Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/34352e3136302e3130342e302f32322d3234203d3e20323638333837.roa
File:                     34352e3136302e3130342e302f32322d3234203d3e20323638333837.roa (raw, json)
Hash identifier:          SXWxvipsYqySU4Sm2rNbFGPbEDZC075+z4TcAOKq5JE=
Subject key identifier:   3F:E1:58:1B:D0:C8:FB:D7:F2:B9:CF:A7:4B:CC:6B:18:20:C8:7D:C6
Certificate issuer:       /CN=E68BB9511D551C8445F6B84AD60A02028B528342
Certificate serial:       4F293B45946EA10B1C7F71434E69FDFAD04A65B3
Authority key identifier: E6:8B:B9:51:1D:55:1C:84:45:F6:B8:4A:D6:0A:02:02:8B:52:83:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68BB9511D551C8445F6B84AD60A02028B528342.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/34352e3136302e3130342e302f32322d3234203d3e20323638333837.roa
Signing time:             Wed 03 Jun 2026 14:11:56 +0000
ROA not before:           Wed 03 Jun 2026 14:06:56 +0000
ROA not after:            Wed 02 Jun 2027 14:11:56 +0000
asID:                     268387
IP address blocks:        45.160.104.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:29:3b:45:94:6e:a1:0b:1c:7f:71:43:4e:69:fd:fa:d0:4a:65:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E68BB9511D551C8445F6B84AD60A02028B528342
        Validity
            Not Before: Jun  3 14:06:56 2026 GMT
            Not After : Jun  2 14:11:56 2027 GMT
        Subject: CN=3FE1581BD0C8FBD7F2B9CFA74BCC6B1820C87DC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9b:e2:17:4d:f2:89:57:3d:d3:27:df:95:33:
                    f9:30:1a:a3:58:a4:0b:03:6e:65:19:e2:43:da:36:
                    c9:12:a9:52:c3:fb:79:cb:fd:05:82:52:8c:ca:52:
                    16:4a:36:78:93:7f:60:9d:27:02:e3:b6:69:ad:08:
                    0c:68:40:0a:8a:b1:f4:59:ae:a3:6e:f9:a4:ad:c2:
                    20:e6:af:15:43:03:c9:f8:45:93:66:e5:ea:49:9b:
                    de:45:24:3f:ee:e0:0d:3c:12:5f:2e:fc:e4:43:30:
                    ae:b6:0f:7e:1f:86:87:36:3c:c6:db:46:5f:a1:c8:
                    fd:47:52:ad:5d:8d:84:2e:8b:c3:0f:11:e1:b9:3e:
                    96:81:2c:66:5c:7b:85:5a:4a:82:e0:63:7d:a2:64:
                    1f:9b:62:4b:9e:c2:ae:c6:9e:56:41:67:fe:6e:99:
                    3a:c0:f0:1c:29:9a:a9:de:15:7f:0d:4f:90:d5:76:
                    a4:dc:82:f3:ad:0d:c0:e5:69:a5:44:fc:c5:9a:df:
                    cc:1c:40:72:3e:3d:f0:ec:a8:cb:57:8f:85:42:f2:
                    bc:bc:46:4c:39:a8:b2:41:b9:71:95:e6:3f:a7:40:
                    d9:3e:c0:6d:0a:73:30:a0:41:0c:4f:ff:77:02:eb:
                    0c:dd:37:fa:12:a7:5a:55:91:25:8b:b3:c6:2c:ed:
                    d9:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:E1:58:1B:D0:C8:FB:D7:F2:B9:CF:A7:4B:CC:6B:18:20:C8:7D:C6
            X509v3 Authority Key Identifier:
