Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138312e33382e302f32332d3233203d3e20323639353937.roa
File:                     34352e3138312e33382e302f32332d3233203d3e20323639353937.roa (raw, json)
Hash identifier:          yEVpPN0DDiUGW02A/uVuIWgfbuUOFBFbLwssUVYe6hg=
Subject key identifier:   FD:FE:3A:D4:7E:74:29:1D:76:EC:EA:88:F8:B9:8C:82:BA:4D:AA:65
Certificate issuer:       /CN=11F4865823D65C7C2943A45FEA49FEC8A3990F5A
Certificate serial:       025B601D5501C3943D295F503C66B2E2A1943064
Authority key identifier: 11:F4:86:58:23:D6:5C:7C:29:43:A4:5F:EA:49:FE:C8:A3:99:0F:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138312e33382e302f32332d3233203d3e20323639353937.roa
Signing time:             Thu 09 Jul 2026 19:41:07 +0000
ROA not before:           Thu 09 Jul 2026 19:36:07 +0000
ROA not after:            Thu 08 Jul 2027 19:41:07 +0000
asID:                     269597
IP address blocks:        45.181.38.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:5b:60:1d:55:01:c3:94:3d:29:5f:50:3c:66:b2:e2:a1:94:30:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11F4865823D65C7C2943A45FEA49FEC8A3990F5A
        Validity
            Not Before: Jul  9 19:36:07 2026 GMT
            Not After : Jul  8 19:41:07 2027 GMT
        Subject: CN=FDFE3AD47E74291D76ECEA88F8B98C82BA4DAA65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0c:78:81:e8:6e:8b:af:b7:ce:42:bf:13:07:
                    7a:bf:5a:c5:24:38:d6:d4:d2:eb:09:1a:41:ce:84:
                    5a:9e:4d:91:5e:7f:f8:f4:ac:be:30:37:5d:3e:f9:
                    7b:45:18:e3:a0:7b:fc:c5:60:c7:29:d9:a4:aa:b4:
                    94:81:b4:6c:1b:2c:76:f5:ea:26:8a:3d:e3:8a:de:
                    ad:a6:0b:bf:08:e4:1e:e6:bb:95:c7:2d:99:f8:2f:
                    86:c4:ef:76:5d:72:da:85:40:49:40:c7:6a:cd:40:
                    8c:0b:98:d8:ce:2a:00:4d:ac:b3:f4:9a:88:96:49:
                    82:28:2b:68:e8:57:0d:b3:3d:87:ae:85:cf:80:1f:
                    89:5c:4d:ce:1a:76:2d:a2:4f:02:de:48:ed:ea:8b:
                    ab:ea:e3:88:62:1e:6a:4c:8a:08:bb:eb:f9:a4:34:
                    6e:d0:d5:b7:97:c9:96:61:b7:57:e9:02:9d:76:83:
                    30:a3:5c:0a:bd:cb:3a:32:c6:f3:70:7a:11:57:e6:
                    e9:1c:fc:c7:aa:60:12:16:26:4a:14:d3:b1:9a:1f:
                    6d:41:6d:a5:22:6b:e8:c8:64:48:9c:5f:42:05:1c:
                    7e:41:7b:dd:8e:71:9a:15:ca:ab:ed:62:8e:c1:d7:
                    f3:a2:39:2e:0d:0c:45:39:e3:b1:3d:eb:ec:dc:08:
                    0e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:FE:3A:D4:7E:74:29:1D:76:EC:EA:88:F8:B9:8C:82:BA:4D:AA:65
            X509v3 Authority Key Identifier:
                keyid:11:F4:86:58:23:D6:5C:7C:29:43:A4:5F:EA:49:FE:C8:A3:99:0F:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138312e33382e302f32332d3233203d3e20323639353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:89:79:36:31:e9:d0:61:c6:fb:ec:44:20:cb:dd:a0:00:ba:
         bd:79:54:c7:17:48:18:9f:90:10:9d:b8:f7:d7:d6:df:7b:5c:
         3f:70:05:9d:82:11:d2:1c:51:ab:31:18:c9:79:03:e0:c4:b9:
         05:00:e1:fd:b6:75:00:74:68:3f:81:80:57:e9:c0:c6:1b:61:
         1c:3b:a5:f1:54:b6:51:3a:e3:97:35:08:0b:37:fc:4e:82:de:
         14:1b:42:a9:ee:04:07:c9:ac:68:23:fa:75:64:8a:27:0f:5f:
         af:af:85:7e:4d:ae:84:17:10:22:77:20:3f:e8:d9:fc:8c:76:
         ac:63:2f:d2:ae:95:6f:0f:0e:ca:3d:b8:09:2f:bc:7f:71:bb:
         4c:a7:07:e8:82:05:11:61:fb:9c:4a:40:53:5f:3f:78:67:b4:
         72:84:c7:9f:f8:d1:28:fb:39:86:3f:f4:42:3a:94:e4:c6:44:
         9e:98:ad:58:16:0a:95:0b:18:bc:0d:a0:4f:42:70:21:ff:3c:
         d6:f7:cc:cd:d3:9c:77:ea:49:16:10:d7:53:3e:25:91:1f:89:
         2c:2b:1f:11:47:57:8d:33:4c:99:c3:d6:5b:26:10:01:1c:94:
         e0:4b:18:27:6e:be:57:da:2b:69:d9:51:d0:bb:3a:d8:43:57:
         37:f0:8b:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----