Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/0/34352e3136372e382e302f32322d3232203d3e20323638303230.roa
File:                     34352e3136372e382e302f32322d3232203d3e20323638303230.roa (raw, json)
Hash identifier:          G7tIAI1PU2oGZfbrC5jS0RJCTR7LizoexdY4qY5JjUc=
Subject key identifier:   8F:6F:2A:47:A2:8F:3E:E1:B8:90:15:B8:69:E8:EB:9C:7E:97:4C:07
Certificate issuer:       /CN=284EEA8E6EDB94AF9793A26E511B4993CF092BCA
Certificate serial:       2F991C38CA4FF64DF6D7185EDBBD7806308F901D
Authority key identifier: 28:4E:EA:8E:6E:DB:94:AF:97:93:A2:6E:51:1B:49:93:CF:09:2B:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/284EEA8E6EDB94AF9793A26E511B4993CF092BCA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/0/34352e3136372e382e302f32322d3232203d3e20323638303230.roa
Signing time:             Wed 29 Jul 2026 15:42:15 +0000
ROA not before:           Wed 29 Jul 2026 15:37:15 +0000
ROA not after:            Wed 28 Jul 2027 15:42:15 +0000
asID:                     268020
IP address blocks:        45.167.8.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:99:1c:38:ca:4f:f6:4d:f6:d7:18:5e:db:bd:78:06:30:8f:90:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=284EEA8E6EDB94AF9793A26E511B4993CF092BCA
        Validity
            Not Before: Jul 29 15:37:15 2026 GMT
            Not After : Jul 28 15:42:15 2027 GMT
        Subject: CN=8F6F2A47A28F3EE1B89015B869E8EB9C7E974C07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:81:8f:5d:be:c0:33:98:d6:66:89:90:d5:f5:
                    2c:9b:53:65:19:ba:c3:11:6c:69:06:af:21:08:71:
                    91:7d:24:a4:c2:ab:fd:f4:d2:df:8e:f8:d3:99:27:
                    1a:8c:2f:31:58:3f:68:4f:59:08:62:9d:b2:db:9f:
                    ad:ae:41:93:c6:31:87:70:37:12:eb:3d:26:0f:7c:
                    33:23:50:67:80:34:17:ae:1c:cc:10:2d:cd:a8:23:
                    69:fb:fb:00:40:09:12:59:b5:e2:6a:bb:e7:bc:bc:
                    e1:0d:f0:2b:be:db:6d:b6:00:40:74:a5:2e:bd:5e:
                    91:e9:0b:44:b9:ab:14:5c:2d:30:34:55:e0:91:f6:
                    eb:91:83:ff:3c:86:8d:97:a6:a4:db:69:e2:91:19:
                    06:f4:42:2e:50:20:3f:9d:bb:61:72:43:8e:80:e1:
                    9e:d7:eb:88:10:2c:5b:83:b0:9c:f8:be:f9:9d:5c:
                    e7:9f:b5:77:45:ef:04:37:19:1b:c5:33:90:c5:3f:
                    c5:c4:51:60:e7:f9:63:5f:87:33:be:e7:82:fa:45:
                    80:90:9f:32:4f:28:12:db:de:27:af:07:70:bf:8e:
                    de:e8:5a:d3:85:29:5d:5f:d6:17:d0:c4:6c:d8:35:
                    ab:8f:94:7c:31:b0:65:7d:6c:9d:22:48:03:a6:d0:
                    ae:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:6F:2A:47:A2:8F:3E:E1:B8:90:15:B8:69:E8:EB:9C:7E:97:4C:07
            X509v3 Authority Key Identifier:
