MnqaJUgRLvaxaYJxA8s37GPo8mp/0/34352e3233342e3130312e302f32342d3234203d3e203631353932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:4a:bf:7e:ad:56:45:f5:5a:8b:8a:3e:93:0a:6f:a3:35:45:
         21:55:f3:31:58:14:2b:d5:e8:b8:3e:b7:0f:d6:bf:9c:be:f5:
         ab:6e:cc:ee:a7:5e:9e:85:0c:71:58:bb:e8:39:34:fa:1c:14:
         4b:e0:4a:15:1c:fa:12:3a:90:7c:0d:26:a3:32:ef:03:dc:e8:
         d4:d0:8e:08:cc:fb:99:bc:0b:90:36:00:78:43:4f:61:b4:7c:
         55:43:46:74:5e:0b:3b:4c:5d:bf:ed:58:62:a2:f3:cc:06:76:
         88:ca:8e:44:82:65:ca:eb:15:d3:72:3e:e2:58:8b:44:52:33:
         e7:2f:33:47:10:cb:f5:ff:6c:2e:a8:79:b9:45:10:d7:e5:0a:
         75:ef:3e:52:84:fc:c4:62:77:db:a9:4f:d2:3c:e3:4f:1a:86:
         4f:26:2b:1b:0e:2b:44:ac:22:e4:47:ae:de:76:35:13:9b:dd:
         b1:0c:e7:af:a5:a9:17:60:24:71:af:43:95:18:1d:09:99:c8:
         04:3d:3f:90:33:b1:16:57:73:80:02:d6:bf:e7:1c:5d:4d:c9:
         4b:ad:28:27:45:5b:83:41:b4:5e:28:cd:8b:15:0f:99:a5:16:
         0a:2f:12:16:8c:0d:53:49:6f:1a:db:f1:6e:2b:4b:d8:da:af:
         0a:a2:35:d3
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUa2oSZ5jD029u+HhNtAAlWMBy7G8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDVEOEVBQkJCODM0NEU1N0M2OUUzNDE2QkY1MjNENzhB
NjVDMDEwMzAeFw0yNTAyMTIxNDI2MDNaFw0yNjAyMTExNDMxMDNaMDMxMTAvBgNV
BAMTKDhDQzY2OTM1OEM3RUQyQTZCRjM3NjgwOTNGMDZGQTgwQjNEMkZEM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn57D/Hab0wVmXcd6LJHCHZ1Hg
STnkYA9FOLp2Zv7v+0qE/SF4akcIMb5eMLSI2vkwVxI79Pya4uCKpheBI2QrSMM/
WgDtX9WzzCQlaioC7UMLS/gTvCcS1Aonzov+vZ3Vv39RQbd/Covnh3aEFfPvgaBV
jf/TG4SKTd/GBivubtyntfISI38tiGfrQPxMrqVcsuLVHMtJKsVbNl9k25NV/k7a
WgXHhVv77Z9vNTgHIls1hJqFzlG0GXLKcgeusT0mt7gwDbw+5M83AqLcalggIrSE
Bk997Eo5Qe+lCi/oJS0UnDJ7QdD+BTX4lQ+u89ZkOzOlfBAg3kxqhYyTUirnAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUjMZpNYx+0qa/N2gJPwb6gLPS/T4wHwYDVR0j
BBgwFoAURdjqu7g0TlfGnjQWv1I9eKZcAQMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkVMOW1ydlBYZ2NwTGJDUTFNbnFhSlVnUkx2YXhhWUp4QThzMzdHUG84
bXAvMC80NUQ4RUFCQkI4MzQ0RTU3QzY5RTM0MTZCRjUyM0Q3OEE2NUMwMTAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzQ1RDhFQUJCQjgzNDRFNTdD
NjlFMzQxNkJGNTIzRDc4QTY1QzAxMDMuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJFTDltcnZQWGdjcExiQ1ExTW5xYUpVZ1JMdmF4YVlKeEE4czM3R1BvOG1wLzAv
MzQzNTJlMzIzMzM0MmUzMTMwMzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzNjMx
MzUzOTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALeplMA0GCSqGSIb3DQEBCwUAA4IBAQCCSr9+rVZF
9VqLij6TCm+jNUUhVfMxWBQr1ei4PrcP1r+cvvWrbszup16ehQxxWLvoOTT6HBRL
4EoVHPoSOpB8DSajMu8D3OjU0I4IzPuZvAuQNgB4Q09htHxVQ0Z0Xgs7TF2/7Vhi
ovPMBnaIyo5EgmXK6xXTcj7iWItEUjPnLzNHEMv1/2wuqHm5RRDX5Qp17z5ShPzE
YnfbqU/SPONPGoZPJisbDitErCLkR67edjUTm92xDOevpakXYCRxr0OVGB0JmcgE
PT+QM7EWV3OAAta/5xxdTclLrSgnRVuDQbReKM2LFQ+ZpRYKLxIWjA1TSW8a2/Fu
K0vY2q8KojXT
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:22:42 2025 by rpki-client