Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e37312e3230382e302f32322d3232203d3e20323639353937.roa
File:                     34352e37312e3230382e302f32322d3232203d3e20323639353937.roa (raw, json)
Hash identifier:          Poe9bkOMZSN6HL+cRF0hbJadZlQ6e+6wGYga3Gn+jDI=
Subject key identifier:   8C:83:36:BA:66:39:14:C9:EA:A9:CD:74:85:38:94:00:E6:10:01:97
Certificate issuer:       /CN=11F4865823D65C7C2943A45FEA49FEC8A3990F5A
Certificate serial:       6A9C09DC734DF125A44BBE626539C5C0B1E16332
Authority key identifier: 11:F4:86:58:23:D6:5C:7C:29:43:A4:5F:EA:49:FE:C8:A3:99:0F:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e37312e3230382e302f32322d3232203d3e20323639353937.roa
Signing time:             Thu 09 Jul 2026 19:41:08 +0000
ROA not before:           Thu 09 Jul 2026 19:36:08 +0000
ROA not after:            Thu 08 Jul 2027 19:41:08 +0000
asID:                     269597
IP address blocks:        45.71.208.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:9c:09:dc:73:4d:f1:25:a4:4b:be:62:65:39:c5:c0:b1:e1:63:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11F4865823D65C7C2943A45FEA49FEC8A3990F5A
        Validity
            Not Before: Jul  9 19:36:08 2026 GMT
            Not After : Jul  8 19:41:08 2027 GMT
        Subject: CN=8C8336BA663914C9EAA9CD7485389400E6100197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e9:0b:9e:82:9b:d7:1e:94:d7:38:f4:dc:7a:
                    88:a8:3f:3e:5e:7d:4a:0d:c4:61:b5:5c:d8:cc:8a:
                    ad:14:36:82:3e:93:9b:ef:a4:ec:fc:c7:2f:1f:80:
                    63:78:fc:39:27:ec:8d:14:33:46:d6:bb:8f:7d:44:
                    82:40:ad:a6:49:13:57:98:e4:39:c2:bd:d5:2c:63:
                    fa:28:66:b7:82:8e:e6:d4:3f:23:56:49:b1:3a:8c:
                    ec:06:93:a8:b5:59:c1:b2:11:2c:d7:c0:99:a7:4e:
                    de:10:2a:de:55:bc:29:16:5b:58:87:30:71:ae:57:
                    52:9e:f1:00:44:d0:f1:4a:07:bf:a7:44:51:93:15:
                    49:18:ba:63:bc:02:77:3d:80:5d:b7:5d:70:c2:dc:
                    66:7d:73:b3:e4:00:04:c6:af:39:f2:97:4d:6f:41:
                    61:7e:bb:f7:9c:0b:70:2d:27:17:a6:bc:f9:d4:9d:
                    c8:21:02:f9:0a:97:ff:fb:e2:fd:01:cc:fb:59:9e:
                    d7:52:d0:39:52:64:94:d5:61:be:d1:51:5f:dd:e6:
                    4e:3e:02:12:a4:07:f7:a4:6b:75:9c:88:fa:1c:00:
                    84:fd:aa:4a:ff:2f:f7:33:92:b2:49:c0:85:83:f7:
                    5c:30:94:8c:2a:64:82:ac:46:67:dc:53:cd:51:1c:
                    77:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:83:36:BA:66:39:14:C9:EA:A9:CD:74:85:38:94:00:E6:10:01:97
            X509v3 Authority Key Identifier:
                keyid:11:F4:86:58:23:D6:5C:7C:29:43:A4:5F:EA:49:FE:C8:A3:99:0F:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e37312e3230382e302f32322d3232203d3e20323639353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         16:a5:67:94:e1:f5:f0:34:48:b2:ad:61:69:42:ec:fb:bd:07:
         b2:52:2c:1e:85:d3:c9:c1:f5:ac:73:92:4c:39:a7:94:1c:f2:
         08:ee:dd:90:05:eb:47:6e:5f:da:5e:f8:0c:33:b9:f7:15:74:
         cf:24:2a:c7:3e:43:0d:91:35:41:5b:4d:39:b9:93:7a:d5:f7:
         81:98:f1:86:53:79:3c:9f:fb:79:a0:41:e7:50:cb:3d:05:ac:
         2f:0b:bf:84:e7:ac:59:ad:00:0b:08:4e:8d:f0:1b:6b:49:be:
         d3:f6:a6:ce:44:f5:eb:bc:61:d4:68:0d:8f:04:e0:b3:7e:91:
         de:68:b2:2d:95:0d:04:d3:18:a1:06:09:64:7a:6a:47:ef:ba:
         da:59:e5:1d:c7:af:82:a8:cc:96:b6:be:96:f6:bf:33:9f:04:
         35:7c:83:24:23:d5:20:78:01:c8:93:f9:d7:6d:82:f3:6c:68:
         c6:d3:5c:18:4e:3b:42:2f:a2:38:ca:bf:eb:83:6b:2a:26:c1:
         c6:bb:24:ab:e8:ff:d8:f1:c8:3b:53:2e:b6:67:a6:4b:0c:a1:
         44:4c:ca:9c:dd:04:df:b4:a6:9c:db:cb:a9:db:67:87:ed:d8:
         53:8d:e3:b3:f2:f3:29:a8:2c:d2:d3:55:2e:0f:06:c8:5f:92:
         0f:fd:a5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----