Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138312e33392e302f32342d3234203d3e20323639353937.roa
File:                     34352e3138312e33392e302f32342d3234203d3e20323639353937.roa (raw, json)
Hash identifier:          4wqlJduJqi3a9SIb6nmYVi1rpRnmE3bTkEMbqamxcJI=
Subject key identifier:   F8:4D:2D:2C:59:13:93:75:8D:A9:55:59:D3:8E:93:44:83:D9:6E:34
Certificate issuer:       /CN=11F4865823D65C7C2943A45FEA49FEC8A3990F5A
Certificate serial:       6F0E1408BA9D13504FDBF194D968B81ECA47ECB4
Authority key identifier: 11:F4:86:58:23:D6:5C:7C:29:43:A4:5F:EA:49:FE:C8:A3:99:0F:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138312e33392e302f32342d3234203d3e20323639353937.roa
Signing time:             Thu 09 Jul 2026 19:41:08 +0000
ROA not before:           Thu 09 Jul 2026 19:36:08 +0000
ROA not after:            Thu 08 Jul 2027 19:41:08 +0000
asID:                     269597
IP address blocks:        45.181.39.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:0e:14:08:ba:9d:13:50:4f:db:f1:94:d9:68:b8:1e:ca:47:ec:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11F4865823D65C7C2943A45FEA49FEC8A3990F5A
        Validity
            Not Before: Jul  9 19:36:08 2026 GMT
            Not After : Jul  8 19:41:08 2027 GMT
        Subject: CN=F84D2D2C591393758DA95559D38E934483D96E34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:10:33:bf:bc:c0:83:8e:9a:2c:55:97:94:ae:
                    c2:f0:65:aa:a7:a7:a3:7b:85:60:04:fc:a2:dc:01:
                    e2:27:ed:2a:87:08:31:da:ad:81:6f:75:e7:98:f7:
                    89:3f:0f:6c:33:07:25:32:e1:53:d2:90:ab:a1:db:
                    42:ee:0c:68:14:82:95:93:23:51:89:b4:13:bf:2e:
                    fd:6d:4d:e3:de:4d:3f:81:3d:0b:b3:d4:e8:4c:8f:
                    34:2d:49:6f:73:ef:72:38:a8:a0:e7:e7:f2:80:89:
                    55:91:30:cb:98:1f:61:8d:1c:43:62:15:bc:0c:d2:
                    d6:69:fd:3b:51:5f:8b:1d:dc:3d:22:f7:67:8d:05:
                    84:40:47:86:ab:5e:2d:a1:59:36:00:7b:a5:b4:bb:
                    24:4a:f7:cf:e6:e3:f7:81:4a:72:44:60:89:57:9e:
                    be:d6:49:01:b4:4c:59:4b:2b:34:9a:cc:cc:c5:84:
                    ec:52:65:8a:91:73:8a:1a:41:6c:dd:54:c8:24:a8:
                    26:56:e7:62:e6:83:07:4e:f3:68:ed:34:33:c5:f6:
                    4d:99:7b:3f:ca:3b:bf:ed:4f:c9:86:24:79:4a:59:
                    cf:3c:47:ac:97:48:97:6d:6a:b8:fb:ce:0e:66:b0:
                    d2:f5:b6:d2:dc:d6:75:db:e9:33:aa:a1:26:20:ea:
                    d9:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:4D:2D:2C:59:13:93:75:8D:A9:55:59:D3:8E:93:44:83:D9:6E:34
            X509v3 Authority Key Identifier:
                keyid:11:F4:86:58:23:D6:5C:7C:29:43:A4:5F:EA:49:FE:C8:A3:99:0F:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138312e33392e302f32342d3234203d3e20323639353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.39.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:01:36:e5:68:eb:8e:34:18:95:0a:8c:fd:74:85:a5:4e:d1:
         d1:7a:0d:d0:8f:03:dd:48:2b:3c:3c:55:ac:dc:a0:6e:16:99:
         8e:cf:46:41:1e:02:89:78:d2:2d:9f:6a:53:aa:44:ac:ac:9d:
         29:fd:0b:39:3f:a7:06:4a:27:6e:6b:0f:b3:20:9c:ad:c5:00:
         a6:28:7e:34:63:e1:a8:6a:cd:ac:32:e0:fb:6c:ba:fb:b8:25:
         2a:08:b6:bf:70:5c:c1:3a:a9:11:52:e2:88:24:4b:24:ee:c5:
         1d:7e:fd:e0:09:c0:07:87:f2:86:b1:26:ba:3f:ce:fb:06:6a:
         15:60:c5:ee:67:3b:ec:ac:66:af:ce:b7:50:c8:49:55:01:4b:
         2a:7f:a4:17:78:f9:8b:75:29:db:22:d6:f0:4b:7f:ec:d7:a0:
         c6:30:03:01:9d:84:e6:f4:e3:19:b7:a2:bf:8a:63:89:d5:73:
         cf:c2:62:d7:6f:ca:84:52:10:41:d3:4f:3f:37:a0:b9:42:f2:
         a1:e7:e9:f3:f5:61:c9:b2:79:df:d7:9e:c2:05:2d:a9:04:f0:
         ca:4d:73:28:45:90:ed:55:7f:cb:7c:a9:10:c5:17:43:84:5b:
         0b:a2:30:9d:72:0c:e3:34:cf:34:1f:c6:12:b3:86:68:91:3e:
         5e:fc:f2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----