Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/91qjiaF3VH7p6Psrx86zvFcr2RLjoRZxevnAz851GpqF/0/34352e3233352e3139362e302f32322d3234203d3e20323638313939.roa
File:                     34352e3233352e3139362e302f32322d3234203d3e20323638313939.roa (raw, json)
Hash identifier:          NpBct1xcbgpNjS1tz1A9Nu+aFtX8fQq82kC1jM2ZLNI=
Subject key identifier:   B1:2F:A0:2B:93:1F:86:32:E1:C9:BD:0F:47:39:AB:2E:2E:7E:09:D0
Certificate issuer:       /CN=6B7A692CA3336DB253ACC80822131CE4B9D172D7
Certificate serial:       4BD821AD8452FE0B13DCF8C69E2F4C4FABACF417
Authority key identifier: 6B:7A:69:2C:A3:33:6D:B2:53:AC:C8:08:22:13:1C:E4:B9:D1:72:D7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B7A692CA3336DB253ACC80822131CE4B9D172D7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/91qjiaF3VH7p6Psrx86zvFcr2RLjoRZxevnAz851GpqF/0/34352e3233352e3139362e302f32322d3234203d3e20323638313939.roa
Signing time:             Mon 24 Aug 2026 21:20:20 +0000
ROA not before:           Mon 24 Aug 2026 21:15:20 +0000
ROA not after:            Mon 23 Aug 2027 21:20:20 +0000
asID:                     268199
IP address blocks:        45.235.196.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:d8:21:ad:84:52:fe:0b:13:dc:f8:c6:9e:2f:4c:4f:ab:ac:f4:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6B7A692CA3336DB253ACC80822131CE4B9D172D7
        Validity
            Not Before: Aug 24 21:15:20 2026 GMT
            Not After : Aug 23 21:20:20 2027 GMT
        Subject: CN=B12FA02B931F8632E1C9BD0F4739AB2E2E7E09D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:fd:a6:0f:b1:d2:35:f7:90:0f:e3:50:d2:72:
                    65:5f:1c:55:5a:16:1f:ef:78:93:37:cf:24:d7:aa:
                    9b:72:6f:a1:17:18:2e:3a:8c:94:46:a6:17:bd:ac:
                    35:4c:99:d5:63:56:77:04:e5:4e:79:fb:f2:87:36:
                    db:bc:f9:d2:db:3e:b3:48:8a:07:d8:f3:19:67:c6:
                    51:72:b6:09:03:99:69:fb:8a:6a:99:4e:ab:50:4f:
                    8f:0b:af:0c:b9:68:42:2e:23:86:ac:1c:ea:e7:5d:
                    23:65:58:ae:a6:6c:f1:a1:29:4e:32:9e:13:76:1c:
                    f7:65:67:86:2c:8d:fc:63:b3:e1:7e:b9:45:c9:7e:
                    74:9b:63:52:c1:c2:90:d8:d7:12:ad:11:f5:c0:bb:
                    55:a5:6d:e1:ed:fd:27:53:b1:5e:97:e6:ba:e6:3a:
                    28:d3:d7:b3:d6:fc:b6:f4:c6:58:f3:b7:ca:5d:bf:
                    9c:4c:72:66:5c:36:14:a9:73:02:ef:1c:93:af:16:
                    db:ec:a9:a4:88:37:52:3c:62:13:32:18:68:6a:32:
                    84:35:23:77:a4:39:45:46:a5:83:db:1e:ca:d6:a6:
                    90:eb:0c:91:b4:9d:98:32:2e:64:4a:27:89:1d:53:
                    f3:c3:bf:25:a2:37:96:19:3f:81:ae:4a:69:7a:c7:
                    15:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:2F:A0:2B:93:1F:86:32:E1:C9:BD:0F:47:39:AB:2E:2E:7E:09:D0
            X509v3 Authority Key Identifier:
