Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138312e33372e302f32342d3234203d3e20323639353937.roa
File:                     34352e3138312e33372e302f32342d3234203d3e20323639353937.roa (raw, json)
Hash identifier:          82IHlAAflPIoDnr0INFTGQI5AhxfhM/yN5SsxKOtAh8=
Subject key identifier:   10:82:BA:05:EB:49:E0:B2:33:2B:2B:39:DE:64:09:C3:13:0A:B6:80
Certificate issuer:       /CN=11F4865823D65C7C2943A45FEA49FEC8A3990F5A
Certificate serial:       5ACF974E28CD02FE208ADE34DCFBA804F7534AF5
Authority key identifier: 11:F4:86:58:23:D6:5C:7C:29:43:A4:5F:EA:49:FE:C8:A3:99:0F:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138312e33372e302f32342d3234203d3e20323639353937.roa
Signing time:             Thu 09 Jul 2026 19:41:08 +0000
ROA not before:           Thu 09 Jul 2026 19:36:08 +0000
ROA not after:            Thu 08 Jul 2027 19:41:08 +0000
asID:                     269597
IP address blocks:        45.181.37.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:cf:97:4e:28:cd:02:fe:20:8a:de:34:dc:fb:a8:04:f7:53:4a:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11F4865823D65C7C2943A45FEA49FEC8A3990F5A
        Validity
            Not Before: Jul  9 19:36:08 2026 GMT
            Not After : Jul  8 19:41:08 2027 GMT
        Subject: CN=1082BA05EB49E0B2332B2B39DE6409C3130AB680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6d:23:9d:cf:f5:41:81:34:99:d7:77:af:6e:
                    ba:a5:9b:57:89:d9:63:c6:01:f6:16:72:6e:9c:28:
                    9a:81:65:33:cc:6c:6b:19:f6:1c:5e:4f:fb:81:88:
                    02:f1:83:75:8c:4b:b5:fd:21:e6:e9:6d:0a:17:a2:
                    12:d8:2a:9c:f2:9a:f5:d6:41:9b:66:5d:8c:fa:b1:
                    7a:00:6a:27:3c:22:bb:66:1c:08:76:42:09:75:af:
                    96:7a:42:83:b5:72:23:93:a7:51:58:30:0a:01:7a:
                    4b:24:dc:45:10:06:48:b9:45:2b:a6:98:2c:6a:df:
                    20:1b:8a:cd:da:3d:e6:6d:e0:d7:7d:de:b4:d8:62:
                    eb:f3:f7:0b:04:57:33:6b:74:4b:ef:cb:d9:19:86:
                    6a:a4:16:62:e5:4a:4a:55:ff:6c:da:8d:02:41:2a:
                    ce:c9:e6:e4:b0:8d:00:8c:48:1e:47:cd:26:5b:a0:
                    d8:12:18:fe:7c:a5:a1:95:f8:cc:20:92:07:4c:72:
                    f8:c0:bb:2a:ed:14:9f:54:a3:42:be:b1:62:7e:4f:
                    29:28:b9:52:51:c9:62:f4:a0:20:55:51:f9:46:c5:
                    0b:c6:d8:cd:27:ef:2d:a7:85:c4:a5:75:ee:48:24:
                    34:cd:fc:5b:9f:fe:98:32:71:f8:ab:e5:4e:8a:d1:
                    f6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:82:BA:05:EB:49:E0:B2:33:2B:2B:39:DE:64:09:C3:13:0A:B6:80
            X509v3 Authority Key Identifier:
                keyid:11:F4:86:58:23:D6:5C:7C:29:43:A4:5F:EA:49:FE:C8:A3:99:0F:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138312e33372e302f32342d3234203d3e20323639353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:73:e5:a6:2f:e8:38:fd:52:44:de:4e:46:d2:67:c6:e9:3b:
         e1:66:be:1a:21:49:73:28:39:f5:3b:9f:ea:47:f2:aa:bc:ea:
         28:1d:1d:c3:f1:9c:d6:33:dc:ba:db:21:62:79:4b:44:6f:51:
         cd:ce:78:de:50:d1:6f:d5:cb:61:f4:7a:f4:47:27:07:bd:0b:
         a7:bf:3b:e5:1a:87:8d:85:8a:a9:a5:37:8b:90:6b:85:04:2f:
         3e:4b:e8:bb:e4:fa:db:5e:79:c9:82:3d:9f:f2:54:64:34:68:
         b4:0d:25:06:fb:a9:f1:d8:7f:eb:01:a6:7e:95:a1:6a:e3:16:
         48:aa:f5:0b:fb:7e:d7:89:79:86:af:9e:16:55:07:35:90:54:
         b6:9f:a8:4a:0d:96:d6:03:47:60:10:06:da:14:2e:f1:c3:39:
         08:bf:bf:fe:10:1d:23:5a:28:25:92:be:08:aa:1c:c8:54:a6:
         b0:95:9f:0b:1e:87:aa:79:67:4a:a9:53:5d:01:c9:e3:52:58:
         85:fa:14:0b:59:69:b0:c8:74:ee:53:fe:b4:3c:3f:5e:c1:c9:
         5c:4e:e0:32:16:39:f6:6c:37:ee:f0:0f:b3:6b:76:cd:cd:9c:
         e0:64:b6:22:46:69:91:b6:57:d3:e8:e7:2d:39:35:c6:c7:49:
         0d:32:3e:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----