Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/34352e3136352e32302e302f32322d3234203d3e203238323230.roa
File:                     34352e3136352e32302e302f32322d3234203d3e203238323230.roa (raw, json)
Hash identifier:          zwSvMEa+khjZuoM51LRvEayBshBs6qCbC/42T3uSBxk=
Subject key identifier:   CF:4E:66:D4:FC:D4:A2:95:D1:14:0A:74:E4:F3:82:8B:6E:5F:3E:EC
Certificate issuer:       /CN=199D52B4A265A5991871338EDCD50C1D1DECE6D1
Certificate serial:       24424DE84C27854AC5AE004295C985D7BF92F8B6
Authority key identifier: 19:9D:52:B4:A2:65:A5:99:18:71:33:8E:DC:D5:0C:1D:1D:EC:E6:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/199D52B4A265A5991871338EDCD50C1D1DECE6D1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/34352e3136352e32302e302f32322d3234203d3e203238323230.roa
Signing time:             Thu 27 Aug 2026 19:51:21 +0000
ROA not before:           Thu 27 Aug 2026 19:46:21 +0000
ROA not after:            Thu 26 Aug 2027 19:51:21 +0000
asID:                     28220
IP address blocks:        45.165.20.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:42:4d:e8:4c:27:85:4a:c5:ae:00:42:95:c9:85:d7:bf:92:f8:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=199D52B4A265A5991871338EDCD50C1D1DECE6D1
        Validity
            Not Before: Aug 27 19:46:21 2026 GMT
            Not After : Aug 26 19:51:21 2027 GMT
        Subject: CN=CF4E66D4FCD4A295D1140A74E4F3828B6E5F3EEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7a:0d:30:fd:36:eb:40:cc:34:c0:a1:b7:1b:
                    aa:63:f1:0b:97:1b:8d:2a:1f:e8:12:36:85:4e:2b:
                    53:df:1b:7a:b0:16:29:46:57:f5:ed:65:c0:df:b3:
                    7f:cb:74:20:22:5f:e7:73:25:eb:d8:b3:a3:a8:3e:
                    c9:09:36:1b:0f:ab:ed:ba:e0:87:20:72:c5:05:09:
                    8c:c4:f1:c8:b9:1a:c4:d3:84:52:7d:b0:dd:3c:e2:
                    61:6d:0f:de:4c:4a:da:9d:80:15:6d:13:5b:e6:a4:
                    64:84:25:53:d7:1c:94:36:e3:91:70:a9:8c:db:c0:
                    1a:89:42:c6:4a:ef:7a:83:f3:d0:ef:60:f9:d6:6e:
                    2d:87:32:21:e0:86:de:c5:f2:0f:ca:c0:6b:23:5b:
                    ec:af:ed:ba:04:23:58:91:ed:79:69:da:ee:eb:c7:
                    2b:67:4d:2b:ad:4a:50:61:e7:f7:ee:cf:0e:ed:36:
                    2b:51:bd:1b:a7:ea:0a:8b:eb:19:66:46:70:b8:42:
                    7b:eb:94:86:07:a3:df:35:de:be:97:d7:de:bc:9b:
                    97:9e:c0:82:86:b2:70:76:b2:d5:b3:8e:b1:77:50:
                    1c:76:86:cb:d5:d7:69:20:30:0b:6b:cb:96:e7:0d:
                    be:5b:56:9a:d2:b3:80:8b:78:78:fa:3f:2f:19:87:
                    e8:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:4E:66:D4:FC:D4:A2:95:D1:14:0A:74:E4:F3:82:8B:6E:5F:3E:EC
            X509v3 Authority Key Identifier:
                keyid:19:9D:52:B4:A2:65:A5:99:18:71:33:8E:DC:D5:0C:1D:1D:EC:E6:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/199D52B4A265A5991871338EDCD50C1D1DECE6D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/199D52B4A265A5991871338EDCD50C1D1DECE6D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9M7ZQLUzyNKv3ySE3FCNJCKumwKNCtczSTYpF7H8Mgrf/0/34352e3136352e32302e302f32322d3234203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.165.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:af:b1:f6:85:63:1b:8d:81:25:da:fe:9b:7d:25:45:a5:01:
         53:91:0b:e4:83:15:7e:4e:62:44:75:36:b2:30:05:9e:39:ca:
         20:ba:32:6a:c2:9a:ad:94:b7:29:5b:57:6a:0d:7d:0b:65:29:
         7a:ce:18:04:27:dd:91:b2:f6:f2:63:48:b7:7e:f6:08:fd:a9:
         25:fa:14:fc:12:35:59:69:38:90:92:22:37:7a:1f:8f:06:6e:
         36:e3:05:a5:2d:84:fb:4f:14:45:fa:3b:aa:14:0a:71:b5:0d:
         c6:78:b6:b7:cc:11:a6:af:71:ac:42:2a:2b:88:f0:4d:56:2d:
         60:b9:61:35:75:19:bd:9f:0f:1e:c2:bf:88:47:83:f7:46:39:
         3a:31:34:22:0e:a0:17:bf:b2:22:3d:99:fa:12:ba:99:f1:8e:
         de:52:99:58:d8:30:f6:ac:5d:86:cc:0c:1e:b9:df:4e:13:49:
         63:ee:be:76:c2:4a:7c:5d:f5:42:13:0d:d4:16:0b:6f:8c:d0:
         13:b3:98:3d:62:0e:9a:48:a5:ff:32:4b:e3:05:0f:63:e3:97:
         0b:fe:ca:42:c8:4a:3b:a2:1d:9c:cc:68:6f:f4:47:70:9c:c3:
         19:03:19:04:c4:5f:8d:1a:50:5f:0f:dd:a7:a5:e8:5b:ab:95:
         36:52:25:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----