Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DTK83rT71rfXjN8DzT7AKt8qFXuvu5HeKKhtzg39Qoke/0/34352e3137382e37362e302f32322d3234203d3e20323639303930.roa
File:                     34352e3137382e37362e302f32322d3234203d3e20323639303930.roa (raw, json)
Hash identifier:          zAhZ3aM2we7N64zzWjDA62/q8PLBHdPll5/L66b1aHc=
Subject key identifier:   E4:92:F4:B0:AA:67:57:1B:E4:66:66:6B:E2:5D:4D:67:E9:11:3F:12
Certificate issuer:       /CN=1DA4BADD512CEC618201908100D24DA0D888453C
Certificate serial:       5961202EA03AB2408A260ECB93B5C2E2BD0B1F7D
Authority key identifier: 1D:A4:BA:DD:51:2C:EC:61:82:01:90:81:00:D2:4D:A0:D8:88:45:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1DA4BADD512CEC618201908100D24DA0D888453C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DTK83rT71rfXjN8DzT7AKt8qFXuvu5HeKKhtzg39Qoke/0/34352e3137382e37362e302f32322d3234203d3e20323639303930.roa
Signing time:             Tue 30 Jun 2026 15:25:20 +0000
ROA not before:           Tue 30 Jun 2026 15:20:20 +0000
ROA not after:            Tue 29 Jun 2027 15:25:20 +0000
asID:                     269090
IP address blocks:        45.178.76.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:61:20:2e:a0:3a:b2:40:8a:26:0e:cb:93:b5:c2:e2:bd:0b:1f:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DA4BADD512CEC618201908100D24DA0D888453C
        Validity
            Not Before: Jun 30 15:20:20 2026 GMT
            Not After : Jun 29 15:25:20 2027 GMT
        Subject: CN=E492F4B0AA67571BE466666BE25D4D67E9113F12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0f:f7:a2:ac:59:fd:dd:8d:d2:b6:98:62:6a:
                    89:8a:a4:79:e7:ea:aa:2c:9e:3e:71:31:ce:11:97:
                    ce:23:52:50:f8:05:0c:53:ea:b7:57:be:aa:63:64:
                    1a:d1:c0:2f:1e:54:92:f6:f7:b4:6b:64:86:04:4a:
                    a8:3a:c4:f4:73:22:0c:0e:72:34:d8:de:32:9c:dd:
                    bc:59:1e:8e:cb:82:89:e3:db:37:de:fc:e3:64:e9:
                    cd:74:8b:3f:8d:f2:78:a8:65:2f:23:6a:7a:63:11:
                    53:95:bf:80:54:d0:16:93:67:de:10:54:16:80:e3:
                    fd:17:88:c2:a1:9c:5b:83:ac:d1:42:f2:ba:9e:81:
                    9e:4c:4c:fc:c5:c3:44:8a:13:76:41:a1:44:19:33:
                    10:65:11:e5:6e:7e:55:0d:b4:df:48:74:c9:24:35:
                    d4:6d:26:24:ec:44:8e:2b:74:20:44:b8:a4:65:5a:
                    2c:44:94:3b:7b:c7:ac:ee:02:d2:cf:c3:7f:dd:00:
                    70:06:48:5c:78:f7:77:4e:98:ae:d9:b1:82:2c:40:
                    b6:4a:72:32:5e:40:c7:8b:14:eb:a3:1a:25:8b:dd:
                    e8:6a:03:ee:e8:e4:08:74:22:14:18:74:55:aa:d1:
                    cc:77:d9:69:53:69:39:83:49:2a:28:57:4c:35:c5:
                    fe:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:92:F4:B0:AA:67:57:1B:E4:66:66:6B:E2:5D:4D:67:E9:11:3F:12
            X509v3 Authority Key Identifier:
                keyid:1D:A4:BA:DD:51:2C:EC:61:82:01:90:81:00:D2:4D:A0:D8:88:45:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DTK83rT71rfXjN8DzT7AKt8qFXuvu5HeKKhtzg39Qoke/0/1DA4BADD512CEC618201908100D24DA0D888453C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1DA4BADD512CEC618201908100D24DA0D888453C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DTK83rT71rfXjN8DzT7AKt8qFXuvu5HeKKhtzg39Qoke/0/34352e3137382e37362e302f32322d3234203d3e20323639303930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         59:b9:05:0a:48:13:d9:ef:b7:5c:bd:c0:2e:48:44:2f:6b:5c:
         94:33:dc:12:fa:29:48:cd:7e:46:ab:3e:fe:f8:86:2f:5c:12:
         ef:85:a5:77:2f:14:88:d5:e0:26:70:22:c1:43:e8:e8:88:64:
         5b:36:45:ba:d3:dd:30:ee:b4:bd:18:3d:3f:de:a2:1b:07:7d:
         db:a3:f3:95:6a:94:44:88:49:96:13:22:9c:19:e3:6c:e8:3d:
         6c:bc:df:c5:53:4d:78:03:bc:d0:13:11:0e:a8:c3:1a:90:40:
         03:47:8f:f1:02:3f:7e:35:5b:ff:a6:e1:a2:1a:21:76:75:7e:
         e4:49:af:40:67:c0:ba:ba:65:03:54:00:4b:40:1e:11:9d:15:
         8f:ff:70:89:67:71:e8:13:4b:40:37:c3:d4:ff:c5:91:ef:09:
         84:20:de:02:27:1f:2a:ac:3b:c8:3a:ac:c2:41:7e:b4:f3:f4:
         1e:ec:02:68:f2:fb:d9:7e:b9:0a:81:b0:4d:0c:b4:77:fc:92:
         b7:2e:14:f1:a1:b5:6b:cf:b5:02:2a:47:7e:94:c4:84:93:4d:
         88:0e:6c:f1:e0:02:50:4e:6a:89:76:a4:06:14:f1:2d:85:34:
         20:1b:20:2a:50:88:15:bf:77:cc:28:ec:da:f7:00:9d:a9:11:
         4f:ec:5c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----