Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/34352e3137392e33362e302f32322d3234203d3e20323639303733.roa
File:                     34352e3137392e33362e302f32322d3234203d3e20323639303733.roa (raw, json)
Hash identifier:          l8VHauZDBLWow+xYtQlwPF3A1frI3ZfAjCGhnUanDjM=
Subject key identifier:   11:89:52:59:4A:6B:B0:27:E5:E1:13:8E:C3:9B:7D:63:F5:FB:6B:10
Certificate issuer:       /CN=3FF96820195E6A66E38F9102B4B56F0E4EB31831
Certificate serial:       7E8EA3CFF7D01FC28178940D664CEB3EF4C1EA5F
Authority key identifier: 3F:F9:68:20:19:5E:6A:66:E3:8F:91:02:B4:B5:6F:0E:4E:B3:18:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/34352e3137392e33362e302f32322d3234203d3e20323639303733.roa
Signing time:             Fri 11 Sep 2026 13:02:05 +0000
ROA not before:           Fri 11 Sep 2026 12:57:05 +0000
ROA not after:            Fri 10 Sep 2027 13:02:05 +0000
asID:                     269073
IP address blocks:        45.179.36.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:8e:a3:cf:f7:d0:1f:c2:81:78:94:0d:66:4c:eb:3e:f4:c1:ea:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF96820195E6A66E38F9102B4B56F0E4EB31831
        Validity
            Not Before: Sep 11 12:57:05 2026 GMT
            Not After : Sep 10 13:02:05 2027 GMT
        Subject: CN=118952594A6BB027E5E1138EC39B7D63F5FB6B10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:fc:d5:86:12:3f:4c:02:d7:68:98:03:84:69:
                    d7:b0:cc:fd:c3:bd:9c:7b:aa:29:23:ca:4b:14:73:
                    1e:76:1f:39:1a:c1:d2:31:fc:24:95:ed:7a:45:20:
                    79:5c:19:c4:ba:f4:5f:0e:da:86:bf:1a:cd:dd:df:
                    2d:e6:ba:48:2e:a6:ab:6a:e2:f8:1c:ea:a2:cc:97:
                    00:cb:0c:cb:c7:74:03:e8:6d:7e:b4:6a:bf:0b:ac:
                    24:82:cb:67:c7:c0:ba:dc:82:93:fa:93:c1:8e:2e:
                    8a:6b:df:7d:63:58:b1:4d:eb:48:ff:b7:92:ed:dd:
                    bc:47:6d:71:57:c4:4d:27:26:b6:9f:35:cd:7b:32:
                    29:db:d7:ff:1d:cd:4f:be:ce:5c:86:e5:2c:7b:03:
                    ba:6c:8c:2c:f9:74:ee:04:2e:98:f6:ad:11:de:a7:
                    1f:a3:cb:e3:96:72:20:1a:13:a0:26:4f:c6:ad:3f:
                    88:ae:f6:13:7f:cb:75:b0:30:0e:76:4f:fd:ec:8c:
                    cd:fa:95:ff:e7:18:8e:41:c2:5a:dd:7c:67:6c:f6:
                    0b:78:5c:13:1d:03:03:d2:e0:be:72:a1:4a:76:23:
                    47:56:dc:0c:2f:ea:61:fd:bf:ad:45:75:98:75:31:
                    56:25:19:97:11:14:e1:44:84:8a:a5:3a:60:26:f9:
                    81:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:89:52:59:4A:6B:B0:27:E5:E1:13:8E:C3:9B:7D:63:F5:FB:6B:10
            X509v3 Authority Key Identifier:
