Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/34352e3233372e3132342e302f32322d3234203d3e20323639303733.roa
File:                     34352e3233372e3132342e302f32322d3234203d3e20323639303733.roa (raw, json)
Hash identifier:          S4QQkW2DQkovsjDYWEOEoq4VpkW/BgP75fYatjylLas=
Subject key identifier:   4D:6D:5A:45:A2:37:55:05:9F:BC:1A:5C:FF:64:6F:30:53:56:32:6E
Certificate issuer:       /CN=3FF96820195E6A66E38F9102B4B56F0E4EB31831
Certificate serial:       24A6E9576196F25B340FF6A055A1B15DE03C6063
Authority key identifier: 3F:F9:68:20:19:5E:6A:66:E3:8F:91:02:B4:B5:6F:0E:4E:B3:18:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/34352e3233372e3132342e302f32322d3234203d3e20323639303733.roa
Signing time:             Fri 11 Sep 2026 12:59:11 +0000
ROA not before:           Fri 11 Sep 2026 12:54:11 +0000
ROA not after:            Fri 10 Sep 2027 12:59:11 +0000
asID:                     269073
IP address blocks:        45.237.124.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:a6:e9:57:61:96:f2:5b:34:0f:f6:a0:55:a1:b1:5d:e0:3c:60:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF96820195E6A66E38F9102B4B56F0E4EB31831
        Validity
            Not Before: Sep 11 12:54:11 2026 GMT
            Not After : Sep 10 12:59:11 2027 GMT
        Subject: CN=4D6D5A45A23755059FBC1A5CFF646F305356326E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:53:04:89:a1:20:b9:a7:20:46:61:92:2d:89:
                    4a:83:60:74:39:b9:4c:f1:a5:cc:25:4f:b0:ea:06:
                    1c:9d:50:dc:06:9f:d1:c2:ce:48:bf:1f:34:f5:e8:
                    2d:c3:f0:ae:f8:70:0f:40:e9:1c:52:76:a9:f4:62:
                    07:c2:7f:09:a5:f7:df:80:58:74:f0:fa:de:09:25:
                    e0:38:08:f6:99:d6:74:e9:f6:74:93:c1:e4:6a:e3:
                    65:48:f7:bd:51:a7:2c:08:a9:08:e2:af:a9:69:78:
                    ba:4e:0f:34:3e:f8:a9:58:d1:58:90:6a:fa:79:39:
                    ab:10:84:85:54:de:ee:c0:03:5b:9f:04:e9:d4:34:
                    e7:d1:c6:e4:3e:38:87:50:d1:93:cf:79:b7:0c:ae:
                    a1:67:a3:c0:ce:8a:cc:e7:ca:22:dc:a2:00:f6:06:
                    68:57:8c:f5:d9:9c:b3:da:a7:60:34:35:39:b3:fc:
                    f0:59:5c:d4:c7:ce:24:32:1a:62:fb:8a:9c:82:94:
                    e7:4e:ce:94:87:3d:1d:76:09:23:33:de:34:70:22:
                    4e:bd:58:97:c9:58:00:84:76:ab:9d:7d:7f:4a:d2:
                    5c:50:10:4d:e2:c7:5d:e7:e9:ca:33:71:60:c4:95:
                    3e:45:de:a5:d1:2c:fb:45:0e:db:f3:32:c5:12:98:
                    52:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:6D:5A:45:A2:37:55:05:9F:BC:1A:5C:FF:64:6F:30:53:56:32:6E
            X509v3 Authority Key Identifier:
