Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/0/34352e3232352e3131362e302f32322d3234203d3e20323636393334.roa
File:                     34352e3232352e3131362e302f32322d3234203d3e20323636393334.roa (raw, json)
Hash identifier:          YnPewoHMCuPqztQFDCBBAtZZNvKAUn8RWXXjox7b3VE=
Subject key identifier:   EF:57:F9:FF:01:F0:A7:9B:55:A3:20:04:14:98:F8:20:48:57:97:07
Certificate issuer:       /CN=A8EB322DAEF01E5C8FCF7EB0871CEEB449936F8F
Certificate serial:       163B5EE6CA1BE6B378E6818FC9E0E385C9CD9B64
Authority key identifier: A8:EB:32:2D:AE:F0:1E:5C:8F:CF:7E:B0:87:1C:EE:B4:49:93:6F:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8EB322DAEF01E5C8FCF7EB0871CEEB449936F8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/0/34352e3232352e3131362e302f32322d3234203d3e20323636393334.roa
Signing time:             Sun 28 Jun 2026 05:31:22 +0000
ROA not before:           Sun 28 Jun 2026 05:26:22 +0000
ROA not after:            Sun 27 Jun 2027 05:31:22 +0000
asID:                     266934
IP address blocks:        45.225.116.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:3b:5e:e6:ca:1b:e6:b3:78:e6:81:8f:c9:e0:e3:85:c9:cd:9b:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8EB322DAEF01E5C8FCF7EB0871CEEB449936F8F
        Validity
            Not Before: Jun 28 05:26:22 2026 GMT
            Not After : Jun 27 05:31:22 2027 GMT
        Subject: CN=EF57F9FF01F0A79B55A320041498F82048579707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:02:79:cc:c7:10:37:92:b9:6f:c0:89:bf:15:
                    ed:bd:2d:15:e8:3f:27:ff:25:2a:6b:a1:aa:57:7d:
                    b9:4a:16:88:8d:26:39:ce:2e:ea:fd:c0:18:6f:b3:
                    7f:4d:d8:6f:08:90:7a:9e:6e:58:70:9c:6b:ef:c9:
                    dc:6b:18:d7:8b:bf:50:84:d8:a6:59:86:72:9e:e7:
                    87:93:9f:dc:73:3f:4e:ef:32:95:a5:d1:75:4a:78:
                    e1:e9:dd:bf:f6:16:07:34:61:bc:e9:53:48:bf:2a:
                    cc:9f:4a:cc:42:72:63:62:cd:d7:b2:52:fe:4a:46:
                    39:63:7e:ed:ce:4a:50:40:a4:34:23:6b:6f:24:d9:
                    21:1e:b6:89:b4:4a:b4:cb:a0:51:d4:40:47:c6:4b:
                    16:7a:ff:38:10:d4:4c:2a:46:7a:ee:f7:21:c4:3a:
                    05:c5:71:e4:bf:a8:3a:82:27:6e:0c:63:5f:fb:e2:
                    6e:5a:52:6d:f8:64:64:ab:ab:12:01:dc:83:88:d4:
                    0b:6c:03:11:2b:c6:56:7c:c6:26:e0:6a:32:a5:51:
                    67:d8:52:a1:76:31:31:30:ec:e1:1c:4e:91:80:71:
                    02:03:bf:fa:64:2a:3a:42:1a:46:da:f1:20:db:9c:
                    10:7c:0d:b5:0f:57:87:4e:c3:e9:75:f1:c3:6f:2b:
                    1c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:57:F9:FF:01:F0:A7:9B:55:A3:20:04:14:98:F8:20:48:57:97:07
            X509v3 Authority Key Identifier:
