Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/34352e3232372e3134382e302f32332d3233203d3e20323637303335.roa
File:                     34352e3232372e3134382e302f32332d3233203d3e20323637303335.roa (raw, json)
Hash identifier:          t8Rae3QnE3KfPiFqNv8vcj1qtgUyd7o85ZTKbzYrkG0=
Subject key identifier:   68:60:7A:61:32:BD:E4:D0:A2:61:A8:ED:C7:92:F2:D8:DE:4B:00:A0
Certificate issuer:       /CN=2663AFA82E4602B5A7902552CC8E4A3120909A6F
Certificate serial:       5DD477A9E8CE7FED31AFE6E71658E2C8E51A6E85
Authority key identifier: 26:63:AF:A8:2E:46:02:B5:A7:90:25:52:CC:8E:4A:31:20:90:9A:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2663AFA82E4602B5A7902552CC8E4A3120909A6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/34352e3232372e3134382e302f32332d3233203d3e20323637303335.roa
Signing time:             Fri 02 Oct 2026 19:20:34 +0000
ROA not before:           Fri 02 Oct 2026 19:15:34 +0000
ROA not after:            Fri 01 Oct 2027 19:20:34 +0000
asID:                     267035
IP address blocks:        45.227.148.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:d4:77:a9:e8:ce:7f:ed:31:af:e6:e7:16:58:e2:c8:e5:1a:6e:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2663AFA82E4602B5A7902552CC8E4A3120909A6F
        Validity
            Not Before: Oct  2 19:15:34 2026 GMT
            Not After : Oct  1 19:20:34 2027 GMT
        Subject: CN=68607A6132BDE4D0A261A8EDC792F2D8DE4B00A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a0:c9:2e:b1:bd:6a:86:78:ef:8b:c9:86:ee:
                    fa:05:72:6b:45:50:fa:f4:13:c5:6a:f2:ea:ec:b4:
                    43:63:bf:c0:15:4c:18:b9:fd:c3:fe:32:af:03:6d:
                    3d:9c:3d:5b:6a:f8:b4:2d:ff:e8:67:77:5c:c6:17:
                    d3:19:df:2c:5c:34:35:4a:c0:9b:ca:1b:b9:56:e0:
                    50:94:5f:17:2c:c4:f7:71:e4:2c:46:5b:b8:0a:85:
                    64:cb:d1:1b:53:2f:57:e8:f6:71:51:5f:27:6f:4d:
                    64:56:db:98:bc:cd:39:af:13:a1:5a:dd:34:38:b4:
                    51:12:d6:d9:05:b7:00:2f:8d:ac:7f:cd:07:de:28:
                    17:6c:97:c3:51:87:ba:a8:9d:be:9d:53:02:0c:d8:
                    75:e9:bf:a0:7f:54:4f:21:4b:aa:00:09:94:97:bc:
                    e7:c0:43:10:43:76:cf:8a:5c:62:2d:76:08:5c:2d:
                    6e:e6:5c:b3:74:a1:21:e0:3e:c7:4c:8b:b7:3d:d1:
                    a6:84:09:b1:08:b9:06:0f:e5:2e:fc:1d:65:ad:41:
                    c0:6c:1c:01:c9:a2:64:6b:47:3c:16:77:78:15:af:
                    68:ec:30:12:f1:8a:2b:3f:c2:b5:1c:9a:2e:4a:9b:
                    72:9a:d0:73:59:f2:f7:eb:36:cd:15:ee:28:ca:f9:
                    5c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:60:7A:61:32:BD:E4:D0:A2:61:A8:ED:C7:92:F2:D8:DE:4B:00:A0
            X509v3 Authority Key Identifier:
                keyid:26:63:AF:A8:2E:46:02:B5:A7:90:25:52:CC:8E:4A:31:20:90:9A:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/2663AFA82E4602B5A7902552CC8E4A3120909A6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2663AFA82E4602B5A7902552CC8E4A3120909A6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/34352e3232372e3134382e302f32332d3233203d3e20323637303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:e7:21:51:2e:76:00:c9:4d:0f:19:3e:19:4f:9a:23:fc:98:
         66:b7:ad:96:df:5b:b4:fa:e2:9c:3a:1f:df:88:e3:25:2e:cd:
         ba:f7:5f:e9:66:e9:d1:1b:b6:2a:7e:40:18:cb:a7:38:29:14:
         e9:9d:93:18:04:36:96:2a:7a:cf:03:c4:49:d0:30:a2:30:4b:
         9a:97:5e:3e:60:49:0b:ba:af:94:ae:ec:c2:ae:70:5f:6a:e1:
         8e:61:36:9b:00:5c:6d:36:bc:c8:5a:9c:92:b3:0e:06:1e:1f:
         6c:cd:b4:3d:00:a2:ec:70:55:60:2e:06:57:bf:0c:3a:fd:29:
         65:3b:67:55:f0:9f:f8:1d:a2:9e:ae:8e:9a:69:6f:28:16:df:
         7d:5f:40:dc:e7:8d:0f:e6:af:61:6b:39:93:94:94:da:59:59:
         57:0b:5d:ac:73:d7:cd:c2:14:cf:f4:7a:9d:c2:ee:69:7c:da:
         fb:bd:32:08:f9:c1:23:c7:45:d8:eb:99:10:7b:d7:a0:80:cd:
         fa:77:52:68:e1:aa:3a:f2:9d:f7:be:10:f8:94:1e:75:c4:27:
         74:fe:ac:b1:57:86:39:cb:19:7a:57:6f:bd:8e:a6:a8:09:00:
         cc:18:84:b0:9b:65:80:72:9b:a3:e2:61:f5:c8:29:ef:d5:b6:
         3e:10:16:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----