Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138392e3137362e302f32342d3234203d3e20323639353937.roa
File:                     34352e3138392e3137362e302f32342d3234203d3e20323639353937.roa (raw, json)
Hash identifier:          WSYvmu4n4vSjUgGfFi3d3dU1BuEZAD3tg0rHZokTtpQ=
Subject key identifier:   D4:68:19:77:40:F9:24:46:21:90:1A:09:81:D3:CF:70:2A:6A:3D:7F
Certificate issuer:       /CN=11F4865823D65C7C2943A45FEA49FEC8A3990F5A
Certificate serial:       1A354363243CBE3F98F038D043C336BE7C662C4E
Authority key identifier: 11:F4:86:58:23:D6:5C:7C:29:43:A4:5F:EA:49:FE:C8:A3:99:0F:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138392e3137362e302f32342d3234203d3e20323639353937.roa
Signing time:             Thu 09 Jul 2026 19:41:08 +0000
ROA not before:           Thu 09 Jul 2026 19:36:08 +0000
ROA not after:            Thu 08 Jul 2027 19:41:08 +0000
asID:                     269597
IP address blocks:        45.189.176.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:35:43:63:24:3c:be:3f:98:f0:38:d0:43:c3:36:be:7c:66:2c:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11F4865823D65C7C2943A45FEA49FEC8A3990F5A
        Validity
            Not Before: Jul  9 19:36:08 2026 GMT
            Not After : Jul  8 19:41:08 2027 GMT
        Subject: CN=D468197740F9244621901A0981D3CF702A6A3D7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:c8:44:db:14:e9:7a:20:30:4e:f6:2f:fa:96:
                    b2:f4:55:a7:91:2b:f0:b6:32:be:86:13:20:30:39:
                    c7:57:71:95:e7:11:ce:74:e1:5c:5f:ae:6f:a2:22:
                    51:54:29:55:dd:3e:1f:1b:c7:7b:8d:30:e6:10:77:
                    d4:59:3e:ca:24:94:57:14:02:6d:d5:5b:dd:37:c2:
                    75:d4:f9:25:7b:6d:a9:f8:27:7e:98:a3:8d:16:9f:
                    c7:ca:36:50:ae:1b:a7:7a:42:56:92:b3:7a:c0:f0:
                    95:97:89:13:ae:21:e2:74:11:51:93:d8:99:d7:27:
                    26:ee:35:d7:85:be:e6:5e:aa:99:74:33:c9:ad:a8:
                    49:1f:a0:a8:93:e9:ff:cb:cd:c1:0f:25:db:d9:0e:
                    69:7c:03:79:5b:87:0a:d9:68:29:9c:73:7f:f8:d5:
                    bb:26:77:f7:64:9d:d3:e8:44:74:81:4e:2e:aa:6c:
                    19:99:e2:ab:88:01:07:d0:fc:ce:a6:00:11:5c:d4:
                    72:ca:31:15:06:88:7e:1b:06:3a:e9:29:6f:d5:ef:
                    ba:d2:58:69:45:1e:93:ca:34:a3:aa:b8:b3:27:ab:
                    22:e3:2c:1b:60:74:af:e2:f4:63:5c:4d:15:96:14:
                    44:46:2d:77:19:cb:f8:df:00:4f:fd:9f:6e:85:8d:
                    d4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:68:19:77:40:F9:24:46:21:90:1A:09:81:D3:CF:70:2A:6A:3D:7F
            X509v3 Authority Key Identifier:
                keyid:11:F4:86:58:23:D6:5C:7C:29:43:A4:5F:EA:49:FE:C8:A3:99:0F:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138392e3137362e302f32342d3234203d3e20323639353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.176.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:9f:66:57:74:e0:04:63:93:f7:f6:49:54:4c:14:11:cc:b3:
         90:4f:be:ab:8c:22:c5:a9:16:75:18:a6:b0:33:76:a8:01:13:
         07:ea:d1:78:cc:2b:5b:d6:49:03:14:48:14:99:9f:3a:6b:f6:
         79:1a:ac:fb:ab:41:25:14:88:9f:b9:e9:61:44:04:98:fc:f8:
         93:2d:61:76:7b:f3:38:6f:c9:6b:3d:3b:b9:33:c1:1c:82:18:
         ab:f8:ff:11:5d:68:43:7f:45:78:93:07:b4:ad:38:a0:12:b4:
         70:dd:30:cf:2f:5a:e3:ef:6a:57:94:c8:40:31:b8:cb:88:03:
         50:35:62:d0:03:c0:9d:5f:d0:eb:ef:2d:78:08:18:72:54:e0:
         89:d3:cf:7e:57:00:31:62:09:61:04:df:8d:92:73:9f:e3:89:
         58:95:04:a5:86:7c:e8:f6:df:bb:1d:30:fe:e0:d3:3f:52:c9:
         a3:13:f2:9a:68:be:f9:63:e9:21:21:2d:63:46:6d:12:20:00:
         ee:0d:90:5e:31:27:a5:1b:78:67:4d:ca:ce:6e:98:8e:cc:83:
         ca:56:5a:2c:8a:b7:9b:08:21:a0:f7:ff:58:f5:dc:67:00:28:
         5d:22:dc:26:b7:c3:9b:4e:06:fe:f9:13:ef:9b:04:74:bf:84:
         11:4a:1f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----