                keyid:A8:EB:32:2D:AE:F0:1E:5C:8F:CF:7E:B0:87:1C:EE:B4:49:93:6F:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/0/A8EB322DAEF01E5C8FCF7EB0871CEEB449936F8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8EB322DAEF01E5C8FCF7EB0871CEEB449936F8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/0/34352e3232352e3131362e302f32322d3234203d3e20323636393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:a0:4d:3d:b6:3b:2d:8f:b2:f0:ba:c3:b6:4a:c5:8d:0b:dc:
         12:12:95:15:b5:30:fb:ad:87:18:ac:00:a4:33:9d:05:76:38:
         2c:2a:2f:9c:26:db:c7:d6:86:1c:b1:48:35:05:67:42:5d:bb:
         9a:e0:7f:1e:ef:f3:05:51:c9:2c:cb:ef:27:0d:62:d2:8e:e4:
         90:be:1e:40:e7:e4:f9:37:eb:80:fe:6d:7a:ea:e2:f2:47:38:
         a1:c3:50:e6:4f:b6:79:e3:c7:fb:26:1b:b5:1d:3d:1f:ac:73:
         ad:c6:cd:51:3b:8a:87:06:97:73:7c:d8:fa:4b:8e:f0:25:c1:
         60:b8:aa:11:48:bd:8a:d6:d7:6b:06:34:6e:20:71:39:eb:2d:
         8f:f9:5f:6f:d3:d8:f3:30:cb:7a:da:6a:f2:61:4d:eb:a5:bb:
         6a:bd:ff:c0:34:02:e0:7e:2b:db:1a:a5:53:fa:ee:20:32:3f:
         6c:71:8d:d2:c4:1f:af:f2:89:32:16:bb:59:18:4f:1c:57:0d:
         d0:5e:7b:d7:20:a1:36:77:8e:e0:b4:d0:e1:77:e2:bf:a6:f2:
         16:a9:14:61:d7:42:77:b1:93:fb:3a:0e:e9:85:83:a2:ef:b5:
         d9:61:14:5a:4a:6c:b5:7e:55:d7:17:aa:6c:38:21:20:01:5e:
         f0:d0:da:73
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUFjte5sob5rN45oGPyeDjhcnNm2QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQThFQjMyMkRBRUYwMUU1QzhGQ0Y3RUIwODcxQ0VFQjQ0
OTkzNkY4RjAeFw0yNjA2MjgwNTI2MjJaFw0yNzA2MjcwNTMxMjJaMDMxMTAvBgNV
BAMTKEVGNTdGOUZGMDFGMEE3OUI1NUEzMjAwNDE0OThGODIwNDg1Nzk3MDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmAnnMxxA3krlvwIm/Fe29LRXo
Pyf/JSproapXfblKFoiNJjnOLur9wBhvs39N2G8IkHqeblhwnGvvydxrGNeLv1CE
2KZZhnKe54eTn9xzP07vMpWl0XVKeOHp3b/2Fgc0YbzpU0i/KsyfSsxCcmNizdey
Uv5KRjljfu3OSlBApDQja28k2SEetom0SrTLoFHUQEfGSxZ6/zgQ1EwqRnru9yHE
OgXFceS/qDqCJ24MY1/74m5aUm34ZGSrqxIB3IOI1AtsAxErxlZ8xibgajKlUWfY
UqF2MTEw7OEcTpGAcQIDv/pkKjpCGkba8SDbnBB8DbUPV4dOw+l18cNvKxxZAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU71f5/wHwp5tVoyAEFJj4IEhXlwcwHwYDVR0j
BBgwFoAUqOsyLa7wHlyPz36whxzutEmTb48wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHZYbVNTZDMxMUxMZFkzWEtmUTVLbTlETm91UmR3MXpyd3k1MlViQnR0
UGgvMC9BOEVCMzIyREFFRjAxRTVDOEZDRjdFQjA4NzFDRUVCNDQ5OTM2RjhGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E4RUIzMjJEQUVGMDFFNUM4
RkNGN0VCMDg3MUNFRUI0NDk5MzZGOEYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR2WG1TU2QzMTFMTGRZM1hLZlE1S205RE5vdVJkdzF6cnd5NTJVYkJ0dFBoLzAv
MzQzNTJlMzIzMjM1MmUzMTMxMzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzYzOTMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt4XQwDQYJKoZIhvcNAQELBQADggEBAJGgTT22
Oy2PsvC6w7ZKxY0L3BISlRW1MPuthxisAKQznQV2OCwqL5wm28fWhhyxSDUFZ0Jd
u5rgfx7v8wVRySzL7ycNYtKO5JC+HkDn5Pk364D+bXrq4vJHOKHDUOZPtnnjx/sm
G7UdPR+sc63GzVE7iocGl3N82PpLjvAlwWC4qhFIvYrW12sGNG4gcTnrLY/5X2/T
2PMwy3raavJhTeulu2q9/8A0AuB+K9sapVP67iAyP2xxjdLEH6/yiTIWu1kYTxxX
DdBee9cgoTZ3juC00OF34r+m8hapFGHXQnexk/s6DumFg6LvtdlhFFpKbLV+VdcX
qmw4ISABXvDQ2nM=
-----END CERTIFICATE-----