                keyid:3F:F9:68:20:19:5E:6A:66:E3:8F:91:02:B4:B5:6F:0E:4E:B3:18:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/34352e3137392e33362e302f32322d3234203d3e20323639303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:c1:5b:4c:c5:65:37:51:41:16:8b:39:ed:05:bd:08:52:b2:
         f5:cf:48:99:cf:0c:9b:b6:f3:33:81:02:ff:89:ad:b6:00:06:
         ea:09:17:7c:47:d1:2f:fe:79:d7:5c:86:d5:07:6b:f9:b9:63:
         a1:d3:1b:ed:17:0e:6a:24:b3:8a:fa:43:4f:18:24:a9:07:47:
         07:3a:fc:7e:c3:e9:43:ea:cf:23:bf:e7:a6:45:f0:d0:0d:4e:
         02:98:95:d6:6d:b1:d6:f1:c4:ec:a7:df:25:cf:82:11:33:5a:
         91:8f:c9:74:12:85:37:c7:8e:06:20:b9:8d:f0:03:0c:b6:1f:
         8b:d1:e7:f4:5e:85:11:4d:72:ab:f0:1e:3b:0b:c7:81:74:82:
         fe:16:bd:31:1b:ae:03:43:42:56:ce:08:93:be:bd:e4:d4:98:
         eb:e0:bf:9b:f2:69:0c:8f:7d:93:07:30:eb:20:16:4a:48:95:
         b0:ba:15:75:3e:7b:b4:40:1f:01:a4:d8:a8:9b:10:9c:97:de:
         5f:32:59:4d:2a:1e:e3:1a:a0:97:29:09:09:8d:50:4f:9b:4d:
         34:67:b6:cf:4c:fc:e4:43:0f:b3:69:0d:24:de:72:38:55:97:
         c7:9e:21:34:a2:1a:a8:79:08:0b:bb:e3:40:f8:12:be:a4:b0:
         b2:73:e7:1b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUfo6jz/fQH8KBeJQNZkzrPvTB6l8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0ZGOTY4MjAxOTVFNkE2NkUzOEY5MTAyQjRCNTZGMEU0
RUIzMTgzMTAeFw0yNjA5MTExMjU3MDVaFw0yNzA5MTAxMzAyMDVaMDMxMTAvBgNV
BAMTKDExODk1MjU5NEE2QkIwMjdFNUUxMTM4RUMzOUI3RDYzRjVGQjZCMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCI/NWGEj9MAtdomAOEadewzP3D
vZx7qikjyksUcx52HzkawdIx/CSV7XpFIHlcGcS69F8O2oa/Gs3d3y3mukgupqtq
4vgc6qLMlwDLDMvHdAPobX60ar8LrCSCy2fHwLrcgpP6k8GOLopr331jWLFN60j/
t5Lt3bxHbXFXxE0nJrafNc17Minb1/8dzU++zlyG5Sx7A7psjCz5dO4ELpj2rRHe
px+jy+OWciAaE6AmT8atP4iu9hN/y3WwMA52T/3sjM36lf/nGI5BwlrdfGds9gt4
XBMdAwPS4L5yoUp2I0dW3Awv6mH9v61FdZh1MVYlGZcRFOFEhIqlOmAm+YHJAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUEYlSWUprsCfl4ROOw5t9Y/X7axAwHwYDVR0j
BBgwFoAUP/loIBleambjj5ECtLVvDk6zGDEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnZHekg2UHFkNzlwMzM5RzNlRDIyczlSVEtVeWdMb05YTkVodk5acXp2
OTMvMC8zRkY5NjgyMDE5NUU2QTY2RTM4RjkxMDJCNEI1NkYwRTRFQjMxODMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGRjk2ODIwMTk1RTZBNjZF
MzhGOTEwMkI0QjU2RjBFNEVCMzE4MzEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J2R3pINlBxZDc5cDMzOUczZUQyMnM5UlRLVXlnTG9OWE5FaHZOWnF6djkzLzAv
MzQzNTJlMzEzNzM5MmUzMzM2MmUzMDJmMzIzMjJkMzIzNDIwM2QzZTIwMzIzNjM5
MzAzNzMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCLbMkMA0GCSqGSIb3DQEBCwUAA4IBAQA3wVtMxWU3
UUEWizntBb0IUrL1z0iZzwybtvMzgQL/ia22AAbqCRd8R9Ev/nnXXIbVB2v5uWOh
0xvtFw5qJLOK+kNPGCSpB0cHOvx+w+lD6s8jv+emRfDQDU4CmJXWbbHW8cTsp98l
z4IRM1qRj8l0EoU3x44GILmN8AMMth+L0ef0XoURTXKr8B47C8eBdIL+Fr0xG64D
Q0JWzgiTvr3k1Jjr4L+b8mkMj32TBzDrIBZKSJWwuhV1Pnu0QB8BpNiomxCcl95f
MllNKh7jGqCXKQkJjVBPm000Z7bPTPzkQw+zaQ0k3nI4VZfHniE0ohqoeQgLu+NA
+BK+pLCyc+cb
-----END CERTIFICATE-----