Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e37312e3230382e302f32342d3234203d3e20323639353937.roa
File:                     34352e37312e3230382e302f32342d3234203d3e20323639353937.roa (raw, json)
Hash identifier:          EkcaWFlUs/jx3mHxPlUbkG5d8CXujTdMqhT9o8tzWMk=
Subject key identifier:   63:48:BB:91:8E:16:FC:A6:8E:0C:01:92:47:1C:F5:0C:4E:07:AD:ED
Certificate issuer:       /CN=11F4865823D65C7C2943A45FEA49FEC8A3990F5A
Certificate serial:       76BCA5D77D91FCCB3512F9DB3DA997752AE34708
Authority key identifier: 11:F4:86:58:23:D6:5C:7C:29:43:A4:5F:EA:49:FE:C8:A3:99:0F:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e37312e3230382e302f32342d3234203d3e20323639353937.roa
Signing time:             Thu 09 Jul 2026 19:41:07 +0000
ROA not before:           Thu 09 Jul 2026 19:36:07 +0000
ROA not after:            Thu 08 Jul 2027 19:41:07 +0000
asID:                     269597
IP address blocks:        45.71.208.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:bc:a5:d7:7d:91:fc:cb:35:12:f9:db:3d:a9:97:75:2a:e3:47:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11F4865823D65C7C2943A45FEA49FEC8A3990F5A
        Validity
            Not Before: Jul  9 19:36:07 2026 GMT
            Not After : Jul  8 19:41:07 2027 GMT
        Subject: CN=6348BB918E16FCA68E0C0192471CF50C4E07ADED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cf:d2:51:d8:4f:a1:84:ad:5a:56:16:2f:26:
                    5b:aa:7b:60:9f:46:9d:87:d0:4a:3c:c1:03:67:d7:
                    6f:f5:62:81:6e:74:ae:b8:b3:df:a0:1f:60:ec:35:
                    a7:5e:9f:bf:e4:f7:69:c5:b9:5e:f9:72:cc:54:ab:
                    fb:23:f1:32:ca:f4:50:bb:b0:6a:ed:61:1c:83:bf:
                    2c:c8:ae:7b:bb:b7:2d:bc:b6:ab:d3:c9:d8:a6:f3:
                    6c:b4:a5:61:97:fd:21:e2:38:f9:8f:f7:6c:f6:40:
                    55:5b:eb:8e:64:a8:1e:b9:ec:68:42:3e:f0:8e:37:
                    5e:03:b5:91:2d:d1:99:8a:40:d3:15:16:97:2a:e5:
                    c1:9b:ba:9a:30:7d:94:92:19:34:98:e6:12:c1:02:
                    59:a6:b4:a9:c2:6d:74:87:fd:c9:60:05:a2:f7:36:
                    76:22:54:59:4a:d4:f3:ef:81:7c:ae:7a:66:ad:16:
                    56:0e:f1:3f:15:d0:20:fd:4c:06:a4:fb:1e:2d:95:
                    79:0d:c8:6c:b7:0b:bf:14:b5:69:90:ef:bc:28:ae:
                    03:51:a4:d6:b6:b6:0e:2a:a4:dc:2b:f8:5e:13:75:
                    80:80:74:5d:af:30:6c:56:45:65:45:7f:a4:fc:af:
                    39:54:f1:a4:14:bf:25:e8:f2:e9:cf:d7:8e:78:4c:
                    ed:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:48:BB:91:8E:16:FC:A6:8E:0C:01:92:47:1C:F5:0C:4E:07:AD:ED
            X509v3 Authority Key Identifier:
                keyid:11:F4:86:58:23:D6:5C:7C:29:43:A4:5F:EA:49:FE:C8:A3:99:0F:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e37312e3230382e302f32342d3234203d3e20323639353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:b4:94:1c:5e:2b:59:12:8a:46:8e:3b:cc:33:1b:20:98:f8:
         44:41:71:4d:10:bf:1b:c4:49:c8:0e:90:df:ea:76:cf:c2:fd:
         57:f1:6b:b5:da:9f:34:a8:ad:bd:82:7c:27:f1:77:88:e5:a1:
         a3:2b:4c:31:d3:5e:1a:79:37:07:38:97:68:41:87:b5:98:93:
         c8:6e:a0:4e:4d:93:06:54:e9:08:1d:e9:74:44:bd:13:c2:d9:
         cd:29:a2:2f:ec:b6:68:b7:2f:0b:dd:d8:43:a0:e2:b5:57:ce:
         b2:5f:46:86:42:d2:86:f4:90:75:87:7e:ff:e1:86:83:28:ed:
         fc:fc:d1:02:03:ee:aa:94:c2:08:cc:de:7a:8b:f6:62:b2:84:
         4e:3e:12:a6:ee:07:9f:d4:a0:84:a6:42:4b:bb:18:75:7e:b5:
         54:39:80:2b:c5:95:b5:8a:89:48:3c:0b:c2:f9:5b:24:3c:64:
         4b:de:09:24:b2:e0:7e:e9:80:58:ad:9e:b2:e9:06:d0:1b:a1:
         f8:88:8b:c1:01:af:e0:ca:67:4c:8a:8d:c9:f5:b2:2c:73:73:
         02:ef:c7:35:ef:0e:41:54:1c:e9:4a:a3:ba:3a:eb:b8:25:31:
         67:29:cc:51:27:89:6f:51:d4:9d:ca:0f:2c:d3:a7:87:82:ea:
         d7:77:14:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----