Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138312e33362e302f32342d3234203d3e20323639353937.roa
File:                     34352e3138312e33362e302f32342d3234203d3e20323639353937.roa (raw, json)
Hash identifier:          nMHOvl18wZ6r916vekuAdrva9Vzyl73EBUIBYY4VEy8=
Subject key identifier:   03:46:A3:E2:E4:E1:67:A7:8F:DC:90:73:37:4B:51:4D:73:29:2F:29
Certificate issuer:       /CN=11F4865823D65C7C2943A45FEA49FEC8A3990F5A
Certificate serial:       38BE252FCAD85C9297F5561EBA7C7A7A4705D069
Authority key identifier: 11:F4:86:58:23:D6:5C:7C:29:43:A4:5F:EA:49:FE:C8:A3:99:0F:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138312e33362e302f32342d3234203d3e20323639353937.roa
Signing time:             Thu 09 Jul 2026 19:41:07 +0000
ROA not before:           Thu 09 Jul 2026 19:36:07 +0000
ROA not after:            Thu 08 Jul 2027 19:41:07 +0000
asID:                     269597
IP address blocks:        45.181.36.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:be:25:2f:ca:d8:5c:92:97:f5:56:1e:ba:7c:7a:7a:47:05:d0:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11F4865823D65C7C2943A45FEA49FEC8A3990F5A
        Validity
            Not Before: Jul  9 19:36:07 2026 GMT
            Not After : Jul  8 19:41:07 2027 GMT
        Subject: CN=0346A3E2E4E167A78FDC9073374B514D73292F29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:31:7f:15:f4:f9:65:8c:5d:d9:53:0f:65:92:
                    22:48:d5:99:c4:bf:f0:e7:fc:5c:62:2f:d0:8a:15:
                    73:a6:55:50:fd:7e:6f:43:6d:15:c4:79:cc:5b:56:
                    1e:20:d9:52:44:c2:8d:33:6f:3c:6b:c0:8b:5f:d9:
                    64:66:77:de:fe:45:af:f5:23:e9:5c:64:03:28:43:
                    1c:6e:4a:48:55:7c:e7:b3:49:be:78:c3:83:33:4f:
                    76:ae:3a:49:a4:bb:a4:da:9e:66:61:4a:a6:69:a7:
                    d4:1e:aa:34:6b:f9:4c:8f:da:56:32:07:86:c7:a9:
                    12:c1:6f:6e:db:29:ca:3b:91:ae:3c:41:f9:93:bf:
                    47:1f:b2:e7:c1:1d:68:86:14:ea:32:57:53:93:7a:
                    8c:af:18:cd:a6:0b:15:52:3d:4f:2f:76:8d:91:ce:
                    48:c0:f7:c5:9b:77:44:01:5a:8c:32:e6:0f:79:97:
                    2c:31:7a:fb:a9:f0:3f:89:5c:30:a7:34:f5:f6:2c:
                    8d:86:38:a8:97:cb:c1:c4:59:b8:56:b5:a4:90:a7:
                    f4:6f:af:00:24:6d:16:d8:16:49:0a:46:27:fc:e5:
                    f1:0f:45:11:fe:0b:12:67:6b:ff:e3:fa:20:82:ba:
                    38:1a:a3:ee:53:1f:9b:ec:8e:0d:e4:16:66:15:d6:
                    22:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:46:A3:E2:E4:E1:67:A7:8F:DC:90:73:37:4B:51:4D:73:29:2F:29
            X509v3 Authority Key Identifier:
                keyid:11:F4:86:58:23:D6:5C:7C:29:43:A4:5F:EA:49:FE:C8:A3:99:0F:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138312e33362e302f32342d3234203d3e20323639353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:3b:25:ad:a6:5d:e8:bb:89:85:98:bc:f4:93:4f:74:78:e1:
         4d:76:39:c1:16:f0:7e:e7:ac:82:1c:7d:78:f0:b9:0d:44:54:
         ba:09:3e:bd:4f:47:e9:94:3b:6a:b9:9e:ce:02:b3:df:b5:5e:
         23:90:7a:b3:52:c2:3f:3f:f3:ad:98:70:e1:a8:48:96:02:e6:
         39:3f:da:03:c9:9f:70:3d:46:c5:0e:c7:79:83:f7:48:b0:4c:
         14:7e:d5:5c:2f:cc:f2:01:d0:7a:56:48:3d:c2:98:d9:08:16:
         c9:b0:15:f2:8b:1b:87:df:44:7b:62:0c:3b:24:37:70:cf:65:
         76:57:8d:f2:cc:a9:62:1c:b1:08:f9:7b:14:e0:70:45:ef:af:
         3f:65:0a:a0:1e:03:6c:fd:cc:42:c2:2d:cf:5f:37:03:e2:5f:
         10:23:5a:6d:f0:d4:d5:df:ca:e7:79:18:ae:00:46:54:82:a7:
         cd:d9:13:c5:66:57:2a:70:64:67:37:a8:40:91:fe:6b:ad:ec:
         43:04:77:91:1c:68:43:a1:bd:9d:6a:8a:b1:4f:91:5c:e7:e6:
         29:b7:ae:34:4b:ad:19:e8:ac:98:45:b2:a3:b5:92:e2:f8:00:
         0c:3d:07:dc:43:77:7e:1f:5f:08:59:4e:18:88:5e:0f:5b:f6:
         7c:7a:41:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----