                keyid:E6:8B:B9:51:1D:55:1C:84:45:F6:B8:4A:D6:0A:02:02:8B:52:83:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/E68BB9511D551C8445F6B84AD60A02028B528342.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68BB9511D551C8445F6B84AD60A02028B528342.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/34352e3136302e3130342e302f32322d3234203d3e20323638333837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3a:7d:02:42:a0:ff:6a:b6:ea:be:d9:29:4d:96:12:86:24:87:
         05:00:0b:e8:f7:cf:6c:39:cb:07:ae:ff:1a:62:14:cf:9f:37:
         52:22:f4:04:3e:81:75:2f:25:24:15:44:8b:e2:ea:40:9b:91:
         4b:8f:7c:cc:5f:fa:b4:74:48:19:00:5e:52:de:86:14:52:95:
         0c:94:2b:6d:af:72:52:09:22:dd:17:f2:64:ed:29:36:3e:b4:
         90:48:07:bf:1e:7a:5e:50:2d:8d:ef:44:72:56:65:2e:23:54:
         21:a4:c9:b2:3e:6e:6e:4d:7c:eb:7e:62:4b:5f:46:93:bc:ba:
         68:4c:d3:97:2d:f5:5d:97:db:18:8f:5b:68:b1:c3:4e:aa:90:
         6d:3f:0b:46:3d:23:da:6b:a7:f8:9b:7a:13:fa:9f:3f:e8:f0:
         b8:ea:8c:1d:68:00:73:b6:ef:5c:fd:d6:b8:bb:d3:08:a6:76:
         05:a5:40:fd:c9:2f:ec:d1:c5:05:45:51:dd:30:d3:22:9f:d5:
         20:55:61:d5:a9:f1:7d:fe:09:22:db:46:bd:e6:93:d8:82:75:
         c3:ed:cf:54:5d:04:99:2a:db:5b:98:d0:9f:6c:7c:fd:73:e0:
         41:03:f5:76:20:06:8b:7b:d1:64:d0:49:72:6f:73:23:68:a3:
         5f:40:e8:f9
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUTyk7RZRuoQscf3FDTmn9+tBKZbMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTY4QkI5NTExRDU1MUM4NDQ1RjZCODRBRDYwQTAyMDI4
QjUyODM0MjAeFw0yNjA2MDMxNDA2NTZaFw0yNzA2MDIxNDExNTZaMDMxMTAvBgNV
BAMTKDNGRTE1ODFCRDBDOEZCRDdGMkI5Q0ZBNzRCQ0M2QjE4MjBDODdEQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGm+IXTfKJVz3TJ9+VM/kwGqNY
pAsDbmUZ4kPaNskSqVLD+3nL/QWCUozKUhZKNniTf2CdJwLjtmmtCAxoQAqKsfRZ
rqNu+aStwiDmrxVDA8n4RZNm5epJm95FJD/u4A08El8u/ORDMK62D34fhoc2PMbb
Rl+hyP1HUq1djYQui8MPEeG5PpaBLGZce4VaSoLgY32iZB+bYkuewq7GnlZBZ/5u
mTrA8BwpmqneFX8NT5DVdqTcgvOtDcDlaaVE/MWa38wcQHI+PfDsqMtXj4VC8ry8
Rkw5qLJBuXGV5j+nQNk+wG0KczCgQQxP/3cC6wzdN/oSp1pVkSWLs8Ys7dk/AgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQUP+FYG9DI+9fyuc+nS8xrGCDIfcYwHwYDVR0j
BBgwFoAU5ou5UR1VHIRF9rhK1goCAotSg0IwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9OSmROZXpONkNHNEZTcFhhY29QWEpUNGU4MmlLWFJEYzdSam1kQVZMRDRp
LzAvRTY4QkI5NTExRDU1MUM4NDQ1RjZCODRBRDYwQTAyMDI4QjUyODM0Mi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FNjhCQjk1MTFENTUxQzg0NDVG
NkI4NEFENjBBMDIwMjhCNTI4MzQyLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9O
SmROZXpONkNHNEZTcFhhY29QWEpUNGU4MmlLWFJEYzdSam1kQVZMRDRpLzAvMzQz
NTJlMzEzNjMwMmUzMTMwMzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2Mzgz
MzM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAItoGgwDQYJKoZIhvcNAQELBQADggEBADp9AkKg/2q2
6r7ZKU2WEoYkhwUAC+j3z2w5yweu/xpiFM+fN1Ii9AQ+gXUvJSQVRIvi6kCbkUuP
fMxf+rR0SBkAXlLehhRSlQyUK22vclIJIt0X8mTtKTY+tJBIB78eel5QLY3vRHJW
ZS4jVCGkybI+bm5NfOt+YktfRpO8umhM05ct9V2X2xiPW2ixw06qkG0/C0Y9I9pr
p/ibehP6nz/o8LjqjB1oAHO271z91ri70wimdgWlQP3JL+zRxQVFUd0w0yKf1SBV
YdWp8X3+CSLbRr3mk9iCdcPtz1RdBJkq21uY0J9sfP1z4EED9XYgBot70WTQSXJv
cyNoo19A6Pk=
-----END CERTIFICATE-----