Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9Jntmgh3CAPNBCL9EALqgi6ffxESBTypqRrVfqixHCsj/0/34352e3233342e3230382e302f32322d3332203d3e20323637333835.roa
File:                     34352e3233342e3230382e302f32322d3332203d3e20323637333835.roa (raw, json)
Hash identifier:          dcevSvKtgmP7ts46/zx+GyJ4R7AbvsIlZp4twGpfXbA=
Subject key identifier:   B7:0F:B6:69:2C:5D:9B:43:A4:02:6D:EF:FA:5E:3F:1A:64:0B:2B:AC
Certificate issuer:       /CN=6A5B16AEC8348B57904C412B6C3890934D8DB104
Certificate serial:       16374440B40A81C95B1613562699152E3BA94170
Authority key identifier: 6A:5B:16:AE:C8:34:8B:57:90:4C:41:2B:6C:38:90:93:4D:8D:B1:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A5B16AEC8348B57904C412B6C3890934D8DB104.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Jntmgh3CAPNBCL9EALqgi6ffxESBTypqRrVfqixHCsj/0/34352e3233342e3230382e302f32322d3332203d3e20323637333835.roa
Signing time:             Thu 03 Sep 2026 18:53:21 +0000
ROA not before:           Thu 03 Sep 2026 18:48:21 +0000
ROA not after:            Thu 02 Sep 2027 18:53:21 +0000
asID:                     267385
IP address blocks:        45.234.208.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:37:44:40:b4:0a:81:c9:5b:16:13:56:26:99:15:2e:3b:a9:41:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A5B16AEC8348B57904C412B6C3890934D8DB104
        Validity
            Not Before: Sep  3 18:48:21 2026 GMT
            Not After : Sep  2 18:53:21 2027 GMT
        Subject: CN=B70FB6692C5D9B43A4026DEFFA5E3F1A640B2BAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0f:3f:ed:8c:01:94:43:75:4b:44:56:ad:e2:
                    8c:c5:26:21:13:b4:50:08:50:09:e8:b6:00:95:53:
                    1b:34:e1:b6:cc:a5:20:cb:92:00:e5:47:e0:59:fb:
                    d9:66:d0:82:26:91:54:8c:e6:8a:15:e8:c2:1f:3c:
                    bb:1e:45:6d:1a:20:e1:a1:3d:41:94:91:ef:9c:52:
                    ae:f1:58:98:3d:c0:d9:8f:57:b8:28:81:75:0d:58:
                    20:18:1c:7a:17:eb:e4:10:b2:78:96:f3:46:68:60:
                    22:82:f4:44:39:e8:6d:98:e1:a2:65:75:50:dc:4f:
                    ad:57:c4:a2:a0:59:f6:97:8e:cc:ea:ec:5f:8d:a4:
                    22:5f:05:62:42:00:30:db:8d:c2:fa:75:0b:b8:60:
                    2d:5c:87:9b:75:59:60:1e:da:89:22:5a:14:01:aa:
                    9c:e2:96:f6:ca:99:71:8c:ae:ca:ce:9d:6b:8e:fe:
                    3c:65:cb:0a:19:c6:53:8c:f2:cd:21:ad:75:25:25:
                    cb:ef:44:3b:35:3c:d8:89:d9:5b:17:67:63:3b:d2:
                    f7:cd:69:d6:1f:60:55:ff:09:01:cf:6a:72:f3:82:
                    ae:c0:8c:18:9f:53:6c:ec:90:db:89:31:17:fe:59:
                    38:b1:4a:54:ab:f3:fd:36:71:e8:91:2a:84:bd:ae:
                    55:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:0F:B6:69:2C:5D:9B:43:A4:02:6D:EF:FA:5E:3F:1A:64:0B:2B:AC
            X509v3 Authority Key Identifier:
                keyid:6A:5B:16:AE:C8:34:8B:57:90:4C:41:2B:6C:38:90:93:4D:8D:B1:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Jntmgh3CAPNBCL9EALqgi6ffxESBTypqRrVfqixHCsj/0/6A5B16AEC8348B57904C412B6C3890934D8DB104.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A5B16AEC8348B57904C412B6C3890934D8DB104.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Jntmgh3CAPNBCL9EALqgi6ffxESBTypqRrVfqixHCsj/0/34352e3233342e3230382e302f32322d3332203d3e20323637333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:91:87:a1:2d:38:fe:4b:26:eb:80:9a:d2:4e:75:1e:74:84:
         6a:3e:df:29:82:07:1a:62:c2:74:ce:85:9d:f6:34:01:c9:10:
         10:41:cd:8e:1c:55:50:0f:f7:9d:a4:b9:c9:0d:60:91:1e:5c:
         8d:62:3d:94:08:b4:19:32:d3:f9:d7:b1:4d:c4:86:e4:89:23:
         c3:8b:8c:2c:9a:c2:ac:f5:65:2d:27:b0:40:78:7b:4e:2a:60:
         68:e1:d5:bd:ae:dc:0b:d2:e0:1c:c6:6e:51:48:4f:e5:6d:d3:
         0c:92:6c:3a:fc:7b:7c:3d:bb:0d:28:06:01:67:f4:28:e8:b4:
         71:3c:67:9b:12:99:81:b8:b6:29:8a:6e:02:83:f3:ab:77:9c:
         5b:65:7d:11:73:01:e3:a6:af:0c:bd:cc:a3:31:fa:6c:83:e4:
         38:e4:da:77:76:a2:82:b2:57:19:8e:ff:43:00:a3:b8:b5:a9:
         49:77:7e:d3:83:76:28:a1:b1:bb:f7:1b:ec:0f:4c:4f:0e:3c:
         50:d2:91:b4:ac:d2:6f:4c:1e:e2:a3:6e:12:5c:d0:1c:89:7c:
         c3:63:32:69:f6:5c:7f:bd:c9:31:8d:44:33:42:6f:fc:0b:12:
         ed:41:88:25:d3:e1:a5:5e:21:78:7f:50:7e:0d:3a:44:db:13:
         58:bd:65:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----