Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/0/34352e3232352e3131382e302f32342d3234203d3e20323636393334.roa
File:                     34352e3232352e3131382e302f32342d3234203d3e20323636393334.roa (raw, json)
Hash identifier:          gOcqjn+iQJpSPb5OXf2sDLa20KBIysXeX6G7mvoBnvY=
Subject key identifier:   F4:A5:32:11:B3:B6:70:87:B8:C6:08:6C:F1:04:9D:6E:9E:CC:E5:21
Certificate issuer:       /CN=A8EB322DAEF01E5C8FCF7EB0871CEEB449936F8F
Certificate serial:       4B0F570B1EF15EB644166D1A02FFAC1947BD595A
Authority key identifier: A8:EB:32:2D:AE:F0:1E:5C:8F:CF:7E:B0:87:1C:EE:B4:49:93:6F:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8EB322DAEF01E5C8FCF7EB0871CEEB449936F8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/0/34352e3232352e3131382e302f32342d3234203d3e20323636393334.roa
Signing time:             Tue 23 Jun 2026 20:01:06 +0000
ROA not before:           Tue 23 Jun 2026 19:56:06 +0000
ROA not after:            Tue 22 Jun 2027 20:01:06 +0000
asID:                     266934
IP address blocks:        45.225.118.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:0f:57:0b:1e:f1:5e:b6:44:16:6d:1a:02:ff:ac:19:47:bd:59:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8EB322DAEF01E5C8FCF7EB0871CEEB449936F8F
        Validity
            Not Before: Jun 23 19:56:06 2026 GMT
            Not After : Jun 22 20:01:06 2027 GMT
        Subject: CN=F4A53211B3B67087B8C6086CF1049D6E9ECCE521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:26:d4:70:69:ba:07:f8:8e:a9:b2:3f:03:8b:
                    cd:2d:f8:d5:67:2f:90:de:11:65:bd:79:25:ad:ce:
                    e4:6d:0a:8a:7b:3f:ab:f9:af:5f:ad:05:1f:92:51:
                    33:9f:96:fe:32:10:5f:75:c8:9b:7e:9c:8f:01:71:
                    7f:5a:d3:bb:4f:52:69:a2:16:59:0b:18:72:47:19:
                    1f:74:87:1c:80:dd:19:7d:1c:39:32:cb:30:a2:3f:
                    0e:af:69:e1:df:38:dd:4e:50:8a:7b:0a:a6:f0:d3:
                    7c:68:b3:2a:d1:27:ec:aa:79:64:4a:ff:3c:a1:dd:
                    4c:f7:1c:19:e6:95:93:6c:cc:74:01:ff:c8:1b:55:
                    dc:31:43:8c:53:a8:d0:aa:c5:d8:10:d3:69:1f:9f:
                    87:47:63:d0:06:1d:3a:ea:0c:7b:dc:b3:6d:9f:da:
                    d2:07:63:e1:90:43:bc:d6:f4:d8:18:c1:eb:1a:2a:
                    08:1c:43:f4:43:13:72:4e:3b:31:97:c8:a5:ae:93:
                    76:9f:6a:3d:2f:1d:36:1d:7f:c8:4e:48:7f:6e:48:
                    c1:90:33:d2:35:00:b9:05:5d:5f:3e:65:ce:ff:64:
                    5c:99:8e:04:65:2e:fc:a0:10:a3:00:0b:10:f4:01:
                    34:17:a8:d2:e8:79:7a:78:59:ec:52:00:2f:e6:f0:
                    47:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A5:32:11:B3:B6:70:87:B8:C6:08:6C:F1:04:9D:6E:9E:CC:E5:21
            X509v3 Authority Key Identifier:
                keyid:A8:EB:32:2D:AE:F0:1E:5C:8F:CF:7E:B0:87:1C:EE:B4:49:93:6F:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/0/A8EB322DAEF01E5C8FCF7EB0871CEEB449936F8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8EB322DAEF01E5C8FCF7EB0871CEEB449936F8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/0/34352e3232352e3131382e302f32342d3234203d3e20323636393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:73:f6:ca:ef:2a:36:47:ab:f7:18:76:c6:57:89:a7:d3:55:
         11:18:df:ae:f5:ab:e8:74:f6:69:3a:bd:46:ef:f9:49:36:c3:
         73:e9:08:4f:6d:19:6e:4c:8d:16:c3:6c:15:7b:bc:43:42:87:
         f0:7f:bb:f2:6a:c6:b3:49:d7:05:d7:7d:1c:b7:a1:72:79:c2:
         47:d4:b1:63:45:bd:d5:3e:1a:05:c4:41:e2:12:d2:cb:48:dd:
         ab:79:a4:14:48:2d:c5:f1:da:82:90:6f:b3:d7:02:7f:11:0f:
         7d:9e:d5:21:ed:4c:70:12:51:15:e4:dc:f2:62:21:57:f4:b9:
         25:40:96:3c:3f:86:3e:f5:e4:d4:d7:0c:89:13:d6:3f:80:1e:
         03:7e:f3:35:7f:5d:22:09:f3:88:b7:da:57:1b:14:90:5c:ed:
         4c:22:a5:ce:4f:86:bf:3a:e4:18:4c:91:cd:6e:e2:a6:57:9e:
         f9:6c:d7:98:25:60:e5:81:fc:a0:37:dd:d3:da:28:c0:53:7b:
         89:a4:c3:0b:02:b3:81:bf:2a:15:ce:c6:c2:93:cc:f7:31:6c:
         74:07:c7:c6:1d:ae:e2:c1:6a:09:eb:89:70:26:19:e3:7f:3b:
         a6:00:f6:e4:1e:e9:02:86:a2:2c:a2:f8:e6:fc:61:fe:14:55:
         d7:bc:61:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----