Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138312e33362e302f32332d3233203d3e20323639353937.roa
File:                     34352e3138312e33362e302f32332d3233203d3e20323639353937.roa (raw, json)
Hash identifier:          z8gsERWOH6JHLUTB++OKD3ZLDoIOFkSXnssxO1G2alA=
Subject key identifier:   5D:E7:1B:DD:F1:30:54:70:98:11:03:DD:D8:2A:70:DA:39:56:05:60
Certificate issuer:       /CN=11F4865823D65C7C2943A45FEA49FEC8A3990F5A
Certificate serial:       0F8A62AAC608D6385FE5214CFFCA92574A737300
Authority key identifier: 11:F4:86:58:23:D6:5C:7C:29:43:A4:5F:EA:49:FE:C8:A3:99:0F:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138312e33362e302f32332d3233203d3e20323639353937.roa
Signing time:             Thu 09 Jul 2026 19:41:08 +0000
ROA not before:           Thu 09 Jul 2026 19:36:08 +0000
ROA not after:            Thu 08 Jul 2027 19:41:08 +0000
asID:                     269597
IP address blocks:        45.181.36.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:8a:62:aa:c6:08:d6:38:5f:e5:21:4c:ff:ca:92:57:4a:73:73:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11F4865823D65C7C2943A45FEA49FEC8A3990F5A
        Validity
            Not Before: Jul  9 19:36:08 2026 GMT
            Not After : Jul  8 19:41:08 2027 GMT
        Subject: CN=5DE71BDDF1305470981103DDD82A70DA39560560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:cc:f4:7b:57:67:2c:c1:f4:79:7a:95:91:8f:
                    98:75:11:dc:2a:07:6d:a9:7d:18:f5:d3:31:f0:6d:
                    73:ed:97:cf:ea:4f:c3:be:b6:96:e3:5d:51:96:4c:
                    9e:36:fa:6f:e9:2a:75:de:70:f3:6f:2d:4b:a7:1c:
                    65:71:64:50:be:64:ae:61:77:a2:bb:da:8f:84:65:
                    d8:5a:f3:a1:85:da:40:33:56:c3:cb:01:7b:bd:7b:
                    ba:15:de:41:b5:c3:74:dc:d6:5e:08:5c:12:52:e1:
                    f9:60:b4:60:c5:a6:30:cf:d7:bf:60:56:ee:62:cf:
                    24:6a:42:64:7e:5e:5b:db:b0:3d:4d:75:1f:bf:f5:
                    7e:38:14:e8:c2:e6:03:e3:a0:a6:59:6a:51:a6:7f:
                    2c:a7:85:e0:3a:a7:b7:5d:f6:d9:50:c3:15:db:d3:
                    f1:a9:c8:51:bc:51:5b:de:e8:55:77:c1:53:cb:43:
                    44:2a:96:89:0f:40:0a:d5:2a:ea:7a:de:35:c8:94:
                    5d:0b:78:01:20:1c:76:39:ad:cc:72:57:8a:c9:dc:
                    e7:02:10:09:2b:cb:48:61:6a:8e:4f:77:4e:2d:ed:
                    e8:20:72:58:a2:a7:50:35:2f:30:16:ce:b5:f9:8c:
                    92:9b:3c:19:fa:5b:94:8f:46:0c:ea:b4:ca:1c:c9:
                    d3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:E7:1B:DD:F1:30:54:70:98:11:03:DD:D8:2A:70:DA:39:56:05:60
            X509v3 Authority Key Identifier:
                keyid:11:F4:86:58:23:D6:5C:7C:29:43:A4:5F:EA:49:FE:C8:A3:99:0F:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138312e33362e302f32332d3233203d3e20323639353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.36.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:26:e2:37:3f:c3:05:2d:3b:c4:0a:8e:84:ec:71:3e:51:93:
         f7:76:b4:bf:46:ea:30:3e:e5:80:37:ef:98:6d:c7:e8:5b:4c:
         c8:d1:7e:4d:1d:1c:dd:ae:b9:62:b1:3a:91:b3:ad:c2:9e:d3:
         5d:ce:1b:44:9b:24:99:ee:81:0b:d1:4e:c4:a3:05:c1:25:c1:
         f3:21:3e:5b:1e:2c:30:24:f1:3c:3e:4e:6b:93:03:24:6e:9a:
         f6:26:61:fb:df:19:8c:1a:ce:84:0e:e2:d8:f1:02:4c:30:8d:
         c4:1e:40:79:f3:78:e9:21:a4:6c:83:88:4e:3d:03:0d:e7:50:
         f4:e9:48:44:f5:2f:f0:4e:bd:63:4f:b6:e0:b8:75:e6:bc:97:
         80:c9:c2:5f:c5:24:1e:d7:ca:98:8f:d3:3f:ea:11:4f:52:4e:
         67:9c:1e:25:45:de:fd:b8:ce:0d:3e:a0:99:56:71:1a:70:39:
         59:11:83:da:48:1f:7c:07:57:05:fe:6a:7a:e6:80:32:f6:02:
         0a:b7:f4:d3:4c:4b:e9:47:0f:dd:cd:69:c1:31:52:4c:c0:1f:
         c7:6b:86:51:77:5d:18:e5:8d:0c:07:ed:e3:7e:e3:f3:1e:4b:
         0e:a8:d3:7f:fe:9f:8e:bd:99:82:fc:22:77:f3:67:a4:72:3b:
         22:38:47:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----