Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138312e33362e302f32322d3232203d3e20323639353937.roa
File:                     34352e3138312e33362e302f32322d3232203d3e20323639353937.roa (raw, json)
Hash identifier:          fnxeKG5CHRT6RplyVLAISM8QqMDBzk0m6Kg3/TzmVN0=
Subject key identifier:   B2:C8:CB:F0:0C:03:6A:70:BF:2A:8B:52:2A:90:9C:8A:B9:FB:79:E2
Certificate issuer:       /CN=11F4865823D65C7C2943A45FEA49FEC8A3990F5A
Certificate serial:       15C6F7A7D6BD3826079C46756341DCAAEDBD3B6F
Authority key identifier: 11:F4:86:58:23:D6:5C:7C:29:43:A4:5F:EA:49:FE:C8:A3:99:0F:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138312e33362e302f32322d3232203d3e20323639353937.roa
Signing time:             Thu 09 Jul 2026 19:41:07 +0000
ROA not before:           Thu 09 Jul 2026 19:36:07 +0000
ROA not after:            Thu 08 Jul 2027 19:41:07 +0000
asID:                     269597
IP address blocks:        45.181.36.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:c6:f7:a7:d6:bd:38:26:07:9c:46:75:63:41:dc:aa:ed:bd:3b:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11F4865823D65C7C2943A45FEA49FEC8A3990F5A
        Validity
            Not Before: Jul  9 19:36:07 2026 GMT
            Not After : Jul  8 19:41:07 2027 GMT
        Subject: CN=B2C8CBF00C036A70BF2A8B522A909C8AB9FB79E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fb:15:33:83:57:b9:d9:ed:eb:c7:3a:e0:a5:
                    7c:9c:cb:77:d3:a1:53:cf:91:02:49:28:0d:7a:95:
                    27:7b:57:f7:ce:30:e5:d1:fd:e1:87:a7:50:ec:07:
                    19:df:4a:6a:5a:dc:e6:30:25:b0:a2:62:07:99:52:
                    f8:e3:6f:63:3f:51:93:42:35:5b:cf:9d:5c:af:8c:
                    3f:f4:97:17:48:a1:40:9a:05:5e:8f:50:e1:3e:8a:
                    5e:44:89:06:10:13:24:2f:1c:20:da:09:fb:c3:7d:
                    18:d8:c6:e9:8d:5f:33:fe:da:46:18:c3:30:30:86:
                    ae:b8:64:12:ec:b9:0f:50:0d:ba:a0:cd:84:d1:e2:
                    9f:c6:a9:e0:c2:47:bf:f5:4d:86:4c:e8:ae:8f:d6:
                    5d:5b:9e:3c:0c:cb:d0:b0:64:79:2a:dc:8f:a0:2c:
                    1e:af:66:c5:13:67:0d:71:88:72:4a:cb:26:29:ef:
                    32:4f:0d:33:98:73:ac:76:0d:37:e7:d9:37:24:95:
                    c8:46:3a:22:97:ce:49:bd:27:9d:87:b8:45:e2:0a:
                    02:88:dd:43:42:2c:a4:62:ff:5e:2a:70:2a:50:71:
                    fb:6b:57:d3:89:03:d8:16:8f:93:3c:60:b4:a8:3e:
                    e0:b2:12:77:df:2b:48:21:37:c9:a7:97:c6:4f:fc:
                    23:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C8:CB:F0:0C:03:6A:70:BF:2A:8B:52:2A:90:9C:8A:B9:FB:79:E2
            X509v3 Authority Key Identifier:
                keyid:11:F4:86:58:23:D6:5C:7C:29:43:A4:5F:EA:49:FE:C8:A3:99:0F:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138312e33362e302f32322d3232203d3e20323639353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2b:8c:a4:15:8a:8f:8a:6e:8f:29:07:25:60:e6:1d:8c:f1:8c:
         c1:7a:83:e4:0b:2d:6f:83:91:6d:53:96:ae:77:22:f3:32:d6:
         37:1d:69:9b:70:80:b4:f5:57:3e:ba:0a:f0:41:f3:2a:ce:73:
         b5:3b:0d:50:05:0b:49:02:1d:27:8a:1b:67:d5:cc:1d:ff:b1:
         4a:c0:b8:09:fa:58:e7:06:42:32:9f:3d:a9:d1:7f:fb:17:0a:
         34:c0:5b:7c:1d:ab:94:a2:d7:e4:95:0c:63:f7:7a:89:3e:a7:
         32:16:dd:00:1b:d4:99:09:2a:7a:5e:29:72:0d:0a:19:84:00:
         58:d5:db:2a:ab:5a:7f:a5:0f:af:ea:01:69:82:cd:90:0e:46:
         52:60:30:30:8e:81:04:f3:e0:9f:d8:12:1c:20:ec:b2:d2:81:
         f1:36:48:9b:cf:fc:fd:e7:a1:9d:0b:f8:56:92:90:c4:93:14:
         87:57:cc:0d:70:e8:85:4b:7d:bb:e1:97:88:50:ed:7d:91:c3:
         4d:6e:f8:71:09:8c:94:da:09:34:49:1e:b7:b3:8b:12:af:b9:
         d4:d6:f2:22:d1:50:5a:7e:5d:c0:45:9c:2c:eb:24:71:02:8b:
         4e:89:6c:3d:70:86:0a:55:bc:eb:a8:fa:38:da:8b:6c:31:8e:
         37:98:95:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----