Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138392e3137382e302f32342d3234203d3e20323639353937.roa
File:                     34352e3138392e3137382e302f32342d3234203d3e20323639353937.roa (raw, json)
Hash identifier:          0SpT0qsTSF/5VfM1nIt95XXSgWbCQgtVhsotaC3Dovw=
Subject key identifier:   4A:9D:4C:3D:57:AA:76:C0:4A:CB:3E:33:F4:54:BB:2E:F2:E7:C9:D4
Certificate issuer:       /CN=11F4865823D65C7C2943A45FEA49FEC8A3990F5A
Certificate serial:       3F510B5EA07448151EE44D081C9FC15D3EF9E8C4
Authority key identifier: 11:F4:86:58:23:D6:5C:7C:29:43:A4:5F:EA:49:FE:C8:A3:99:0F:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138392e3137382e302f32342d3234203d3e20323639353937.roa
Signing time:             Thu 09 Jul 2026 19:41:07 +0000
ROA not before:           Thu 09 Jul 2026 19:36:07 +0000
ROA not after:            Thu 08 Jul 2027 19:41:07 +0000
asID:                     269597
IP address blocks:        45.189.178.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:51:0b:5e:a0:74:48:15:1e:e4:4d:08:1c:9f:c1:5d:3e:f9:e8:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11F4865823D65C7C2943A45FEA49FEC8A3990F5A
        Validity
            Not Before: Jul  9 19:36:07 2026 GMT
            Not After : Jul  8 19:41:07 2027 GMT
        Subject: CN=4A9D4C3D57AA76C04ACB3E33F454BB2EF2E7C9D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:a9:0e:13:36:0a:f1:a4:e8:05:4c:75:87:b2:
                    82:51:97:4c:33:7d:76:e4:d4:b9:4d:22:8a:ea:5f:
                    36:e3:dc:bc:fb:bc:ba:39:96:74:e2:4c:51:d3:10:
                    0c:c4:8a:d3:7c:b5:27:5f:62:51:0f:48:bb:0b:1e:
                    ca:f6:41:50:18:a1:6c:b4:17:5f:e5:82:5b:60:b2:
                    fb:73:2f:f0:58:bd:60:f3:4d:35:e8:b7:97:a2:22:
                    f2:92:34:a5:31:18:38:22:c2:9a:d8:ad:1c:e3:c9:
                    b2:fd:73:db:a1:b7:b6:7c:69:0c:0c:7d:9f:bd:a1:
                    ba:54:20:1a:41:a3:05:29:84:c7:38:a8:96:10:e3:
                    d6:a1:d1:27:c8:ba:a0:db:c5:2f:87:0d:a0:9e:a7:
                    0f:8d:8a:57:22:46:be:0b:c9:6b:1d:50:3c:53:3b:
                    1f:68:bb:52:77:6d:1e:81:7f:17:6f:e0:18:c4:2e:
                    ed:d3:77:56:6c:81:84:75:4a:bb:ff:a9:53:77:4b:
                    17:3b:da:c5:10:d4:05:5d:07:48:03:c8:66:9d:a5:
                    d9:d9:41:98:ce:fa:26:13:93:e2:d3:f1:ee:50:16:
                    bc:51:12:c6:b6:1f:21:60:59:a0:25:a6:33:ab:c9:
                    92:03:9c:da:96:2c:77:1b:11:de:45:dc:f7:71:f4:
                    9a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:9D:4C:3D:57:AA:76:C0:4A:CB:3E:33:F4:54:BB:2E:F2:E7:C9:D4
            X509v3 Authority Key Identifier:
