Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e37312e3231302e302f32342d3234203d3e20323639353937.roa
File:                     34352e37312e3231302e302f32342d3234203d3e20323639353937.roa (raw, json)
Hash identifier:          JH2IsqdF3xCQnD+5uRSmp9KDPRXcKKdopp1QVP0dQus=
Subject key identifier:   C9:03:94:75:53:EC:3D:34:9E:B8:8D:93:CB:78:2A:49:4A:43:54:BA
Certificate issuer:       /CN=11F4865823D65C7C2943A45FEA49FEC8A3990F5A
Certificate serial:       33625997C8EC01889BCEA3C0BC9F39515FC53F76
Authority key identifier: 11:F4:86:58:23:D6:5C:7C:29:43:A4:5F:EA:49:FE:C8:A3:99:0F:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e37312e3231302e302f32342d3234203d3e20323639353937.roa
Signing time:             Thu 09 Jul 2026 19:41:07 +0000
ROA not before:           Thu 09 Jul 2026 19:36:07 +0000
ROA not after:            Thu 08 Jul 2027 19:41:07 +0000
asID:                     269597
IP address blocks:        45.71.210.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:62:59:97:c8:ec:01:88:9b:ce:a3:c0:bc:9f:39:51:5f:c5:3f:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11F4865823D65C7C2943A45FEA49FEC8A3990F5A
        Validity
            Not Before: Jul  9 19:36:07 2026 GMT
            Not After : Jul  8 19:41:07 2027 GMT
        Subject: CN=C903947553EC3D349EB88D93CB782A494A4354BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:84:9f:7d:ac:3c:5a:4c:5b:f1:9d:c8:c9:53:
                    6c:dc:d5:ab:12:f9:b5:4c:d2:2f:de:c1:38:25:4c:
                    fa:4f:f6:6c:54:f6:f7:f6:1f:c5:fb:9f:b1:d6:c7:
                    9b:54:fc:e6:f5:da:55:56:60:ee:d8:56:f6:bd:10:
                    d1:d6:3f:df:5b:35:ee:ab:fb:b9:af:79:b6:93:c6:
                    0d:20:01:31:5a:e8:5e:9e:17:52:f0:50:f2:b2:21:
                    35:f9:6b:e8:b4:8a:2a:cf:22:b7:52:a2:9b:77:09:
                    9a:7f:93:87:e8:d1:4e:0b:44:a6:65:95:60:00:3d:
                    82:d2:5a:bc:ed:c8:2a:5d:a6:8d:92:02:61:9c:35:
                    b3:c0:c2:dd:75:92:c6:a2:ef:9e:ea:55:5a:11:16:
                    53:87:62:56:2b:60:7d:83:ae:0d:09:49:a3:ea:ca:
                    9f:21:f6:58:b8:77:0a:7d:65:aa:74:16:d2:ef:fe:
                    1c:cf:19:57:0a:36:bf:11:8e:24:4d:dc:92:6f:d2:
                    6b:5f:cd:9d:3d:91:a9:69:ca:58:08:97:8e:7b:4f:
                    42:d0:92:80:a8:58:d2:a9:50:38:ff:5a:f0:ac:9b:
                    ce:36:71:bf:c7:0b:3d:b7:a7:c2:d4:31:25:de:fe:
                    eb:6f:80:3c:cf:e9:a2:ac:33:05:0e:c9:58:d5:e4:
                    03:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:03:94:75:53:EC:3D:34:9E:B8:8D:93:CB:78:2A:49:4A:43:54:BA
            X509v3 Authority Key Identifier:
                keyid:11:F4:86:58:23:D6:5C:7C:29:43:A4:5F:EA:49:FE:C8:A3:99:0F:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/34352e37312e3231302e302f32342d3234203d3e20323639353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:7d:e8:c2:16:f2:f7:6e:23:33:cb:b2:89:5e:7e:8f:e1:7d:
         d7:41:6c:90:56:f5:7d:c5:95:bc:6b:2e:0f:78:cf:c6:1c:9e:
         f8:58:56:81:28:e5:f4:bf:02:8d:fd:8a:d7:09:75:5e:f5:31:
         53:a7:16:3f:59:1e:31:ef:b5:7e:c2:27:de:9d:ed:42:6f:c6:
         a4:b6:b0:47:ed:b9:4f:07:a0:ff:d9:2d:83:74:2a:50:de:cd:
         61:6a:09:c0:2a:ce:0d:75:4b:79:28:44:99:7b:46:da:ac:71:
         98:48:81:cd:72:1b:02:98:a2:8e:f1:5a:fa:44:5c:18:84:5d:
         f6:fd:23:c5:ce:4e:26:92:71:79:26:39:79:35:36:06:71:59:
         b6:3a:26:88:c2:5d:94:c4:9c:1c:96:f8:4a:58:f8:1a:02:63:
         f9:59:2b:6d:68:e7:2b:12:20:71:fe:c7:13:56:f0:48:b7:2e:
         19:b7:0e:68:99:a8:c4:53:7d:cb:ff:7d:44:17:20:ce:a6:f1:
         2f:91:f9:02:7f:c0:3f:6b:86:77:66:2a:06:bc:29:57:dd:2d:
         f4:9f:0d:51:d8:a0:8a:4c:16:69:91:9c:5c:86:b5:35:96:c9:
         db:82:f3:69:02:c3:94:da:e2:3c:cd:1a:3e:3f:8d:08:6b:14:
         3f:c3:b9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----