Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3230312e35352e3230302e302f32322d3332203d3e203631373834.roa
File:                     3230312e35352e3230302e302f32322d3332203d3e203631373834.roa (raw, json)
Hash identifier:          r6Eu2cl/Pdiolz1g8lw6tsHPY71I9TUaQCIJGrahoPQ=
Subject key identifier:   DC:C9:23:D6:E9:09:22:5F:16:F4:CC:99:11:C5:F1:DF:C7:62:E6:53
Certificate issuer:       /CN=4A7A3E192DCCA87A3610881CB6D60D7DDF6044EC
Certificate serial:       6BA54AB44D276100C95DA8C131797DC205E9A3C0
Authority key identifier: 4A:7A:3E:19:2D:CC:A8:7A:36:10:88:1C:B6:D6:0D:7D:DF:60:44:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A7A3E192DCCA87A3610881CB6D60D7DDF6044EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3230312e35352e3230302e302f32322d3332203d3e203631373834.roa
Signing time:             Tue 25 Aug 2026 17:14:41 +0000
ROA not before:           Tue 25 Aug 2026 17:09:41 +0000
ROA not after:            Tue 24 Aug 2027 17:14:41 +0000
asID:                     61784
IP address blocks:        201.55.200.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:a5:4a:b4:4d:27:61:00:c9:5d:a8:c1:31:79:7d:c2:05:e9:a3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A7A3E192DCCA87A3610881CB6D60D7DDF6044EC
        Validity
            Not Before: Aug 25 17:09:41 2026 GMT
            Not After : Aug 24 17:14:41 2027 GMT
        Subject: CN=DCC923D6E909225F16F4CC9911C5F1DFC762E653
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:07:c2:9c:2c:05:f1:9c:e1:b6:b8:b6:42:04:
                    94:8a:c1:c9:e1:04:ab:c9:94:40:db:9e:fb:cc:88:
                    20:1b:45:6a:e1:1f:9a:f6:d6:a5:5b:6d:fc:09:0c:
                    f0:a2:30:39:74:cb:17:8c:48:18:88:d4:fc:8b:5d:
                    f6:68:62:2c:f0:d4:3d:ba:cd:1f:64:a5:f1:12:1e:
                    59:e2:8f:2f:1e:fa:24:c8:14:25:d7:96:77:c2:2d:
                    d1:b9:5c:85:93:fb:59:e2:ff:bf:27:c9:f3:b8:bc:
                    be:40:a6:41:3f:da:77:65:e6:97:f5:12:b2:23:61:
                    ad:d9:fc:13:99:17:4c:32:4f:c6:05:02:86:01:68:
                    db:e7:ec:37:43:d4:a9:16:01:5e:fa:25:2c:53:44:
                    ac:ab:fd:9f:c2:00:ac:28:39:e8:28:58:a1:cc:b8:
                    7b:9a:27:02:2a:89:12:c9:dc:13:b8:af:6d:25:11:
                    f5:32:47:56:56:03:59:40:ea:df:65:29:c2:75:7c:
                    f3:c6:a1:b3:4d:f6:d4:fa:04:11:c5:ef:31:36:4e:
                    1b:96:58:b1:68:b6:81:27:b7:96:9c:88:10:41:dc:
                    5b:0d:47:18:62:9e:ca:4c:53:b6:9f:70:73:4d:07:
                    3c:75:60:f6:c2:74:08:68:56:e1:37:d1:6d:5f:71:
                    c5:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:C9:23:D6:E9:09:22:5F:16:F4:CC:99:11:C5:F1:DF:C7:62:E6:53
            X509v3 Authority Key Identifier:
                keyid:4A:7A:3E:19:2D:CC:A8:7A:36:10:88:1C:B6:D6:0D:7D:DF:60:44:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/4A7A3E192DCCA87A3610881CB6D60D7DDF6044EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A7A3E192DCCA87A3610881CB6D60D7DDF6044EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3230312e35352e3230302e302f32322d3332203d3e203631373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.55.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:57:fb:79:7b:3c:8f:c4:10:74:0f:92:0d:fd:ba:13:c9:5c:
         cd:62:14:47:8e:8b:1f:ca:06:0d:6a:94:5e:47:d1:b9:b2:ce:
         8f:db:81:b8:39:67:f5:a3:f0:40:dc:fd:08:1f:e0:c6:d5:7d:
         bc:51:e1:d9:f4:cf:db:2e:c8:1c:20:99:77:56:a3:96:14:dc:
         16:da:9c:84:ea:c6:92:2e:85:a0:ab:56:06:9a:b1:89:6b:a1:
         bf:57:a4:21:02:76:db:2b:f2:bf:03:76:69:6f:f8:7f:fd:78:
         b0:3a:be:5d:a4:9d:96:df:05:f9:13:23:8d:f2:0d:ea:d5:62:
         a4:3c:73:2c:15:6f:40:c4:f2:9f:45:d9:0d:af:4c:ed:46:27:
         1b:59:2d:41:a9:9a:92:f8:58:30:3e:f6:15:08:23:b8:00:9c:
         16:7d:0e:f4:a1:1c:9c:f2:ea:76:9d:32:a3:c4:fd:32:d7:f3:
         c6:06:8a:f4:ec:c4:c6:a8:ec:ff:ea:2e:c6:24:8e:8b:a0:a2:
         70:99:d3:88:84:e9:6d:e6:d2:0d:b7:60:fd:51:20:6a:17:4f:
         54:53:8f:63:12:48:a7:42:15:db:13:31:aa:61:bd:54:9b:dc:
         c5:70:ad:42:df:b9:d9:bc:a2:7e:ea:0a:aa:5b:7a:2d:45:bf:
         26:03:7f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----