Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/0/34352e3138302e3233362e302f32322d3234203d3e20323639313533.roa
File:                     34352e3138302e3233362e302f32322d3234203d3e20323639313533.roa (raw, json)
Hash identifier:          +WGJqtu4wgUG0C8D60F/zvkKzqKY6vYOBMIaXM0YWmk=
Subject key identifier:   29:23:6F:F4:C4:8A:9C:87:58:70:57:3E:B2:0C:1E:AD:91:13:8F:C0
Certificate issuer:       /CN=C44CCB5164B3BD1D19A1AE7D9A2BA77587F687E8
Certificate serial:       5CBC5F1C8C94C46DEA1617D9E7DFC30A7FE7CD68
Authority key identifier: C4:4C:CB:51:64:B3:BD:1D:19:A1:AE:7D:9A:2B:A7:75:87:F6:87:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C44CCB5164B3BD1D19A1AE7D9A2BA77587F687E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/0/34352e3138302e3233362e302f32322d3234203d3e20323639313533.roa
Signing time:             Mon 24 Aug 2026 20:35:51 +0000
ROA not before:           Mon 24 Aug 2026 20:30:51 +0000
ROA not after:            Mon 23 Aug 2027 20:35:51 +0000
asID:                     269153
IP address blocks:        45.180.236.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:bc:5f:1c:8c:94:c4:6d:ea:16:17:d9:e7:df:c3:0a:7f:e7:cd:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C44CCB5164B3BD1D19A1AE7D9A2BA77587F687E8
        Validity
            Not Before: Aug 24 20:30:51 2026 GMT
            Not After : Aug 23 20:35:51 2027 GMT
        Subject: CN=29236FF4C48A9C875870573EB20C1EAD91138FC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:07:a2:c5:bb:da:ce:7f:1d:3f:21:b5:e8:4b:
                    6c:b1:9d:8b:22:79:c7:4a:70:8d:36:47:62:c5:4a:
                    9e:9a:d4:5f:6a:57:a0:b1:3d:e0:7a:95:44:6c:8e:
                    b9:e5:a8:f2:7c:83:61:ee:cc:53:f5:84:b8:6b:91:
                    eb:9a:d1:a9:72:67:18:ed:09:11:6b:f9:40:b5:f7:
                    93:21:16:9f:d6:a2:43:cc:cd:0d:3e:d8:b6:c0:f0:
                    87:a4:e4:08:b1:73:ad:c1:ea:91:a5:81:08:f5:30:
                    fd:dc:74:7a:4e:9d:19:2b:7f:f0:b4:35:ee:24:0c:
                    e9:e4:7c:4e:ca:07:22:e5:7a:68:3f:4b:0d:e9:dc:
                    31:8b:7b:1c:69:8e:52:5a:bd:e4:45:34:37:6d:26:
                    77:c2:0a:33:66:fc:de:8b:a1:bb:ee:16:d1:71:49:
                    60:7b:69:69:58:29:22:34:e9:3d:34:d6:7d:3a:6e:
                    38:8a:32:05:35:92:2e:08:22:82:1f:d3:3f:f1:31:
                    16:4e:ff:5d:35:19:72:31:77:a0:9a:d5:da:41:95:
                    b1:8c:c6:92:33:31:27:b0:69:95:33:3d:a1:e9:f5:
                    6e:84:72:58:55:0c:fb:47:91:34:e5:49:14:5d:14:
                    e6:06:84:f4:53:9d:b8:af:d1:ef:93:db:d8:08:c5:
                    ba:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:23:6F:F4:C4:8A:9C:87:58:70:57:3E:B2:0C:1E:AD:91:13:8F:C0
            X509v3 Authority Key Identifier:
                keyid:C4:4C:CB:51:64:B3:BD:1D:19:A1:AE:7D:9A:2B:A7:75:87:F6:87:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/0/C44CCB5164B3BD1D19A1AE7D9A2BA77587F687E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C44CCB5164B3BD1D19A1AE7D9A2BA77587F687E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/0/34352e3138302e3233362e302f32322d3234203d3e20323639313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.180.236.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:35:35:3e:19:f8:57:25:14:8e:50:15:9f:54:d5:9c:d5:0e:
         25:8a:50:fe:9b:e5:94:08:a9:ff:82:81:7a:07:5c:8b:fb:7b:
         8e:c3:9e:e4:74:15:d8:1d:bb:bf:20:1c:df:67:3e:fd:3b:cc:
         02:c6:17:0f:1a:e3:49:14:d0:ef:6e:68:dd:ad:61:82:26:ca:
         2b:4c:e1:72:56:dc:1b:32:10:35:73:0d:b6:c6:92:92:87:a0:
         8d:ac:4a:66:8c:14:d6:3c:f9:64:0a:63:b0:08:19:24:ef:da:
         64:a6:eb:03:f1:40:ea:b6:fd:a3:d1:a4:7e:bd:3a:db:c8:6a:
         cd:3c:cf:a1:3f:2a:16:4f:ce:f8:2a:95:f3:71:3e:aa:e7:3a:
         00:54:4b:59:92:07:0d:01:3e:6e:aa:6c:e3:36:5c:b5:89:09:
         b6:bf:17:0c:0f:d8:bc:a1:e8:26:95:d8:70:e9:85:d6:94:7e:
         71:f6:2e:c8:ab:2e:eb:cb:6d:2d:74:0d:30:0e:19:4f:ee:49:
         cb:3b:9c:3e:4e:c9:09:d0:6a:de:2b:cf:9d:55:74:2e:62:25:
         67:c5:63:c2:58:9a:2c:07:17:89:f7:cb:22:ee:37:a1:a7:ef:
         f6:3d:45:bc:38:61:cf:84:8a:44:11:21:56:71:c9:cf:92:86:
         58:a1:cf:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----