Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3233302e38342e302f32332d3234203d3e20323639333539.roa
File:                     34352e3233302e38342e302f32332d3234203d3e20323639333539.roa (raw, json)
Hash identifier:          aD041Tki7I9BYf63zF1rWFq0GDRIMcx8bJNSAu7AGQo=
Subject key identifier:   6A:2F:7A:C7:FD:25:F0:16:38:61:6E:A6:95:BF:1C:DD:72:57:AE:AB
Certificate issuer:       /CN=838E2AA3E7CC12B77638528A70C2345F3ADD65D6
Certificate serial:       6B43CB7C35D419B60AEC740CD4078F32B7C90391
Authority key identifier: 83:8E:2A:A3:E7:CC:12:B7:76:38:52:8A:70:C2:34:5F:3A:DD:65:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/838E2AA3E7CC12B77638528A70C2345F3ADD65D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3233302e38342e302f32332d3234203d3e20323639333539.roa
Signing time:             Wed 05 Aug 2026 21:15:45 +0000
ROA not before:           Wed 05 Aug 2026 21:10:45 +0000
ROA not after:            Wed 04 Aug 2027 21:15:45 +0000
asID:                     269359
IP address blocks:        45.230.84.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:43:cb:7c:35:d4:19:b6:0a:ec:74:0c:d4:07:8f:32:b7:c9:03:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=838E2AA3E7CC12B77638528A70C2345F3ADD65D6
        Validity
            Not Before: Aug  5 21:10:45 2026 GMT
            Not After : Aug  4 21:15:45 2027 GMT
        Subject: CN=6A2F7AC7FD25F01638616EA695BF1CDD7257AEAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:10:c8:8a:69:5c:17:46:2e:68:2f:9f:b4:c3:
                    31:e4:1e:63:b6:1f:e1:ac:62:bd:b0:a1:83:c5:ff:
                    c8:33:9f:3b:d7:b8:bc:41:bc:6c:5f:46:96:7f:ee:
                    2f:f0:7f:a6:0e:01:f3:b5:89:d8:2b:8a:63:22:9e:
                    a3:95:a3:8a:8a:d5:01:bf:47:f3:d6:a0:8d:96:e8:
                    a4:7d:eb:00:92:00:57:52:55:bb:a6:e9:33:e4:2c:
                    b7:00:4b:cd:25:63:b4:ac:c0:e7:f6:b7:08:86:1f:
                    4b:7f:12:4d:00:4f:22:e2:2e:0a:a3:85:6f:b0:81:
                    d2:f6:37:cb:94:20:d1:b3:0d:14:77:03:13:be:7f:
                    01:c8:8f:19:fc:b8:1e:db:4e:80:fd:c0:f2:a8:c1:
                    63:89:55:88:66:b0:48:38:a4:80:e4:9e:e9:69:55:
                    9f:04:02:f2:38:a3:72:23:0b:fa:55:0b:b5:76:4f:
                    33:03:c6:3a:bd:96:e3:0e:54:47:2e:b2:e7:f6:e7:
                    05:68:35:f3:aa:54:1c:f0:dc:50:36:c1:73:51:0e:
                    0c:b3:8d:21:02:47:8a:4c:fd:e2:45:fb:5d:8f:dd:
                    6a:97:5b:be:4a:0b:d8:36:78:af:ad:91:16:8c:e3:
                    48:f5:a5:28:79:53:78:b8:d4:4b:e7:87:7a:21:ef:
                    d3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:2F:7A:C7:FD:25:F0:16:38:61:6E:A6:95:BF:1C:DD:72:57:AE:AB
            X509v3 Authority Key Identifier:
                keyid:83:8E:2A:A3:E7:CC:12:B7:76:38:52:8A:70:C2:34:5F:3A:DD:65:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/838E2AA3E7CC12B77638528A70C2345F3ADD65D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/838E2AA3E7CC12B77638528A70C2345F3ADD65D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/34352e3233302e38342e302f32332d3234203d3e20323639333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:e8:b4:5e:3a:ea:d4:d8:54:c7:e2:5e:de:53:db:03:54:21:
         0c:72:cd:0d:50:19:1a:18:fc:f5:8a:d5:e7:e9:7c:a0:6b:ec:
         9f:df:ca:76:b2:62:ac:fa:43:bc:63:3b:23:af:dd:1c:f3:af:
         65:ff:19:8f:e9:45:bb:b4:97:56:41:94:83:42:ff:ba:59:10:
         0d:c0:20:fd:fb:0e:5f:bf:f1:28:5d:95:75:07:3e:00:da:8c:
         25:b5:af:32:b1:a3:50:ce:c1:67:f2:aa:55:7f:88:f9:d2:70:
         3e:65:59:d4:0d:41:9e:61:4e:c1:82:08:22:39:9f:79:7b:49:
         24:b4:45:f1:cf:57:39:a3:81:73:14:2f:35:0c:97:8a:2d:6c:
         69:ff:9e:63:ad:b3:83:e0:5e:c7:b3:3f:ca:5a:34:78:c4:ed:
         3d:a6:92:ae:a9:c9:84:93:2f:7b:d3:7d:9c:ce:78:e1:a0:30:
         14:d2:45:e0:72:f0:bd:9d:e5:a2:fa:18:5a:a2:b4:d6:e7:87:
         47:83:7e:3c:e0:3d:6e:c3:cc:50:99:75:f9:e8:e9:dd:ee:b6:
         b1:15:f5:79:5e:6d:e1:cc:b3:1a:94:f0:ec:49:ff:98:ad:4b:
         ca:e2:34:ac:e3:b6:34:78:88:ab:bf:f8:00:ec:be:19:3c:c6:
         f8:f4:45:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----