Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138392e3137362e302f32322d3232203d3e20323639353937.roa
File:                     34352e3138392e3137362e302f32322d3232203d3e20323639353937.roa (raw, json)
Hash identifier:          wFhJDAdbFiyyLruasUXcoaLVixgjG+qGABqLIbokQog=
Subject key identifier:   6C:51:AB:46:2A:EE:F3:AF:46:97:F2:22:E0:B8:F3:79:F3:F5:BC:D4
Certificate issuer:       /CN=11F4865823D65C7C2943A45FEA49FEC8A3990F5A
Certificate serial:       5ED0ED990248084A365F1AC6867B1CF5147105DD
Authority key identifier: 11:F4:86:58:23:D6:5C:7C:29:43:A4:5F:EA:49:FE:C8:A3:99:0F:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138392e3137362e302f32322d3232203d3e20323639353937.roa
Signing time:             Thu 09 Jul 2026 19:41:08 +0000
ROA not before:           Thu 09 Jul 2026 19:36:08 +0000
ROA not after:            Thu 08 Jul 2027 19:41:08 +0000
asID:                     269597
IP address blocks:        45.189.176.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:d0:ed:99:02:48:08:4a:36:5f:1a:c6:86:7b:1c:f5:14:71:05:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11F4865823D65C7C2943A45FEA49FEC8A3990F5A
        Validity
            Not Before: Jul  9 19:36:08 2026 GMT
            Not After : Jul  8 19:41:08 2027 GMT
        Subject: CN=6C51AB462AEEF3AF4697F222E0B8F379F3F5BCD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ac:db:83:31:ff:8e:6b:85:f3:5b:b9:92:36:
                    97:4a:58:03:05:0c:29:1a:a0:c5:af:89:34:34:a4:
                    b9:f9:a6:45:53:ff:19:80:fd:41:9e:3d:6f:25:5b:
                    2b:8f:4d:20:de:36:5d:5b:c6:f3:81:20:2c:9d:37:
                    52:8b:80:4e:7f:6b:00:2c:ab:66:15:ed:48:c9:be:
                    75:f6:6a:ac:15:d0:b5:aa:d2:15:8e:45:89:79:84:
                    ff:ab:d2:c4:d9:eb:95:6f:d2:5d:49:72:f5:e7:71:
                    4d:4b:87:e6:20:ab:b4:0d:6a:68:1e:69:c7:79:22:
                    ce:34:84:07:6e:15:9f:a8:d7:56:3e:9b:fd:67:c5:
                    47:12:af:96:b0:ac:0c:a8:b0:cc:ab:4a:f9:59:1b:
                    94:05:31:38:03:42:bc:2d:12:a5:c4:42:1d:ea:b8:
                    33:89:1d:2b:f7:7e:bc:40:e0:2f:28:39:6c:cd:bd:
                    c9:20:79:3d:51:fa:c9:e9:f1:12:22:dc:6e:f3:c9:
                    40:6d:a2:3c:d0:db:6e:87:99:21:36:4b:7e:e0:d7:
                    60:c4:f1:5e:de:96:24:32:72:6d:c5:89:a7:4f:0a:
                    8b:70:78:64:c5:a0:10:fe:45:a3:ab:a7:f7:9d:95:
                    8b:d8:f4:36:04:81:1c:a1:c6:2f:c5:ec:7b:1d:f8:
                    b1:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:51:AB:46:2A:EE:F3:AF:46:97:F2:22:E0:B8:F3:79:F3:F5:BC:D4
            X509v3 Authority Key Identifier:
                keyid:11:F4:86:58:23:D6:5C:7C:29:43:A4:5F:EA:49:FE:C8:A3:99:0F:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138392e3137362e302f32322d3232203d3e20323639353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:20:06:1a:64:a1:04:47:f0:ce:f0:97:3c:70:07:32:55:9a:
         e8:dd:46:17:96:bd:52:98:2b:8e:11:66:1e:24:f2:c9:ba:5d:
         15:00:0c:bf:d8:d6:f2:0a:fb:0c:ef:42:58:6f:4d:41:44:3a:
         98:fc:66:08:2a:c6:e7:c3:75:2d:fc:3e:eb:0e:9b:ab:a8:bb:
         90:18:d7:c0:fb:a2:8e:b1:66:38:c6:83:83:62:be:f1:16:79:
         b1:c5:9b:16:db:c4:29:f4:52:50:49:e2:cc:00:d6:22:a6:4b:
         a0:c6:07:6d:a1:09:3a:33:1f:c9:ef:ec:ae:6a:2a:10:7e:70:
         67:46:9d:a1:dd:40:3e:77:2e:62:b1:4a:03:41:05:a7:04:d4:
         7a:84:03:40:44:18:33:33:f7:b5:0d:94:e3:9b:07:47:77:0d:
         99:c7:44:ce:80:e4:64:9d:04:d5:f8:46:5f:38:1f:df:37:1e:
         e8:22:dc:7e:4f:c6:4a:0c:54:df:0c:b8:47:5e:76:44:38:62:
         d1:da:82:8d:02:a0:29:9a:aa:c1:2c:ae:58:e0:68:38:62:29:
         6f:23:df:bc:80:58:86:68:e8:b2:b9:7b:86:d9:50:38:2b:d6:
         01:5f:72:05:be:71:0d:7c:c5:fe:79:b2:fe:fc:af:6f:cb:6a:
         ed:18:ce:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----