Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/34352e3232372e3134382e302f32342d3234203d3e20323637303335.roa
File:                     34352e3232372e3134382e302f32342d3234203d3e20323637303335.roa (raw, json)
Hash identifier:          /I98/5oCoG6BlPjNslr/otWTLRkfRr8m2nYFSPHpVHI=
Subject key identifier:   AC:57:24:1F:0B:EE:26:DE:07:6A:2D:99:FE:BE:3A:D3:4D:7B:CF:17
Certificate issuer:       /CN=2663AFA82E4602B5A7902552CC8E4A3120909A6F
Certificate serial:       379A60CB15D435EF7E44A591D9B8FECE6ACE7E66
Authority key identifier: 26:63:AF:A8:2E:46:02:B5:A7:90:25:52:CC:8E:4A:31:20:90:9A:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2663AFA82E4602B5A7902552CC8E4A3120909A6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/34352e3232372e3134382e302f32342d3234203d3e20323637303335.roa
Signing time:             Fri 02 Oct 2026 19:20:35 +0000
ROA not before:           Fri 02 Oct 2026 19:15:35 +0000
ROA not after:            Fri 01 Oct 2027 19:20:35 +0000
asID:                     267035
IP address blocks:        45.227.148.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:9a:60:cb:15:d4:35:ef:7e:44:a5:91:d9:b8:fe:ce:6a:ce:7e:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2663AFA82E4602B5A7902552CC8E4A3120909A6F
        Validity
            Not Before: Oct  2 19:15:35 2026 GMT
            Not After : Oct  1 19:20:35 2027 GMT
        Subject: CN=AC57241F0BEE26DE076A2D99FEBE3AD34D7BCF17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1b:26:e7:fa:c3:63:b9:49:f8:79:10:09:8c:
                    47:db:c9:62:86:af:39:c1:c8:ea:29:14:e9:85:c1:
                    db:2c:b1:9d:97:3c:7c:26:2d:0b:6a:c0:78:20:f3:
                    14:e4:5b:b3:4b:62:74:e9:75:1b:2b:84:1a:65:71:
                    b7:9a:b3:27:7a:65:83:6b:d7:32:ca:ed:e6:7b:1a:
                    84:5a:31:c1:8f:15:aa:88:e7:90:63:25:df:20:68:
                    92:62:c2:58:c4:ac:09:df:44:a6:a8:36:e8:5a:3e:
                    9a:1d:18:05:30:42:c6:fa:ab:12:21:42:cc:d8:c5:
                    3a:62:d3:8e:d2:fc:b0:a9:76:da:e2:d4:94:3e:2b:
                    55:1f:29:8b:9f:50:f5:62:5d:b6:b1:e1:bd:9a:20:
                    fe:9c:ef:99:cb:c0:f0:7d:9e:de:b9:72:8a:44:c9:
                    cf:ea:25:ea:31:a7:3d:30:23:34:fe:98:4e:4e:0c:
                    5c:f3:2a:63:7f:15:02:9b:0b:d2:13:c0:38:27:64:
                    ff:a8:b6:dd:a6:52:ac:ee:22:be:5b:90:2f:c1:63:
                    bb:31:16:c8:ca:c6:f3:ce:5d:7c:5c:20:91:6a:ca:
                    cd:65:9a:35:21:3a:63:84:0e:61:06:3d:b9:8d:e8:
                    59:66:be:08:df:bf:68:30:f6:59:aa:dd:7d:13:f6:
                    24:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:57:24:1F:0B:EE:26:DE:07:6A:2D:99:FE:BE:3A:D3:4D:7B:CF:17
            X509v3 Authority Key Identifier:
                keyid:26:63:AF:A8:2E:46:02:B5:A7:90:25:52:CC:8E:4A:31:20:90:9A:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/2663AFA82E4602B5A7902552CC8E4A3120909A6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2663AFA82E4602B5A7902552CC8E4A3120909A6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/34352e3232372e3134382e302f32342d3234203d3e20323637303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:d9:ad:11:4e:e4:ec:b7:c4:25:a1:d3:2f:0c:31:cf:f9:fe:
         65:b4:d5:cd:11:d2:0f:dc:2c:43:e8:6f:58:cb:f5:1a:ea:a3:
         4a:27:9e:55:0a:ef:73:b8:51:df:cc:81:11:16:a0:48:da:c9:
         d1:aa:5d:bb:9f:85:7b:31:57:87:4e:58:0c:e2:7d:4d:6b:31:
         94:c1:5a:11:89:3c:bf:63:15:1b:54:46:a6:53:91:0c:50:d5:
         41:00:c6:48:60:54:47:f8:9a:7d:01:02:ba:a3:70:4f:35:bc:
         c3:4f:15:a6:73:19:c9:49:6f:5e:38:60:4a:de:40:c6:fb:c8:
         a9:f5:d6:35:71:75:1a:b7:8b:a3:e0:02:56:db:20:5f:4e:ea:
         84:3e:be:5e:68:f0:08:3f:2d:06:f5:96:7a:37:2c:39:27:a8:
         3e:eb:0e:e4:09:20:4b:5f:e7:1a:dd:02:35:21:f9:ee:f1:c1:
         dc:d6:f3:80:39:6d:bd:3d:4b:8e:2d:d6:2c:d5:2b:0c:4e:bd:
         5c:bd:00:5e:7e:3b:56:e7:67:79:2c:77:96:44:51:d1:b3:c6:
         96:53:ec:ce:5d:0f:5e:d3:74:a5:d0:d0:a0:f1:68:e1:72:60:
         14:08:fd:6f:15:20:d2:29:a1:35:47:6d:e3:2a:65:d3:36:16:
         5b:e1:4e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----