Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3138342e36382e302f32322d3234203d3e20323639333539.roa
File:                     34352e3138342e36382e302f32322d3234203d3e20323639333539.roa (raw, json)
Hash identifier:          DJ3OhLxWDK5z/Hpr/oCZENTUm4hwt6+pzF/tJIViyrU=
Subject key identifier:   00:1D:A5:E7:25:77:A3:EE:84:CC:4C:F9:49:20:57:BE:80:22:14:7D
Certificate issuer:       /CN=838E2AA3E7CC12B77638528A70C2345F3ADD65D6
Certificate serial:       1EAB12BFE565BC9D99B3AB79B47A7A3B978F7CC9
Authority key identifier: 83:8E:2A:A3:E7:CC:12:B7:76:38:52:8A:70:C2:34:5F:3A:DD:65:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/838E2AA3E7CC12B77638528A70C2345F3ADD65D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3138342e36382e302f32322d3234203d3e20323639333539.roa
Signing time:             Wed 05 Aug 2026 17:15:45 +0000
ROA not before:           Wed 05 Aug 2026 17:10:45 +0000
ROA not after:            Wed 04 Aug 2027 17:15:45 +0000
asID:                     269359
IP address blocks:        45.184.68.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:ab:12:bf:e5:65:bc:9d:99:b3:ab:79:b4:7a:7a:3b:97:8f:7c:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=838E2AA3E7CC12B77638528A70C2345F3ADD65D6
        Validity
            Not Before: Aug  5 17:10:45 2026 GMT
            Not After : Aug  4 17:15:45 2027 GMT
        Subject: CN=001DA5E72577A3EE84CC4CF9492057BE8022147D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:cc:a2:69:f4:34:87:cf:ea:eb:ee:67:2b:ba:
                    37:9a:ad:45:a4:64:d7:7d:20:b4:24:ad:c3:43:38:
                    3f:db:39:fa:a8:3c:e6:4d:df:51:7a:e9:47:3f:5a:
                    37:23:06:a8:67:1f:99:f1:e3:8a:db:de:25:62:bc:
                    93:f3:dd:ca:f7:b0:a9:5f:14:9e:2f:6b:8b:f2:0e:
                    00:2f:41:e4:ea:8a:cb:a1:00:6b:df:c7:02:a4:f1:
                    92:e8:68:71:59:9f:a9:2f:33:3a:7a:69:fb:26:c2:
                    80:6d:eb:d9:1b:ea:48:f5:fe:ad:bd:50:6e:ef:5a:
                    14:64:85:a7:2d:d4:1a:2a:d0:81:22:cc:c7:9a:3d:
                    ca:2c:2d:22:3d:1c:90:33:6b:20:ec:83:8a:dd:24:
                    9f:63:04:9b:9d:ed:1d:af:96:6b:98:de:b2:11:bb:
                    1f:05:a1:4c:9c:37:87:ce:a9:c0:2c:eb:40:43:e9:
                    e5:e0:0f:5d:53:f4:90:b5:a7:f1:a0:c1:82:3c:56:
                    97:0f:a2:64:03:70:98:36:59:3a:33:bf:b9:37:8c:
                    3e:4b:cb:88:b7:d5:83:f9:07:9b:5f:e3:b1:1c:e2:
                    bc:e6:88:60:5b:d3:56:f5:7c:8c:f3:30:4f:01:7d:
                    58:bf:67:72:1a:06:82:19:b6:32:a3:51:6d:da:c0:
                    d9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:1D:A5:E7:25:77:A3:EE:84:CC:4C:F9:49:20:57:BE:80:22:14:7D
            X509v3 Authority Key Identifier:
                keyid:83:8E:2A:A3:E7:CC:12:B7:76:38:52:8A:70:C2:34:5F:3A:DD:65:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/838E2AA3E7CC12B77638528A70C2345F3ADD65D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/838E2AA3E7CC12B77638528A70C2345F3ADD65D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3138342e36382e302f32322d3234203d3e20323639333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.184.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         15:ba:59:0c:a3:d4:7d:e6:5c:ff:54:d4:be:28:cb:79:a7:07:
         4b:3d:a2:01:37:19:3f:22:50:30:f5:6d:b4:86:86:e0:2f:e3:
         0d:59:b2:e3:a6:8a:02:00:dc:87:d1:e7:09:70:59:0d:02:85:
         80:58:7c:ec:b4:38:e3:1e:39:9f:b1:dd:c9:e3:86:8f:37:a8:
         0f:b5:9e:83:c5:2c:39:ad:cd:4a:6a:1a:d7:9f:50:af:b2:31:
         35:b9:a9:44:45:c6:4b:1a:4b:74:71:13:68:4b:97:58:98:a4:
         f8:9e:fd:fb:7d:60:20:73:5c:c3:c0:02:05:01:5a:19:0a:ed:
         5d:05:14:bb:ed:2f:62:43:47:89:25:e8:7c:61:97:03:cd:1e:
         24:4b:67:80:b3:6d:56:29:ac:c1:b8:57:89:f6:87:87:6e:98:
         a7:67:1e:f1:f8:b8:a0:14:f1:f4:9f:de:d6:06:4d:31:03:4a:
         23:87:53:a0:27:f8:12:df:2f:22:a2:af:de:dc:e3:05:e2:b3:
         fd:7d:ee:37:37:21:93:59:0b:5b:fd:ca:7a:1c:97:b1:55:b4:
         00:84:97:60:85:b4:7b:f5:10:af:62:5c:6f:b7:5e:a2:09:df:
         99:0b:f7:47:1e:0f:c9:27:a4:c7:66:e5:eb:96:27:6b:79:ba:
         2e:75:d7:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----