Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138392e3137362e302f32332d3233203d3e20323639353937.roa
File:                     34352e3138392e3137362e302f32332d3233203d3e20323639353937.roa (raw, json)
Hash identifier:          Y8hChOFRJvyLvNLlXnveK4E3oUMMb2TSTWZDC5ndoe0=
Subject key identifier:   A0:B1:EE:15:38:8B:36:60:AE:6A:9C:7E:13:26:44:91:21:ED:85:66
Certificate issuer:       /CN=11F4865823D65C7C2943A45FEA49FEC8A3990F5A
Certificate serial:       56315FCBC9B234E1A95D603F0EF9A50FF233EA96
Authority key identifier: 11:F4:86:58:23:D6:5C:7C:29:43:A4:5F:EA:49:FE:C8:A3:99:0F:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138392e3137362e302f32332d3233203d3e20323639353937.roa
Signing time:             Thu 09 Jul 2026 19:41:08 +0000
ROA not before:           Thu 09 Jul 2026 19:36:08 +0000
ROA not after:            Thu 08 Jul 2027 19:41:08 +0000
asID:                     269597
IP address blocks:        45.189.176.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:31:5f:cb:c9:b2:34:e1:a9:5d:60:3f:0e:f9:a5:0f:f2:33:ea:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11F4865823D65C7C2943A45FEA49FEC8A3990F5A
        Validity
            Not Before: Jul  9 19:36:08 2026 GMT
            Not After : Jul  8 19:41:08 2027 GMT
        Subject: CN=A0B1EE15388B3660AE6A9C7E1326449121ED8566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ce:d0:48:f7:b7:28:c7:86:97:fc:b0:1e:a9:
                    96:db:b2:b5:88:ec:e1:80:d2:e5:d5:35:07:dc:62:
                    3a:14:a4:6a:a5:de:31:8a:bc:53:ec:49:1f:9b:ff:
                    83:d7:65:a9:2d:14:ca:3f:08:0c:99:b5:57:f4:7d:
                    57:6e:9b:82:2e:2a:77:79:58:8e:c8:14:3a:17:3f:
                    14:35:31:bf:8a:6e:15:25:a7:ea:fb:4b:90:de:a0:
                    a9:bd:2a:ce:13:f9:3d:13:3f:43:83:1a:83:ca:da:
                    93:7a:f5:6a:ba:3b:26:6d:77:73:bd:28:20:cc:78:
                    93:bb:6f:d8:7f:38:3d:8a:0f:ce:66:fe:1f:70:a2:
                    f3:6f:9a:d8:c4:4a:e8:6f:7e:90:52:3a:cb:1c:93:
                    72:2f:ec:49:48:16:da:d6:7b:50:6b:8d:bc:65:81:
                    f6:54:7b:20:3f:44:5e:87:2e:6f:8c:05:4d:fd:f4:
                    15:c9:16:71:76:28:b4:67:a0:3c:bb:59:b1:e1:91:
                    b9:23:a4:40:d4:36:73:9e:80:cb:9c:d7:f4:7c:00:
                    9a:b4:7c:35:48:07:3c:3a:55:28:4a:35:23:59:00:
                    66:17:05:f2:d4:36:b9:85:b4:40:85:3a:19:38:52:
                    d7:ee:e3:a6:65:e3:86:10:cd:22:9a:32:68:7b:55:
                    1c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:B1:EE:15:38:8B:36:60:AE:6A:9C:7E:13:26:44:91:21:ED:85:66
            X509v3 Authority Key Identifier:
