Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e37312e3231302e302f32332d3233203d3e20323639353937.roa
File:                     34352e37312e3231302e302f32332d3233203d3e20323639353937.roa (raw, json)
Hash identifier:          C9FnwaVfxv0IBc+JsmjdtMkF2OXhJWf116dMQ6juHEY=
Subject key identifier:   53:C1:4D:F1:7D:20:E2:B1:40:91:BF:9A:46:8F:60:57:4C:73:AF:CA
Certificate issuer:       /CN=11F4865823D65C7C2943A45FEA49FEC8A3990F5A
Certificate serial:       5AA425A6D7575B2935966931EB0C4AB1269C41B6
Authority key identifier: 11:F4:86:58:23:D6:5C:7C:29:43:A4:5F:EA:49:FE:C8:A3:99:0F:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e37312e3231302e302f32332d3233203d3e20323639353937.roa
Signing time:             Thu 09 Jul 2026 19:41:06 +0000
ROA not before:           Thu 09 Jul 2026 19:36:06 +0000
ROA not after:            Thu 08 Jul 2027 19:41:06 +0000
asID:                     269597
IP address blocks:        45.71.210.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:a4:25:a6:d7:57:5b:29:35:96:69:31:eb:0c:4a:b1:26:9c:41:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11F4865823D65C7C2943A45FEA49FEC8A3990F5A
        Validity
            Not Before: Jul  9 19:36:06 2026 GMT
            Not After : Jul  8 19:41:06 2027 GMT
        Subject: CN=53C14DF17D20E2B14091BF9A468F60574C73AFCA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:e2:72:6d:20:57:c5:9d:52:61:24:16:24:62:
                    91:51:71:5b:42:b6:c1:01:fb:aa:94:a1:04:66:e9:
                    d6:bd:80:53:64:0c:55:84:bc:f1:6a:96:5a:e9:5a:
                    53:da:5b:0d:b9:98:84:4c:b6:8f:a0:45:67:82:be:
                    fa:ea:c4:75:67:5e:fa:87:4f:eb:f4:c8:5a:20:11:
                    98:ca:fc:5e:69:7d:16:cf:8f:c9:52:1d:76:16:a1:
                    7c:89:8c:c5:32:20:c3:62:11:52:0a:9e:c8:46:82:
                    ed:77:4b:40:6e:41:2b:e7:c2:80:ab:d3:4f:3b:66:
                    5f:38:55:92:55:79:51:36:ba:21:84:a4:e9:07:d9:
                    ca:7b:06:4e:45:50:d7:5a:5e:91:95:62:5c:5f:d4:
                    57:2d:38:06:73:ce:9e:df:7e:2e:e7:03:8e:f4:5f:
                    04:19:f3:e0:01:92:4e:c3:3f:2c:b3:59:35:e2:8d:
                    55:59:e7:e6:79:b7:7b:3d:02:f8:88:08:a1:e1:37:
                    ad:d7:8c:12:25:52:24:3a:8d:8e:98:d6:7e:33:52:
                    64:8d:c7:45:3c:83:5f:53:8d:07:84:77:43:6d:74:
                    fc:08:d1:49:12:cc:33:20:f3:3c:bc:89:fb:db:8d:
                    fc:1e:6f:62:87:c2:47:d5:39:7e:84:dd:28:ee:a8:
                    89:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:C1:4D:F1:7D:20:E2:B1:40:91:BF:9A:46:8F:60:57:4C:73:AF:CA
            X509v3 Authority Key Identifier:
                keyid:11:F4:86:58:23:D6:5C:7C:29:43:A4:5F:EA:49:FE:C8:A3:99:0F:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e37312e3231302e302f32332d3233203d3e20323639353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:7b:c1:39:e1:f6:29:fd:4c:75:c1:a5:66:ff:f0:56:83:f7:
         fd:c5:f5:4e:cd:dd:ef:e4:8f:c1:82:b2:c5:10:27:ec:8e:b5:
         89:22:55:ac:b8:72:43:f0:f5:5b:ef:79:89:6d:af:e2:ad:f6:
         c4:bf:21:67:e1:37:5f:db:32:4d:2d:f1:25:e8:ff:b0:eb:fd:
         ba:71:36:b4:e6:e4:ad:22:3c:bc:e0:22:7a:e4:5b:8a:59:b5:
         86:64:ad:ec:28:a8:d2:9b:e4:de:83:a6:df:d4:ec:99:3b:a1:
         58:12:90:f5:ef:ac:aa:f9:7e:46:dd:7c:09:28:f0:08:28:b7:
         e1:7b:88:7c:f2:ac:07:53:34:2f:af:9f:07:85:87:ba:35:43:
         51:3e:d2:af:b9:2f:67:72:c7:4e:9c:24:e5:ac:1d:87:1f:33:
         8c:e6:dc:e0:0d:de:f5:f7:c7:d1:02:26:ec:38:13:41:78:07:
         ce:e3:2c:7f:57:a5:da:17:2c:de:91:1b:ed:f3:34:e7:ab:a7:
         f8:cf:05:67:4a:a0:e3:e0:ac:33:bb:7c:18:ba:84:a0:8d:ae:
         28:da:2d:98:90:e4:e0:28:10:0b:6c:f0:49:78:87:1a:36:ae:
         32:68:93:20:d5:59:40:80:f7:f7:f0:5f:5d:6e:1f:8c:aa:28:
         37:b3:d5:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----