                keyid:11:F4:86:58:23:D6:5C:7C:29:43:A4:5F:EA:49:FE:C8:A3:99:0F:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e3138392e3137382e302f32342d3234203d3e20323639353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:49:84:2c:3a:39:8d:4f:34:b0:7d:e4:bc:69:d2:75:b7:55:
         36:5a:79:8a:c4:35:0d:55:b7:25:38:25:a6:a7:77:8a:05:1f:
         19:c9:73:05:6a:00:cf:54:7d:d2:6e:e3:c0:e4:90:e6:14:52:
         ce:1d:71:d4:94:45:bf:23:bc:23:a3:b8:65:10:15:f4:c7:a2:
         9c:59:5d:a2:0d:83:01:75:98:da:d8:75:f9:fb:7f:39:eb:b9:
         d4:dd:4f:dc:59:ac:57:e7:3b:12:f0:80:5a:36:d2:da:9e:f5:
         02:2f:7a:14:9f:b5:76:10:f8:80:af:bb:13:30:2c:2b:e1:e7:
         8c:74:9d:93:c0:5b:e9:19:95:e2:4e:90:b1:a8:27:7d:ef:81:
         86:d0:8c:d3:47:92:d8:4f:77:3a:14:a8:22:7c:fb:ab:c9:6c:
         2d:27:81:e9:eb:3e:55:87:44:79:12:bb:b5:94:54:46:ea:7b:
         ce:05:fd:11:60:27:a0:13:d7:c0:20:da:30:d0:88:88:0e:df:
         b4:66:60:72:c3:ad:13:88:3c:81:77:97:ff:eb:c0:6d:b1:e5:
         9c:d4:0c:35:fe:5b:62:2a:ab:18:bc:14:1e:00:f1:dd:47:3c:
         7a:7b:fc:ad:4c:9e:b0:d8:92:c5:a0:38:00:3c:13:04:71:8a:
         93:eb:39:fd
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUP1ELXqB0SBUe5E0IHJ/BXT756MQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFGNDg2NTgyM0Q2NUM3QzI5NDNBNDVGRUE0OUZFQzhB
Mzk5MEY1QTAeFw0yNjA3MDkxOTM2MDdaFw0yNzA3MDgxOTQxMDdaMDMxMTAvBgNV
BAMTKDRBOUQ0QzNENTdBQTc2QzA0QUNCM0UzM0Y0NTRCQjJFRjJFN0M5RDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeqQ4TNgrxpOgFTHWHsoJRl0wz
fXbk1LlNIorqXzbj3Lz7vLo5lnTiTFHTEAzEitN8tSdfYlEPSLsLHsr2QVAYoWy0
F1/lgltgsvtzL/BYvWDzTTXot5eiIvKSNKUxGDgiwprYrRzjybL9c9uht7Z8aQwM
fZ+9obpUIBpBowUphMc4qJYQ49ah0SfIuqDbxS+HDaCepw+NilciRr4LyWsdUDxT
Ox9ou1J3bR6Bfxdv4BjELu3Td1ZsgYR1Srv/qVN3Sxc72sUQ1AVdB0gDyGadpdnZ
QZjO+iYTk+LT8e5QFrxREsa2HyFgWaAlpjOryZIDnNqWLHcbEd5F3Pdx9JqFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUSp1MPVeqdsBKyz4z9FS7LvLnydQwHwYDVR0j
BBgwFoAUEfSGWCPWXHwpQ6Rf6kn+yKOZD1owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1pSUXVhY0E1c3B2c3JIMXpDUEhjVU1xejdMbzE2VlVzYXVpMUJTeFJ3
OHEvMC8xMUY0ODY1ODIzRDY1QzdDMjk0M0E0NUZFQTQ5RkVDOEEzOTkwRjVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzExRjQ4NjU4MjNENjVDN0My
OTQzQTQ1RkVBNDlGRUM4QTM5OTBGNUEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0daUlF1YWNBNXNwdnNySDF6Q1BIY1VNcXo3TG8xNlZVc2F1aTFCU3hSdzhxLzAv
MzQzNTJlMzEzODM5MmUzMTM3MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzkzNTM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAAtvbIwDQYJKoZIhvcNAQELBQADggEBAEpJhCw6
OY1PNLB95Lxp0nW3VTZaeYrENQ1VtyU4Jaand4oFHxnJcwVqAM9UfdJu48DkkOYU
Us4dcdSURb8jvCOjuGUQFfTHopxZXaINgwF1mNrYdfn7fznrudTdT9xZrFfnOxLw
gFo20tqe9QIvehSftXYQ+ICvuxMwLCvh54x0nZPAW+kZleJOkLGoJ33vgYbQjNNH
kthPdzoUqCJ8+6vJbC0ngenrPlWHRHkSu7WUVEbqe84F/RFgJ6AT18Ag2jDQiIgO
37RmYHLDrROIPIF3l//rwG2x5ZzUDDX+W2Iqqxi8FB4A8d1HPHp7/K1MnrDYksWg
OAA8EwRxipPrOf0=
-----END CERTIFICATE-----