Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/34352e3232372e3135302e302f32342d3234203d3e20323637303335.roa
File:                     34352e3232372e3135302e302f32342d3234203d3e20323637303335.roa (raw, json)
Hash identifier:          SiZNu2pkCRbVvmxJHs22abZQD4zr0eeiEq0Tzaf/8fc=
Subject key identifier:   00:5A:4A:35:8A:2A:83:BC:97:42:CA:41:C8:6A:F7:87:80:79:3C:34
Certificate issuer:       /CN=2663AFA82E4602B5A7902552CC8E4A3120909A6F
Certificate serial:       3D927FA9F6E88AF1A7B7492491DAE139F60BC700
Authority key identifier: 26:63:AF:A8:2E:46:02:B5:A7:90:25:52:CC:8E:4A:31:20:90:9A:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2663AFA82E4602B5A7902552CC8E4A3120909A6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/34352e3232372e3135302e302f32342d3234203d3e20323637303335.roa
Signing time:             Fri 02 Oct 2026 19:20:35 +0000
ROA not before:           Fri 02 Oct 2026 19:15:35 +0000
ROA not after:            Fri 01 Oct 2027 19:20:35 +0000
asID:                     267035
IP address blocks:        45.227.150.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:92:7f:a9:f6:e8:8a:f1:a7:b7:49:24:91:da:e1:39:f6:0b:c7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2663AFA82E4602B5A7902552CC8E4A3120909A6F
        Validity
            Not Before: Oct  2 19:15:35 2026 GMT
            Not After : Oct  1 19:20:35 2027 GMT
        Subject: CN=005A4A358A2A83BC9742CA41C86AF78780793C34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ed:fb:6f:a8:f3:28:5a:ae:1b:9e:8f:16:d2:
                    8a:f4:86:54:69:31:67:da:c8:86:6b:56:65:e2:28:
                    f3:ed:8e:41:96:1a:87:df:db:51:77:97:fb:7f:39:
                    76:6d:84:98:80:b9:5a:88:93:cc:48:da:27:f4:38:
                    df:d2:c4:7f:3c:4f:13:5d:71:86:4d:06:51:6b:c9:
                    3b:d1:6f:c8:b5:14:f9:88:4e:b5:41:be:ec:0d:92:
                    78:ec:4a:47:3b:c6:b9:a9:24:82:80:7a:7a:12:46:
                    e0:d2:52:64:11:34:6a:17:08:9c:79:28:ba:55:d3:
                    4b:25:41:c5:10:88:4f:e1:de:73:bb:2c:db:03:f1:
                    a9:eb:cb:fb:14:48:74:06:b0:08:85:b2:96:2e:a7:
                    03:5f:c4:c0:da:c6:64:bc:ec:58:33:e3:49:73:f8:
                    9d:0b:a9:ff:26:be:2b:cd:b6:ad:cd:ed:e0:1b:09:
                    37:d3:cc:c3:8f:70:ad:d0:ec:f1:7f:ce:6b:af:ee:
                    da:9a:0f:12:6d:98:f1:1c:9b:b7:36:d7:0a:39:3c:
                    7c:e9:42:a6:f3:2c:7d:ae:4c:df:48:a5:a0:e5:d5:
                    aa:78:74:30:38:54:8b:cc:b8:a5:db:45:c5:0b:78:
                    f7:13:ca:b2:40:77:e3:0e:66:7a:1e:77:b4:ef:c8:
                    18:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:5A:4A:35:8A:2A:83:BC:97:42:CA:41:C8:6A:F7:87:80:79:3C:34
            X509v3 Authority Key Identifier:
                keyid:26:63:AF:A8:2E:46:02:B5:A7:90:25:52:CC:8E:4A:31:20:90:9A:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/2663AFA82E4602B5A7902552CC8E4A3120909A6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2663AFA82E4602B5A7902552CC8E4A3120909A6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/34352e3232372e3135302e302f32342d3234203d3e20323637303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:0f:3d:e1:2f:2b:0d:b1:3e:1c:71:60:0a:89:22:43:7d:55:
         6c:e8:21:e0:7d:2b:e2:5f:60:b4:b0:1a:d9:6d:7f:ab:cb:70:
         07:a3:64:4f:e3:49:bf:aa:f0:fc:5a:62:3e:e4:0d:36:a5:1c:
         53:2e:37:7a:05:67:56:9d:bf:69:f8:74:c4:aa:8b:d3:5c:ff:
         4b:f9:fd:68:0a:d1:04:bf:7b:0c:b6:ee:e0:f4:71:c9:1c:b1:
         a5:c6:fa:3b:32:dd:70:b7:2b:49:6f:42:8f:6d:37:85:61:96:
         56:3b:97:50:21:62:52:5a:cf:9d:98:c6:2d:a6:59:0c:61:40:
         9c:f4:29:f0:4f:0e:3b:55:9c:a6:35:90:d4:dd:84:7e:b4:0f:
         80:b1:44:38:c5:8b:e2:54:f1:f0:80:d1:59:df:8c:99:4b:fe:
         72:34:e4:80:3e:0d:83:8c:3a:8d:f1:97:be:31:80:98:ad:2c:
         d6:cc:0b:62:5e:62:65:eb:f4:26:4b:d5:b1:6a:81:80:a1:07:
         af:84:d7:41:b6:dc:5d:4a:69:19:fe:af:3d:3c:c9:1d:94:fa:
         b5:32:35:70:00:5c:6c:fd:09:51:ef:a7:59:b6:09:66:de:00:
         64:b6:29:24:30:ca:96:e9:c6:82:d2:b6:17:d7:80:ed:bf:01:
         4d:00:2e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----