                keyid:28:4E:EA:8E:6E:DB:94:AF:97:93:A2:6E:51:1B:49:93:CF:09:2B:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/0/284EEA8E6EDB94AF9793A26E511B4993CF092BCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/284EEA8E6EDB94AF9793A26E511B4993CF092BCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/0/34352e3136372e382e302f32322d3232203d3e20323638303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         69:88:7d:ab:ed:b9:c1:a3:c9:44:14:15:71:93:6f:28:26:da:
         4c:0a:39:d0:5d:9d:50:e0:cb:8d:ec:76:6a:46:71:99:da:d9:
         e5:6e:92:31:78:6b:b1:29:ff:95:c5:ff:43:01:bc:34:4a:cb:
         66:b0:6d:ea:c7:0c:e5:a7:9a:b6:1a:cd:20:98:dc:24:27:94:
         c9:3e:91:1c:4b:06:77:41:61:84:19:6a:37:c6:d4:42:c1:7e:
         49:3e:b6:3a:dd:41:fe:28:5c:9d:c4:56:97:ef:b2:44:ce:fa:
         73:3f:4e:06:3b:b3:58:96:70:13:75:e2:89:f8:2b:3d:9c:9c:
         e6:29:5f:0a:e5:16:ca:4f:e4:ef:8a:e4:c2:4b:3d:9e:de:66:
         ec:1e:7a:de:f7:41:fc:e5:57:a3:af:4a:16:2c:0a:50:6c:13:
         78:f9:02:b7:9c:82:d3:aa:91:0d:e5:aa:d7:14:95:f9:ae:30:
         d8:42:d5:b9:e1:9e:06:7b:33:87:87:60:5e:9f:f6:d0:5e:80:
         f5:fc:b6:11:1b:99:91:8f:53:af:a3:8d:d8:d6:89:4a:3b:cd:
         85:b5:20:e7:f6:91:34:fa:82:d4:05:a3:f8:82:d2:0f:39:94:
         c4:c6:e4:6f:3d:5e:ff:47:2c:39:98:75:6e:e5:40:12:4f:24:
         5b:2d:c3:06
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUL5kcOMpP9k321xhe2714BjCPkB0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjg0RUVBOEU2RURCOTRBRjk3OTNBMjZFNTExQjQ5OTND
RjA5MkJDQTAeFw0yNjA3MjkxNTM3MTVaFw0yNzA3MjgxNTQyMTVaMDMxMTAvBgNV
BAMTKDhGNkYyQTQ3QTI4RjNFRTFCODkwMTVCODY5RThFQjlDN0U5NzRDMDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJgY9dvsAzmNZmiZDV9SybU2UZ
usMRbGkGryEIcZF9JKTCq/300t+O+NOZJxqMLzFYP2hPWQhinbLbn62uQZPGMYdw
NxLrPSYPfDMjUGeANBeuHMwQLc2oI2n7+wBACRJZteJqu+e8vOEN8Cu+2222AEB0
pS69XpHpC0S5qxRcLTA0VeCR9uuRg/88ho2XpqTbaeKRGQb0Qi5QID+du2FyQ46A
4Z7X64gQLFuDsJz4vvmdXOeftXdF7wQ3GRvFM5DFP8XEUWDn+WNfhzO+54L6RYCQ
nzJPKBLb3ievB3C/jt7oWtOFKV1f1hfQxGzYNauPlHwxsGV9bJ0iSAOm0K49AgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUj28qR6KPPuG4kBW4aejrnH6XTAcwHwYDVR0j
BBgwFoAUKE7qjm7blK+Xk6JuURtJk88JK8owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1JLNFVBbVpyMkUxVGhrcjJLVHF0NHA3d3Z6SGR3alpkZVA4dVRYTmVq
V2QvMC8yODRFRUE4RTZFREI5NEFGOTc5M0EyNkU1MTFCNDk5M0NGMDkyQkNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4NEVFQThFNkVEQjk0QUY5
NzkzQTI2RTUxMUI0OTkzQ0YwOTJCQ0EuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NSSzRVQW1acjJFMVRoa3IyS1RxdDRwN3d2ekhkd2paZGVQOHVUWE5laldkLzAv
MzQzNTJlMzEzNjM3MmUzODJlMzAyZjMyMzIyZDMyMzIyMDNkM2UyMDMyMzYzODMw
MzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEAi2nCDANBgkqhkiG9w0BAQsFAAOCAQEAaYh9q+25waPJ
RBQVcZNvKCbaTAo50F2dUODLjex2akZxmdrZ5W6SMXhrsSn/lcX/QwG8NErLZrBt
6scM5aeathrNIJjcJCeUyT6RHEsGd0FhhBlqN8bUQsF+ST62Ot1B/ihcncRWl++y
RM76cz9OBjuzWJZwE3XiifgrPZyc5ilfCuUWyk/k74rkwks9nt5m7B563vdB/OVX
o69KFiwKUGwTePkCt5yC06qRDeWq1xSV+a4w2ELVueGeBnszh4dgXp/20F6A9fy2
ERuZkY9Tr6ON2NaJSjvNhbUg5/aRNPqC1AWj+ILSDzmUxMbkbz1e/0csOZh1buVA
Ek8kWy3DBg==
-----END CERTIFICATE-----