Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138392e3137382e302f32332d3233203d3e20323639353937.roa
File:                     34352e3138392e3137382e302f32332d3233203d3e20323639353937.roa (raw, json)
Hash identifier:          jNmbkBshQnxve1svV9ywiqiFwNUECEJGUdcemOmXUMU=
Subject key identifier:   7B:08:BC:8D:14:23:ED:DF:18:A3:77:8F:C3:61:98:71:E5:D9:B7:EB
Certificate issuer:       /CN=11F4865823D65C7C2943A45FEA49FEC8A3990F5A
Certificate serial:       72F3EB6762180D79CB14FB4C4C608A990D0583BF
Authority key identifier: 11:F4:86:58:23:D6:5C:7C:29:43:A4:5F:EA:49:FE:C8:A3:99:0F:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138392e3137382e302f32332d3233203d3e20323639353937.roa
Signing time:             Thu 09 Jul 2026 19:41:07 +0000
ROA not before:           Thu 09 Jul 2026 19:36:07 +0000
ROA not after:            Thu 08 Jul 2027 19:41:07 +0000
asID:                     269597
IP address blocks:        45.189.178.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:f3:eb:67:62:18:0d:79:cb:14:fb:4c:4c:60:8a:99:0d:05:83:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11F4865823D65C7C2943A45FEA49FEC8A3990F5A
        Validity
            Not Before: Jul  9 19:36:07 2026 GMT
            Not After : Jul  8 19:41:07 2027 GMT
        Subject: CN=7B08BC8D1423EDDF18A3778FC3619871E5D9B7EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b3:98:29:f4:25:67:ea:42:68:7e:97:be:03:
                    8b:2c:8a:a5:2f:9e:ce:65:db:b2:6c:f4:62:e3:2c:
                    3e:f1:9d:f3:35:75:0a:4b:13:68:6e:7f:73:9c:5e:
                    e9:08:02:19:94:84:93:6a:db:02:4b:ba:39:8c:24:
                    c6:7c:53:d0:be:00:c4:20:c0:16:81:e6:be:3e:60:
                    05:26:fc:dc:4a:67:54:80:48:a2:37:1d:73:b5:0d:
                    6c:56:5f:a9:0c:59:3f:98:09:ab:26:28:87:f4:3e:
                    ba:cf:33:e4:b0:d2:d5:ea:36:fc:77:5d:41:23:f7:
                    a7:01:a2:70:87:c9:94:74:b4:bb:ec:2e:f2:41:29:
                    2c:10:a8:08:73:c7:43:35:01:bd:85:f1:90:b8:96:
                    26:94:89:1c:5d:5d:14:63:4a:96:7a:e2:bc:15:f5:
                    50:f5:29:a0:b4:5a:a9:6b:48:5a:50:68:a5:df:20:
                    d4:79:80:e3:27:6b:3f:91:b0:26:8d:70:4c:14:24:
                    1c:12:ec:8e:bd:7f:7c:3d:0c:fa:ae:43:df:25:b4:
                    b5:82:38:24:d9:d4:64:6b:c1:ec:64:09:3f:d0:a9:
                    a6:89:99:dd:ee:fb:c0:f7:ad:93:dc:bc:0c:c0:36:
                    aa:9a:29:4f:7e:27:b2:92:f1:28:76:43:51:13:81:
                    8d:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:08:BC:8D:14:23:ED:DF:18:A3:77:8F:C3:61:98:71:E5:D9:B7:EB
            X509v3 Authority Key Identifier:
                keyid:11:F4:86:58:23:D6:5C:7C:29:43:A4:5F:EA:49:FE:C8:A3:99:0F:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138392e3137382e302f32332d3233203d3e20323639353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:2e:1d:a1:7a:4d:cf:f2:51:8d:12:61:f9:c5:a8:9a:cc:e3:
         c9:55:2e:17:71:54:55:b8:46:1c:77:04:85:11:e9:64:f2:bd:
         63:5c:3c:2b:ed:a5:3b:97:63:fb:1c:ef:83:f5:8f:6a:a2:ec:
         be:79:0e:16:cc:b0:30:44:73:93:47:ff:bc:91:53:37:86:f4:
         60:b1:e1:b2:1e:39:b9:93:31:e5:61:99:8f:78:56:4b:f4:b3:
         d7:ef:04:f9:f0:c3:36:f4:9b:09:8c:7d:18:3f:9e:3e:17:1f:
         1d:f4:df:e7:de:ac:01:15:78:57:60:b9:67:81:e0:5f:60:a3:
         c7:88:52:75:43:15:9c:c9:67:7d:3a:8d:56:ff:c4:81:4f:8d:
         28:49:fb:9b:30:d2:25:9d:39:76:bc:8d:32:8d:28:93:32:73:
         28:14:ce:93:20:54:e7:4c:fc:eb:fc:b2:04:a8:6b:68:f6:7c:
         ad:bd:fa:52:f3:94:52:3c:10:25:c3:41:b4:1c:1d:5a:79:32:
         fa:f9:e1:90:74:2d:8e:63:ed:5d:4d:42:65:ef:05:9e:cd:36:
         f7:b6:66:61:46:29:75:b1:de:bb:17:af:21:da:f3:74:03:97:
         66:0d:0e:3c:f9:8d:b4:64:64:fd:c3:d2:07:48:d9:34:99:1b:
         73:58:95:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----