Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e37312e3230392e302f32342d3234203d3e20323639353937.roa
File:                     34352e37312e3230392e302f32342d3234203d3e20323639353937.roa (raw, json)
Hash identifier:          0eI5aiEDscmaPBK7/zcHnr1bUqqMki3SjuS4+AkZ+80=
Subject key identifier:   A5:94:82:48:92:FD:31:99:7B:F9:AB:75:A7:70:70:C7:60:D3:C1:8D
Certificate issuer:       /CN=11F4865823D65C7C2943A45FEA49FEC8A3990F5A
Certificate serial:       4EC9E677A50DB3B5DC94022E5DDE3E8CF96041DE
Authority key identifier: 11:F4:86:58:23:D6:5C:7C:29:43:A4:5F:EA:49:FE:C8:A3:99:0F:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e37312e3230392e302f32342d3234203d3e20323639353937.roa
Signing time:             Thu 09 Jul 2026 19:41:08 +0000
ROA not before:           Thu 09 Jul 2026 19:36:08 +0000
ROA not after:            Thu 08 Jul 2027 19:41:08 +0000
asID:                     269597
IP address blocks:        45.71.209.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:c9:e6:77:a5:0d:b3:b5:dc:94:02:2e:5d:de:3e:8c:f9:60:41:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11F4865823D65C7C2943A45FEA49FEC8A3990F5A
        Validity
            Not Before: Jul  9 19:36:08 2026 GMT
            Not After : Jul  8 19:41:08 2027 GMT
        Subject: CN=A594824892FD31997BF9AB75A77070C760D3C18D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:03:a7:cc:ed:bf:b7:09:4d:6c:c1:58:e4:3d:
                    56:58:be:4b:a4:ce:46:2a:4c:b6:2e:87:06:01:f0:
                    81:c4:59:93:35:63:e4:60:ee:55:8a:8f:c6:5d:38:
                    02:cf:dc:34:02:24:3e:a1:b7:74:20:4a:ce:a2:e6:
                    67:db:4e:b3:16:33:47:a8:bd:e8:de:61:bb:61:5c:
                    64:ea:f7:9d:06:84:ea:11:17:d3:c2:10:6f:95:1e:
                    9f:83:71:1e:40:ac:91:04:04:86:79:12:67:be:b2:
                    8c:3f:24:cf:0e:b7:e4:0b:49:31:2c:8b:17:14:71:
                    eb:e4:fb:6a:5b:df:64:25:b9:62:db:62:e1:53:f9:
                    b4:57:a4:43:51:2f:c8:74:96:18:79:c9:9d:45:33:
                    63:9e:c3:de:36:44:a0:a2:05:ea:8d:98:15:b8:09:
                    a6:91:91:92:a3:a3:85:80:64:54:0d:0c:9b:6f:5f:
                    ff:de:58:9d:0f:15:32:ed:f6:b7:8b:fa:18:c1:44:
                    0f:92:a5:73:e8:22:04:a4:b6:5a:1d:a1:48:26:7f:
                    99:a4:c9:66:22:5e:83:1c:47:25:92:5f:63:3b:4f:
                    39:1d:0b:51:26:3a:61:65:26:2f:15:4c:0b:ae:d1:
                    f4:81:ae:e4:fe:1c:3e:cb:d4:4d:4c:1e:ec:70:ee:
                    75:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:94:82:48:92:FD:31:99:7B:F9:AB:75:A7:70:70:C7:60:D3:C1:8D
            X509v3 Authority Key Identifier:
                keyid:11:F4:86:58:23:D6:5C:7C:29:43:A4:5F:EA:49:FE:C8:A3:99:0F:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e37312e3230392e302f32342d3234203d3e20323639353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:ef:02:0b:4a:a3:89:f0:3d:f4:e9:1b:f7:e4:76:94:80:ec:
         01:6f:71:fa:25:11:0e:fa:59:02:8e:f4:33:c6:6c:f8:f2:e9:
         fb:06:17:bb:04:20:db:cd:1e:32:89:07:c5:16:c8:cf:e0:3d:
         f2:87:70:28:86:31:c9:7e:b8:a3:44:66:3b:76:4b:ad:1b:47:
         6b:00:d5:cc:84:f9:50:47:ac:17:04:75:05:c2:66:02:ef:aa:
         59:d8:56:38:d5:92:40:41:2d:f6:79:f2:99:4c:22:27:71:f6:
         b2:ef:d7:55:8c:f8:e1:06:e5:bc:81:be:cd:46:d6:7a:6a:31:
         a3:a6:c6:b0:3b:2f:69:71:dd:4d:b2:77:05:01:e1:d9:99:92:
         d3:ae:d9:92:4b:64:af:39:ac:fd:b4:2d:f2:0e:66:7b:22:70:
         53:94:3d:1d:3f:ab:b2:b0:d3:7d:00:23:e6:9c:8d:92:e1:bc:
         88:08:79:3e:1a:12:b4:28:93:0a:cf:69:6c:06:31:d0:b9:a2:
         2b:87:3f:a3:64:60:cb:26:7e:c0:d7:e0:da:8f:97:fb:a7:d8:
         d8:a5:a5:b9:c0:70:d4:42:7c:70:42:36:90:7a:96:4a:2a:5c:
         54:fd:30:33:5c:41:22:44:56:5d:df:0e:39:08:02:26:73:c1:
         83:0f:de:e5
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUTsnmd6UNs7XclAIuXd4+jPlgQd4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTFGNDg2NTgyM0Q2NUM3QzI5NDNBNDVGRUE0OUZFQzhB
Mzk5MEY1QTAeFw0yNjA3MDkxOTM2MDhaFw0yNzA3MDgxOTQxMDhaMDMxMTAvBgNV
BAMTKEE1OTQ4MjQ4OTJGRDMxOTk3QkY5QUI3NUE3NzA3MEM3NjBEM0MxOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdA6fM7b+3CU1swVjkPVZYvkuk
zkYqTLYuhwYB8IHEWZM1Y+Rg7lWKj8ZdOALP3DQCJD6ht3QgSs6i5mfbTrMWM0eo
vejeYbthXGTq950GhOoRF9PCEG+VHp+DcR5ArJEEBIZ5Eme+sow/JM8Ot+QLSTEs
ixcUcevk+2pb32QluWLbYuFT+bRXpENRL8h0lhh5yZ1FM2Oew942RKCiBeqNmBW4
CaaRkZKjo4WAZFQNDJtvX//eWJ0PFTLt9reL+hjBRA+SpXPoIgSktlodoUgmf5mk
yWYiXoMcRyWSX2M7TzkdC1EmOmFlJi8VTAuu0fSBruT+HD7L1E1MHuxw7nVfAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUpZSCSJL9MZl7+at1p3Bwx2DTwY0wHwYDVR0j
BBgwFoAUEfSGWCPWXHwpQ6Rf6kn+yKOZD1owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR1pSUXVhY0E1c3B2c3JIMXpDUEhjVU1xejdMbzE2VlVzYXVpMUJTeFJ3
OHEvMC8xMUY0ODY1ODIzRDY1QzdDMjk0M0E0NUZFQTQ5RkVDOEEzOTkwRjVBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzExRjQ4NjU4MjNENjVDN0My
OTQzQTQ1RkVBNDlGRUM4QTM5OTBGNUEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0daUlF1YWNBNXNwdnNySDF6Q1BIY1VNcXo3TG8xNlZVc2F1aTFCU3hSdzhxLzAv
MzQzNTJlMzczMTJlMzIzMDM5MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM5
MzUzOTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQALUfRMA0GCSqGSIb3DQEBCwUAA4IBAQBL7wILSqOJ
8D306Rv35HaUgOwBb3H6JREO+lkCjvQzxmz48un7Bhe7BCDbzR4yiQfFFsjP4D3y
h3AohjHJfrijRGY7dkutG0drANXMhPlQR6wXBHUFwmYC76pZ2FY41ZJAQS32efKZ
TCIncfay79dVjPjhBuW8gb7NRtZ6ajGjpsawOy9pcd1NsncFAeHZmZLTrtmSS2Sv
Oaz9tC3yDmZ7InBTlD0dP6uysNN9ACPmnI2S4byICHk+GhK0KJMKz2lsBjHQuaIr
hz+jZGDLJn7A1+Daj5f7p9jYpaW5wHDUQnxwQjaQepZKKlxU/TAzXEEiRFZd3w45
CAImc8GDD97l
-----END CERTIFICATE-----