Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/0/34352e3232352e3131392e302f32342d3234203d3e20323636393334.roa
File:                     34352e3232352e3131392e302f32342d3234203d3e20323636393334.roa (raw, json)
Hash identifier:          8gWB4J4Xyt3AUs2XpnMcnMWkj6j1/FHOyDUNSihJWEY=
Subject key identifier:   1A:EB:2D:C0:81:C9:98:B9:79:01:4D:2F:8D:00:E8:FD:AB:B3:04:4C
Certificate issuer:       /CN=A8EB322DAEF01E5C8FCF7EB0871CEEB449936F8F
Certificate serial:       61611D49A64DFB8DB1CD9E0B400E5E6972154005
Authority key identifier: A8:EB:32:2D:AE:F0:1E:5C:8F:CF:7E:B0:87:1C:EE:B4:49:93:6F:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8EB322DAEF01E5C8FCF7EB0871CEEB449936F8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/0/34352e3232352e3131392e302f32342d3234203d3e20323636393334.roa
Signing time:             Tue 23 Jun 2026 20:01:11 +0000
ROA not before:           Tue 23 Jun 2026 19:56:11 +0000
ROA not after:            Tue 22 Jun 2027 20:01:11 +0000
asID:                     266934
IP address blocks:        45.225.119.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:61:1d:49:a6:4d:fb:8d:b1:cd:9e:0b:40:0e:5e:69:72:15:40:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8EB322DAEF01E5C8FCF7EB0871CEEB449936F8F
        Validity
            Not Before: Jun 23 19:56:11 2026 GMT
            Not After : Jun 22 20:01:11 2027 GMT
        Subject: CN=1AEB2DC081C998B979014D2F8D00E8FDABB3044C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:63:8b:0c:67:b9:68:36:45:61:f4:31:de:2b:
                    01:72:6c:2a:d1:aa:c0:be:f9:a9:b0:23:0e:6f:7c:
                    75:45:d3:89:1d:6a:72:01:e7:bb:ba:24:4f:1c:c5:
                    ca:39:ea:7c:13:18:ed:6e:10:47:21:13:a3:29:72:
                    18:7e:20:46:ee:c3:9f:b0:51:09:eb:5e:e6:fb:5f:
                    eb:06:a8:2d:17:a4:b7:d9:7c:4f:f5:82:da:c7:26:
                    61:72:87:34:b7:f8:4c:af:ce:b9:bc:9f:f3:b3:05:
                    2a:51:c0:ca:06:d5:03:5f:e4:43:1a:a3:a3:9c:9b:
                    36:bd:cc:ee:4b:58:68:2e:18:43:96:cb:52:5f:59:
                    f3:19:d3:53:d5:6c:17:f3:c5:d6:5a:58:c0:06:0d:
                    bf:e0:d8:01:ea:30:21:c2:ab:9c:11:62:14:00:d6:
                    be:ff:9a:ac:5d:03:30:57:43:fc:87:f7:01:be:38:
                    44:fa:e5:b7:9d:90:f6:07:9e:c5:59:8f:ce:13:ca:
                    2d:cd:b3:2b:54:be:eb:79:f5:b0:78:9a:f3:bf:d8:
                    40:b6:06:0f:12:9e:5a:fc:f8:ab:24:47:98:7f:84:
                    56:34:37:3e:21:81:f8:6f:71:c8:60:fa:b8:d1:d6:
                    84:af:93:b0:45:11:bf:d9:c4:02:83:71:8b:58:9a:
                    00:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:EB:2D:C0:81:C9:98:B9:79:01:4D:2F:8D:00:E8:FD:AB:B3:04:4C
            X509v3 Authority Key Identifier:
                keyid:A8:EB:32:2D:AE:F0:1E:5C:8F:CF:7E:B0:87:1C:EE:B4:49:93:6F:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/0/A8EB322DAEF01E5C8FCF7EB0871CEEB449936F8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8EB322DAEF01E5C8FCF7EB0871CEEB449936F8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/0/34352e3232352e3131392e302f32342d3234203d3e20323636393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:93:f9:aa:c8:a6:03:47:04:56:2a:69:b3:51:f8:f6:1a:7d:
         c4:df:22:76:fd:1a:69:11:c7:59:f9:f4:a6:a3:2b:e4:9f:88:
         40:ee:dd:a2:d2:59:47:c6:26:4e:2a:e8:7f:7c:ba:ef:c5:64:
         b3:23:91:dc:f3:8c:6d:2b:45:b9:bb:01:8b:b6:7e:f6:3b:b3:
         7d:a5:4b:a5:86:c1:d4:87:5b:76:f3:f5:d9:dc:4e:f8:e1:cd:
         75:b1:3d:d2:86:71:b7:53:c5:74:10:1b:25:0d:1d:2e:d4:77:
         1a:d1:8a:d9:b1:46:4a:2d:22:00:fe:99:a6:8c:4b:34:3b:cd:
         a0:a5:45:f2:31:bd:e0:9e:54:76:19:00:84:25:4a:da:2d:f1:
         88:ae:f9:fa:d7:ee:5d:6b:c3:e1:99:1a:ac:13:58:e9:0b:d5:
         8b:ce:e5:f5:b1:88:e4:6c:20:12:b6:c4:a4:38:f5:9f:f3:3b:
         8c:4d:36:e6:62:68:c7:78:cc:9e:5f:54:16:0e:cc:f4:05:48:
         b6:4d:60:43:4d:9e:7c:fa:5d:7b:b1:4d:e4:58:fe:64:dd:46:
         fc:67:b4:bb:59:7d:de:31:d3:f6:2e:e3:36:ce:e4:06:ba:33:
         17:d7:1e:bd:7c:ec:34:32:6d:eb:cf:62:47:a0:1a:25:1a:f3:
         b5:87:c1:50
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYWEdSaZN+42xzZ4LQA5eaXIVQAUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQThFQjMyMkRBRUYwMUU1QzhGQ0Y3RUIwODcxQ0VFQjQ0
OTkzNkY4RjAeFw0yNjA2MjMxOTU2MTFaFw0yNzA2MjIyMDAxMTFaMDMxMTAvBgNV
BAMTKDFBRUIyREMwODFDOTk4Qjk3OTAxNEQyRjhEMDBFOEZEQUJCMzA0NEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzY4sMZ7loNkVh9DHeKwFybCrR
qsC++amwIw5vfHVF04kdanIB57u6JE8cxco56nwTGO1uEEchE6Mpchh+IEbuw5+w
UQnrXub7X+sGqC0XpLfZfE/1gtrHJmFyhzS3+Eyvzrm8n/OzBSpRwMoG1QNf5EMa
o6Ocmza9zO5LWGguGEOWy1JfWfMZ01PVbBfzxdZaWMAGDb/g2AHqMCHCq5wRYhQA
1r7/mqxdAzBXQ/yH9wG+OET65bedkPYHnsVZj84Tyi3NsytUvut59bB4mvO/2EC2
Bg8Snlr8+KskR5h/hFY0Nz4hgfhvcchg+rjR1oSvk7BFEb/ZxAKDcYtYmgCPAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUGustwIHJmLl5AU0vjQDo/auzBEwwHwYDVR0j
BBgwFoAUqOsyLa7wHlyPz36whxzutEmTb48wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNHZYbVNTZDMxMUxMZFkzWEtmUTVLbTlETm91UmR3MXpyd3k1MlViQnR0
UGgvMC9BOEVCMzIyREFFRjAxRTVDOEZDRjdFQjA4NzFDRUVCNDQ5OTM2RjhGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0E4RUIzMjJEQUVGMDFFNUM4
RkNGN0VCMDg3MUNFRUI0NDk5MzZGOEYuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzR2WG1TU2QzMTFMTGRZM1hLZlE1S205RE5vdVJkdzF6cnd5NTJVYkJ0dFBoLzAv
MzQzNTJlMzIzMjM1MmUzMTMxMzkyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzYzOTMzMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAt4XcwDQYJKoZIhvcNAQELBQADggEBAACT+arI
pgNHBFYqabNR+PYafcTfInb9GmkRx1n59KajK+SfiEDu3aLSWUfGJk4q6H98uu/F
ZLMjkdzzjG0rRbm7AYu2fvY7s32lS6WGwdSHW3bz9dncTvjhzXWxPdKGcbdTxXQQ
GyUNHS7UdxrRitmxRkotIgD+maaMSzQ7zaClRfIxveCeVHYZAIQlStot8Yiu+frX
7l1rw+GZGqwTWOkL1YvO5fWxiORsIBK2xKQ49Z/zO4xNNuZiaMd4zJ5fVBYOzPQF
SLZNYENNnnz6XXuxTeRY/mTdRvxntLtZfd4x0/Yu4zbO5Aa6MxfXHr187DQybevP
YkegGiUa87WHwVA=
-----END CERTIFICATE-----