                keyid:11:F4:86:58:23:D6:5C:7C:29:43:A4:5F:EA:49:FE:C8:A3:99:0F:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138392e3137362e302f32332d3233203d3e20323639353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:c6:99:03:92:36:b8:c0:5c:25:29:14:79:a3:ce:2e:ef:b9:
         61:95:57:69:f5:dc:f2:54:fc:34:3d:0d:e9:5e:f1:b5:da:7b:
         fb:08:14:80:be:81:a8:0e:a8:48:0a:0c:d7:8e:6f:cd:26:d1:
         7c:b4:ca:a8:c8:d8:22:35:96:0c:e2:56:8a:d1:21:e0:c2:94:
         7d:67:5b:f5:b0:0f:c1:19:be:02:23:a2:cd:de:91:1b:ea:98:
         2c:45:41:13:7d:79:77:cb:83:8c:1c:53:fd:9c:e9:0c:6b:51:
         fc:a3:b7:10:55:4b:33:79:72:bc:f5:78:25:7c:5d:a8:6e:9b:
         ed:18:ea:db:30:8d:53:5f:fa:25:09:30:75:88:e4:15:64:8c:
         5c:6c:b4:30:9d:20:1c:85:4f:1e:6b:d3:78:e7:aa:53:73:ec:
         2a:0a:5b:95:56:65:54:97:07:6d:b6:5f:a5:91:25:52:70:48:
         bb:b5:ab:cc:eb:9c:cd:4a:77:d0:d9:69:0b:38:91:7c:e4:eb:
         d5:da:a0:a1:2e:18:4c:5d:ca:4c:1f:02:d0:ff:24:d8:82:b2:
         67:61:80:be:61:be:e1:3d:9c:19:89:ff:20:ec:bc:dd:0f:55:
         6a:b5:ac:f6:bd:e8:39:f9:96:86:a8:8f:76:10:82:ac:db:be:
         68:44:24:97
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUVjFfy8myNOGpXWA/DvmlD/Iz6pYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFGNDg2NTgyM0Q2NUM3QzI5NDNBNDVGRUE0OUZFQzhB
Mzk5MEY1QTAeFw0yNjA3MDkxOTM2MDhaFw0yNzA3MDgxOTQxMDhaMDMxMTAvBgNV
BAMTKEEwQjFFRTE1Mzg4QjM2NjBBRTZBOUM3RTEzMjY0NDkxMjFFRDg1NjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBztBI97cox4aX/LAeqZbbsrWI
7OGA0uXVNQfcYjoUpGql3jGKvFPsSR+b/4PXZaktFMo/CAyZtVf0fVdum4IuKnd5
WI7IFDoXPxQ1Mb+KbhUlp+r7S5DeoKm9Ks4T+T0TP0ODGoPK2pN69Wq6OyZtd3O9
KCDMeJO7b9h/OD2KD85m/h9wovNvmtjESuhvfpBSOssck3Iv7ElIFtrWe1Brjbxl
gfZUeyA/RF6HLm+MBU399BXJFnF2KLRnoDy7WbHhkbkjpEDUNnOegMuc1/R8AJq0
fDVIBzw6VShKNSNZAGYXBfLUNrmFtECFOhk4Utfu46Zl44YQzSKaMmh7VRwNAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUoLHuFTiLNmCuapx+EyZEkSHthWYwHwYDVR0j
BBgwFoAUEfSGWCPWXHwpQ6Rf6kn+yKOZD1owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1pSUXVhY0E1c3B2c3JIMXpDUEhjVU1xejdMbzE2VlVzYXVpMUJTeFJ3
OHEvMC8xMUY0ODY1ODIzRDY1QzdDMjk0M0E0NUZFQTQ5RkVDOEEzOTkwRjVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzExRjQ4NjU4MjNENjVDN0My
OTQzQTQ1RkVBNDlGRUM4QTM5OTBGNUEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0daUlF1YWNBNXNwdnNySDF6Q1BIY1VNcXo3TG8xNlZVc2F1aTFCU3hSdzhxLzAv
MzQzNTJlMzEzODM5MmUzMTM3MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjM2
MzkzNTM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAEtvbAwDQYJKoZIhvcNAQELBQADggEBAKLGmQOS
NrjAXCUpFHmjzi7vuWGVV2n13PJU/DQ9Dele8bXae/sIFIC+gagOqEgKDNeOb80m
0Xy0yqjI2CI1lgziVorRIeDClH1nW/WwD8EZvgIjos3ekRvqmCxFQRN9eXfLg4wc
U/2c6QxrUfyjtxBVSzN5crz1eCV8Xahum+0Y6tswjVNf+iUJMHWI5BVkjFxstDCd
IByFTx5r03jnqlNz7CoKW5VWZVSXB222X6WRJVJwSLu1q8zrnM1Kd9DZaQs4kXzk
69XaoKEuGExdykwfAtD/JNiCsmdhgL5hvuE9nBmJ/yDsvN0PVWq1rPa96Dn5loao
j3YQgqzbvmhEJJc=
-----END CERTIFICATE-----