                keyid:6B:7A:69:2C:A3:33:6D:B2:53:AC:C8:08:22:13:1C:E4:B9:D1:72:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/91qjiaF3VH7p6Psrx86zvFcr2RLjoRZxevnAz851GpqF/0/6B7A692CA3336DB253ACC80822131CE4B9D172D7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6B7A692CA3336DB253ACC80822131CE4B9D172D7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/91qjiaF3VH7p6Psrx86zvFcr2RLjoRZxevnAz851GpqF/0/34352e3233352e3139362e302f32322d3234203d3e20323638313939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c4:7f:76:c2:6b:71:76:bf:ef:a5:2f:89:c4:9d:9b:8f:ff:fe:
         de:37:3a:7f:d9:53:bc:1c:f6:25:f8:a0:7a:39:45:79:7b:7c:
         5f:8a:d5:51:44:8d:ef:9a:88:2b:05:40:cc:43:67:4d:c1:f8:
         ac:50:78:b1:b7:68:fe:03:74:72:9d:ae:e9:13:9c:ba:45:a8:
         10:d2:0b:15:95:08:38:b2:b0:36:f0:ed:85:82:2f:14:13:f2:
         f5:89:da:17:84:35:16:05:8d:07:5a:54:16:1b:aa:26:4c:ad:
         7f:0b:51:02:47:6a:9a:c2:94:fd:b4:27:96:ed:89:fb:67:7a:
         5a:ed:44:83:4b:32:74:7e:ce:b7:3a:b4:c9:6b:6d:9d:31:bf:
         d2:08:36:82:1c:c1:89:3f:99:93:83:f3:2c:99:cc:e0:90:32:
         41:6a:69:77:86:57:1d:7e:e2:98:99:56:1f:bd:3d:cc:de:dd:
         34:1c:57:85:85:68:83:d9:6c:9e:db:53:88:95:1c:2d:06:40:
         25:cc:65:44:ce:49:24:fe:db:ba:3f:c0:c4:92:e1:5f:b9:e0:
         71:e7:c6:1d:4d:70:ed:bc:ab:f2:b9:4b:d6:9f:77:c5:9f:9d:
         9b:72:2e:b7:94:81:4f:d3:47:49:38:3c:55:c7:6a:e1:d2:66:
         35:a1:fd:f9
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUS9ghrYRS/gsT3PjGni9MT6us9BcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkI3QTY5MkNBMzMzNkRCMjUzQUNDODA4MjIxMzFDRTRC
OUQxNzJENzAeFw0yNjA4MjQyMTE1MjBaFw0yNzA4MjMyMTIwMjBaMDMxMTAvBgNV
BAMTKEIxMkZBMDJCOTMxRjg2MzJFMUM5QkQwRjQ3MzlBQjJFMkU3RTA5RDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb/aYPsdI195AP41DScmVfHFVa
Fh/veJM3zyTXqptyb6EXGC46jJRGphe9rDVMmdVjVncE5U55+/KHNtu8+dLbPrNI
igfY8xlnxlFytgkDmWn7imqZTqtQT48Lrwy5aEIuI4asHOrnXSNlWK6mbPGhKU4y
nhN2HPdlZ4Ysjfxjs+F+uUXJfnSbY1LBwpDY1xKtEfXAu1WlbeHt/SdTsV6X5rrm
OijT17PW/Lb0xljzt8pdv5xMcmZcNhSpcwLvHJOvFtvsqaSIN1I8YhMyGGhqMoQ1
I3ekOUVGpYPbHsrWppDrDJG0nZgyLmRKJ4kdU/PDvyWiN5YZP4GuSml6xxVrAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUsS+gK5MfhjLhyb0PRzmrLi5+CdAwHwYDVR0j
BBgwFoAUa3ppLKMzbbJTrMgIIhMc5LnRctcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTFxamlhRjNWSDdwNlBzcng4Nnp2RmNyMlJMam9SWnhldm5Bejg1MUdw
cUYvMC82QjdBNjkyQ0EzMzM2REIyNTNBQ0M4MDgyMjEzMUNFNEI5RDE3MkQ3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzZCN0E2OTJDQTMzMzZEQjI1
M0FDQzgwODIyMTMxQ0U0QjlEMTcyRDcuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzkxcWppYUYzVkg3cDZQc3J4ODZ6dkZjcjJSTGpvUlp4ZXZuQXo4NTFHcHFGLzAv
MzQzNTJlMzIzMzM1MmUzMTM5MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzgzMTM5Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt68QwDQYJKoZIhvcNAQELBQADggEBAMR/dsJr
cXa/76UvicSdm4///t43On/ZU7wc9iX4oHo5RXl7fF+K1VFEje+aiCsFQMxDZ03B
+KxQeLG3aP4DdHKdrukTnLpFqBDSCxWVCDiysDbw7YWCLxQT8vWJ2heENRYFjQda
VBYbqiZMrX8LUQJHaprClP20J5btiftnelrtRINLMnR+zrc6tMlrbZ0xv9IINoIc
wYk/mZOD8yyZzOCQMkFqaXeGVx1+4piZVh+9Pcze3TQcV4WFaIPZbJ7bU4iVHC0G
QCXMZUTOSST+27o/wMSS4V+54HHnxh1NcO28q/K5S9afd8WfnZtyLreUgU/TR0k4
PFXHauHSZjWh/fk=
-----END CERTIFICATE-----