Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GXqG5YPNBaABFBdNgcVwJ7jbdeiJzBdzEczJNMsu4MPr/0/34352e37302e3138382e302f32322d3234203d3e20323637353934.roa
File:                     34352e37302e3138382e302f32322d3234203d3e20323637353934.roa (raw, json)
Hash identifier:          NFKJ77azDpzmrogiUpMRBH0Hf+3oizbasq4YjjU7nEg=
Subject key identifier:   3F:B3:0C:F3:71:BF:9A:1F:7B:29:5B:5B:94:57:4D:A9:E5:C6:33:95
Certificate issuer:       /CN=E19797797ED076B71FA5809374E9945BD3EDC3D4
Certificate serial:       186E6CA1AE9977DE5E43B1F97DA9B15E76850B06
Authority key identifier: E1:97:97:79:7E:D0:76:B7:1F:A5:80:93:74:E9:94:5B:D3:ED:C3:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E19797797ED076B71FA5809374E9945BD3EDC3D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GXqG5YPNBaABFBdNgcVwJ7jbdeiJzBdzEczJNMsu4MPr/0/34352e37302e3138382e302f32322d3234203d3e20323637353934.roa
Signing time:             Wed 26 Aug 2026 13:32:06 +0000
ROA not before:           Wed 26 Aug 2026 13:27:06 +0000
ROA not after:            Wed 25 Aug 2027 13:32:06 +0000
asID:                     267594
IP address blocks:        45.70.188.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:6e:6c:a1:ae:99:77:de:5e:43:b1:f9:7d:a9:b1:5e:76:85:0b:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E19797797ED076B71FA5809374E9945BD3EDC3D4
        Validity
            Not Before: Aug 26 13:27:06 2026 GMT
            Not After : Aug 25 13:32:06 2027 GMT
        Subject: CN=3FB30CF371BF9A1F7B295B5B94574DA9E5C63395
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a3:3f:0f:1d:80:53:c7:84:87:40:4e:20:f2:
                    42:53:cb:fb:c7:9a:1e:42:89:95:aa:1c:7a:6d:df:
                    6f:fe:9c:0f:4a:18:1f:68:05:ac:55:8b:14:8e:2c:
                    7f:00:c7:55:82:bd:b9:25:c2:0d:de:09:0d:7b:b5:
                    68:02:55:6a:f7:cf:6f:8c:87:3b:60:31:08:94:77:
                    03:97:ff:44:e6:87:92:dc:bc:5f:48:bb:14:5c:a6:
                    41:fc:3c:7f:03:6d:46:88:33:95:1d:5d:75:58:70:
                    bf:b7:51:71:cb:c3:dd:6b:c3:33:a9:48:81:20:a2:
                    19:27:84:c7:8c:df:03:90:91:57:87:44:88:a6:bb:
                    4d:f9:a7:06:6b:33:33:2a:e6:c5:9f:9e:4b:12:51:
                    5b:4b:52:e4:33:4d:a6:7f:c5:e8:fd:a9:1c:1b:4f:
                    1a:93:1c:a2:5a:14:95:e5:55:e8:03:78:2f:b7:4b:
                    fc:4b:7f:8d:f4:e9:12:2b:28:a5:39:79:04:53:c2:
                    88:e1:69:78:2e:33:68:39:dd:67:a1:bb:ae:76:10:
                    2c:59:97:c9:04:01:74:cd:72:fc:59:52:84:ac:9d:
                    9f:a0:b7:2d:da:c5:7c:2a:e9:84:40:1a:cb:3c:78:
                    05:05:d4:98:ea:cb:02:ae:c2:e9:f9:0e:5a:88:97:
                    d9:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:B3:0C:F3:71:BF:9A:1F:7B:29:5B:5B:94:57:4D:A9:E5:C6:33:95
            X509v3 Authority Key Identifier:
                keyid:E1:97:97:79:7E:D0:76:B7:1F:A5:80:93:74:E9:94:5B:D3:ED:C3:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GXqG5YPNBaABFBdNgcVwJ7jbdeiJzBdzEczJNMsu4MPr/0/E19797797ED076B71FA5809374E9945BD3EDC3D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E19797797ED076B71FA5809374E9945BD3EDC3D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GXqG5YPNBaABFBdNgcVwJ7jbdeiJzBdzEczJNMsu4MPr/0/34352e37302e3138382e302f32322d3234203d3e20323637353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.70.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:dd:47:19:56:03:08:85:23:d6:98:d9:c7:0b:2e:2f:d2:ce:
         3a:f4:71:51:d3:b3:25:b2:f6:bd:cd:cf:50:3d:44:3a:c9:20:
         ac:c7:ac:64:2f:98:d7:13:55:2c:e8:05:2e:74:6f:0c:da:1c:
         9e:b4:dc:b7:3e:c9:c3:fe:d5:74:66:04:1a:f6:22:c3:a7:62:
         3e:b0:a3:ab:62:72:ac:cd:82:5a:29:da:53:08:b9:f9:3b:47:
         18:fb:36:fa:2a:1e:9a:e0:ea:da:7a:c1:1a:d7:10:f3:cf:47:
         c1:02:f2:5a:c7:2a:5a:ff:e6:e3:7f:68:3f:fd:e8:aa:dd:dd:
         22:19:0b:9f:36:20:aa:35:cf:42:a7:c9:82:3c:86:fa:69:6b:
         63:05:07:27:bf:44:2d:2c:25:9a:df:d8:b1:bd:9b:56:48:67:
         5d:40:eb:26:a2:ec:af:1c:7c:18:c9:d5:5c:03:e1:51:12:39:
         06:f4:88:f0:76:85:4f:f6:b6:65:18:db:c3:66:23:bc:28:e1:
         bb:62:47:da:47:31:9f:c7:02:63:79:ac:13:23:e0:28:52:20:
         57:62:c6:c7:25:79:e4:86:2d:96:6d:ba:8f:57:ff:85:27:91:
         19:79:e1:2f:d2:9f:63:16:98:76:fe:8b:9b:cd:8b:ff:37:fe:
         13:a2:8b:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----