Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/3137302e37392e3137362e302f32322d3232203d3e20323636333039.roa
File:                     3137302e37392e3137362e302f32322d3232203d3e20323636333039.roa (raw, json)
Hash identifier:          8LmqP8gtNjhiHekfq1WdUArXeOZ0o3WuSogVyMX2JuA=
Subject key identifier:   52:A1:8E:3E:26:22:DC:CE:11:A8:1E:A0:B7:4A:14:2E:D5:38:B2:C2
Certificate issuer:       /CN=68040AEB3AC98B5FF3C03D98E901AB8177343C76
Certificate serial:       722E7F060027C140287006F6249AD93363982CD5
Authority key identifier: 68:04:0A:EB:3A:C9:8B:5F:F3:C0:3D:98:E9:01:AB:81:77:34:3C:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68040AEB3AC98B5FF3C03D98E901AB8177343C76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/3137302e37392e3137362e302f32322d3232203d3e20323636333039.roa
Signing time:             Mon 24 Aug 2026 13:57:26 +0000
ROA not before:           Mon 24 Aug 2026 13:52:26 +0000
ROA not after:            Mon 23 Aug 2027 13:57:26 +0000
asID:                     266309
IP address blocks:        170.79.176.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:2e:7f:06:00:27:c1:40:28:70:06:f6:24:9a:d9:33:63:98:2c:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68040AEB3AC98B5FF3C03D98E901AB8177343C76
        Validity
            Not Before: Aug 24 13:52:26 2026 GMT
            Not After : Aug 23 13:57:26 2027 GMT
        Subject: CN=52A18E3E2622DCCE11A81EA0B74A142ED538B2C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a7:3d:56:7e:26:9d:fa:f3:d1:f2:69:26:dc:
                    f8:f4:cf:98:b9:96:05:a9:8a:6a:ed:20:b8:70:97:
                    29:b5:94:8e:b4:4b:b3:a8:cd:34:44:f8:4f:81:34:
                    78:2a:b1:db:eb:55:dd:cb:35:27:03:d6:9e:0e:27:
                    af:4f:d0:22:83:c7:9d:9f:f1:ff:60:cd:53:5d:05:
                    6a:e6:e9:b8:4b:01:67:7b:1f:e0:08:72:16:f6:5d:
                    04:bc:1b:b4:5c:f4:9e:18:a8:61:31:fc:11:6a:c6:
                    9f:d4:75:1b:56:0f:10:8b:b4:c4:c8:d5:14:34:1e:
                    6e:26:ad:f2:e9:ed:e2:e6:e9:3e:0a:0e:ed:a7:34:
                    6e:3c:bd:69:92:60:d3:1a:50:d9:7b:4a:da:ce:ba:
                    ad:ce:8f:52:4b:91:08:32:d3:76:f7:1d:dc:a0:9f:
                    2a:31:95:ed:ba:bd:4e:74:c4:46:81:09:a5:c9:6e:
                    0d:69:71:32:31:62:17:53:b1:d8:2f:d7:28:63:e8:
                    33:e2:86:05:b1:a9:a8:36:39:b3:db:4e:de:3b:31:
                    89:0a:a9:e8:1c:39:de:9a:ff:e4:d2:02:ba:64:5b:
                    1b:99:48:28:4b:55:a0:ab:31:5f:46:2a:a3:9f:6f:
                    a9:f2:32:f4:a4:62:42:33:92:01:fc:fa:c0:68:5a:
                    01:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:A1:8E:3E:26:22:DC:CE:11:A8:1E:A0:B7:4A:14:2E:D5:38:B2:C2
            X509v3 Authority Key Identifier:
                keyid:68:04:0A:EB:3A:C9:8B:5F:F3:C0:3D:98:E9:01:AB:81:77:34:3C:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68040AEB3AC98B5FF3C03D98E901AB8177343C76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/3137302e37392e3137362e302f32322d3232203d3e20323636333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         30:f9:31:a5:d3:53:c6:a1:5e:30:d7:2c:11:86:3a:3e:0f:8e:
         e0:5f:bc:cc:29:e6:f0:8c:ae:42:67:a2:20:eb:63:2e:a6:5d:
         a1:9d:53:be:66:ba:e6:37:1a:b2:0f:9c:e8:64:5f:af:ff:89:
         30:eb:d4:9a:4f:32:f4:cf:15:a7:4d:66:2e:6d:d1:aa:d4:92:
         ba:4f:67:34:e2:71:72:d3:50:93:63:b2:f6:47:e8:9e:79:03:
         d6:4c:a0:f1:d5:50:4b:6e:99:c9:1c:0c:9a:30:e1:3a:76:35:
         f5:49:46:7c:25:60:1c:16:92:7c:32:ee:10:d0:c5:66:99:a6:
         f0:cb:d1:b6:5e:5e:22:26:21:49:b6:2f:75:17:e3:9c:ed:43:
         c2:26:c4:95:6c:25:c3:12:b0:ed:8b:22:d9:79:7d:ab:e1:7d:
         6a:04:01:60:62:ca:9b:c9:f2:49:9b:38:b0:47:73:46:b8:3d:
         ea:c1:02:21:26:51:cf:2b:3e:78:22:06:fd:d0:ca:24:dc:02:
         52:05:6a:db:5e:e9:38:2e:6a:89:79:bc:99:7a:15:8b:50:f8:
         f1:25:39:88:68:d7:27:de:4b:2c:9c:d7:18:00:34:49:f3:e3:
         bd:70:01:a8:b8:62:78:c3:7f:aa:28:b0:20:06:16:86:01:09:
         de:db:3c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----