Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e37312e3230382e302f32332d3233203d3e20323639353937.roa
File:                     34352e37312e3230382e302f32332d3233203d3e20323639353937.roa (raw, json)
Hash identifier:          nnwOLLzmBpbjqiEIW0p+cOA17xhcGmYefWn2ocHKbws=
Subject key identifier:   F4:44:69:A1:AC:4F:53:B0:8A:98:18:85:DA:5C:93:5F:CA:E9:C3:02
Certificate issuer:       /CN=11F4865823D65C7C2943A45FEA49FEC8A3990F5A
Certificate serial:       366E0B8BD2FF3DC5B96E65D8C18FE2155BA991AA
Authority key identifier: 11:F4:86:58:23:D6:5C:7C:29:43:A4:5F:EA:49:FE:C8:A3:99:0F:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e37312e3230382e302f32332d3233203d3e20323639353937.roa
Signing time:             Thu 09 Jul 2026 19:41:06 +0000
ROA not before:           Thu 09 Jul 2026 19:36:06 +0000
ROA not after:            Thu 08 Jul 2027 19:41:06 +0000
asID:                     269597
IP address blocks:        45.71.208.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:6e:0b:8b:d2:ff:3d:c5:b9:6e:65:d8:c1:8f:e2:15:5b:a9:91:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11F4865823D65C7C2943A45FEA49FEC8A3990F5A
        Validity
            Not Before: Jul  9 19:36:06 2026 GMT
            Not After : Jul  8 19:41:06 2027 GMT
        Subject: CN=F44469A1AC4F53B08A981885DA5C935FCAE9C302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:96:ec:14:66:97:df:55:bc:8e:47:15:9c:68:
                    7d:59:6d:c3:8f:28:c4:30:7f:90:53:7d:de:59:6f:
                    f5:f2:12:fd:11:16:f3:dc:43:45:58:3f:8a:ad:f4:
                    be:0a:85:5a:65:7d:c2:31:5b:f0:9e:0a:db:dc:41:
                    21:7f:d2:13:1f:b2:30:78:4c:c1:d9:87:9f:d5:a3:
                    3b:28:cc:cf:4e:5a:01:b9:8b:c9:b4:77:b6:3a:92:
                    4d:d8:f9:4d:d4:13:03:38:7c:99:f7:3a:4d:43:4c:
                    06:66:62:a9:4e:18:5c:42:d1:0d:a8:77:54:9d:0d:
                    ce:ed:93:24:77:1b:56:ff:6f:f8:26:09:72:0c:89:
                    bf:a3:ee:03:09:21:16:87:13:dd:3a:b9:04:84:fe:
                    c4:10:b0:fb:f8:1d:f5:b4:18:a7:fe:d7:55:e4:78:
                    a8:ed:0b:4f:a8:b2:b5:77:d6:30:75:88:63:86:a8:
                    83:a4:8d:c0:c5:30:14:3f:8e:5f:dc:14:85:cb:57:
                    15:90:ab:a5:aa:d0:36:e7:5e:48:24:a4:dd:72:15:
                    78:bc:0c:12:9a:96:62:35:0b:a6:67:10:c2:1e:fc:
                    59:15:85:ec:e3:ec:13:6d:dc:b8:b6:19:1b:6d:e1:
                    ad:d0:36:0e:31:c4:73:e4:46:24:93:86:55:2a:cd:
                    76:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:44:69:A1:AC:4F:53:B0:8A:98:18:85:DA:5C:93:5F:CA:E9:C3:02
            X509v3 Authority Key Identifier:
                keyid:11:F4:86:58:23:D6:5C:7C:29:43:A4:5F:EA:49:FE:C8:A3:99:0F:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e37312e3230382e302f32332d3233203d3e20323639353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:a2:d4:d6:e8:72:41:78:5f:28:07:c4:79:f1:21:73:7c:51:
         d0:f8:f3:4f:e6:f4:99:1f:c9:7a:e3:06:07:a2:12:85:de:e1:
         08:0f:78:7d:40:84:83:1e:4d:b4:ea:13:6e:9e:e3:79:aa:4e:
         7b:21:fd:67:cb:45:b4:b6:a6:c3:df:51:56:b4:c1:04:bf:12:
         c6:18:67:7a:c8:e7:25:1b:ad:ea:be:76:55:09:63:f0:43:d2:
         a8:3b:82:e2:5e:1e:95:c1:c4:5b:d5:90:21:42:15:33:50:7d:
         3b:a8:f4:cc:f8:27:e4:77:46:50:4b:c1:50:07:fa:8b:73:56:
         c1:96:3c:54:5b:5a:12:41:02:92:8c:e0:65:e7:de:b1:66:2f:
         ba:82:12:06:ef:b3:a7:94:59:af:01:53:9f:28:b4:90:a6:63:
         64:5e:cb:2e:1b:04:f6:bb:6b:3b:28:39:7a:72:8f:de:18:a5:
         d6:f3:5a:f7:b4:a8:4e:70:45:92:82:09:76:da:b7:6a:c9:c7:
         e2:d1:e4:d2:b5:c9:03:45:5f:bf:67:a3:5c:a5:d6:3a:22:51:
         bb:fd:44:d7:05:c3:14:dd:af:75:65:37:e9:94:83:b4:96:7e:
         db:96:85:7c:e5:b9:20:7d:42:fd:74:68:59:39:62:57:31:9c:
         b6:a9:88:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----