                keyid:3F:F9:68:20:19:5E:6A:66:E3:8F:91:02:B4:B5:6F:0E:4E:B3:18:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/34352e3233372e3132342e302f32322d3234203d3e20323639303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         82:a6:99:b7:b6:58:96:f6:26:18:76:f8:af:3e:40:6a:48:df:
         30:2f:6a:d3:45:2e:e4:2d:b3:52:bf:57:e8:83:8a:7a:fd:c9:
         14:4b:7c:85:ac:de:26:47:fe:dc:12:72:aa:5a:73:64:9b:6c:
         25:69:4b:b0:a4:3a:c1:84:2b:93:84:a1:cf:7a:38:51:22:fc:
         dd:60:e8:fc:6c:22:2c:0c:12:9b:b3:dd:17:01:5b:dc:a4:1b:
         d1:1f:15:83:b2:0e:30:da:35:05:4c:a3:16:1a:4c:ce:80:1c:
         40:0b:ee:ae:fb:16:d4:f8:05:e2:6f:4d:7b:5a:bc:6c:6b:a2:
         3b:32:35:9c:e8:32:3f:64:48:db:10:f5:e1:e6:e8:2a:ff:be:
         1f:b8:18:7f:b8:a2:e2:c1:a0:28:d4:55:bf:93:03:27:d5:ea:
         fb:27:13:4c:63:23:4c:bf:ba:be:97:66:a6:15:c3:bc:b9:94:
         2b:59:61:b6:1d:96:89:6f:e8:6b:ed:0f:99:b5:46:22:d9:38:
         97:47:32:10:85:2a:26:a9:54:ff:2b:59:84:b4:a2:dd:f7:78:
         ac:7c:5f:14:01:f2:5a:98:85:66:8a:1b:04:46:56:1a:c9:f5:
         b9:b7:1b:fb:b6:68:18:d7:84:59:24:79:6b:49:e9:35:89:cf:
         94:e1:98:93
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUJKbpV2GW8ls0D/agVaGxXeA8YGMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0ZGOTY4MjAxOTVFNkE2NkUzOEY5MTAyQjRCNTZGMEU0
RUIzMTgzMTAeFw0yNjA5MTExMjU0MTFaFw0yNzA5MTAxMjU5MTFaMDMxMTAvBgNV
BAMTKDRENkQ1QTQ1QTIzNzU1MDU5RkJDMUE1Q0ZGNjQ2RjMwNTM1NjMyNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPUwSJoSC5pyBGYZItiUqDYHQ5
uUzxpcwlT7DqBhydUNwGn9HCzki/HzT16C3D8K74cA9A6RxSdqn0YgfCfwml99+A
WHTw+t4JJeA4CPaZ1nTp9nSTweRq42VI971RpywIqQjir6lpeLpODzQ++KlY0ViQ
avp5OasQhIVU3u7AA1ufBOnUNOfRxuQ+OIdQ0ZPPebcMrqFno8DOisznyiLcogD2
BmhXjPXZnLPap2A0NTmz/PBZXNTHziQyGmL7ipyClOdOzpSHPR12CSMz3jRwIk69
WJfJWACEdqudfX9K0lxQEE3ix13n6cozcWDElT5F3qXRLPtFDtvzMsUSmFI9AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUTW1aRaI3VQWfvBpc/2RvMFNWMm4wHwYDVR0j
BBgwFoAUP/loIBleambjj5ECtLVvDk6zGDEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQnZHekg2UHFkNzlwMzM5RzNlRDIyczlSVEtVeWdMb05YTkVodk5acXp2
OTMvMC8zRkY5NjgyMDE5NUU2QTY2RTM4RjkxMDJCNEI1NkYwRTRFQjMxODMxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNGRjk2ODIwMTk1RTZBNjZF
MzhGOTEwMkI0QjU2RjBFNEVCMzE4MzEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0J2R3pINlBxZDc5cDMzOUczZUQyMnM5UlRLVXlnTG9OWE5FaHZOWnF6djkzLzAv
MzQzNTJlMzIzMzM3MmUzMTMyMzQyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzkzMDM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt7XwwDQYJKoZIhvcNAQELBQADggEBAIKmmbe2
WJb2Jhh2+K8+QGpI3zAvatNFLuQts1K/V+iDinr9yRRLfIWs3iZH/twScqpac2Sb
bCVpS7CkOsGEK5OEoc96OFEi/N1g6PxsIiwMEpuz3RcBW9ykG9EfFYOyDjDaNQVM
oxYaTM6AHEAL7q77FtT4BeJvTXtavGxrojsyNZzoMj9kSNsQ9eHm6Cr/vh+4GH+4
ouLBoCjUVb+TAyfV6vsnE0xjI0y/ur6XZqYVw7y5lCtZYbYdlolv6GvtD5m1RiLZ
OJdHMhCFKiapVP8rWYS0ot33eKx8XxQB8lqYhWaKGwRGVhrJ9bm3G/u2aBjXhFkk
eWtJ6TWJz5ThmJM=
-----END CERTIFICATE-----