Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/34352e3232372e3135312e302f32342d3234203d3e20323637303335.roa
File:                     34352e3232372e3135312e302f32342d3234203d3e20323637303335.roa (raw, json)
Hash identifier:          ERujdVi9824hQXP3bC4wMjPdMn+t1mSXzxPjVY/vhWk=
Subject key identifier:   E4:86:E1:15:70:AE:4A:8C:42:CA:B4:12:E3:C5:85:E7:BD:BF:A3:37
Certificate issuer:       /CN=2663AFA82E4602B5A7902552CC8E4A3120909A6F
Certificate serial:       096427C08FA614C768FB658984E4B1DB65B67925
Authority key identifier: 26:63:AF:A8:2E:46:02:B5:A7:90:25:52:CC:8E:4A:31:20:90:9A:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2663AFA82E4602B5A7902552CC8E4A3120909A6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/34352e3232372e3135312e302f32342d3234203d3e20323637303335.roa
Signing time:             Fri 02 Oct 2026 19:20:35 +0000
ROA not before:           Fri 02 Oct 2026 19:15:35 +0000
ROA not after:            Fri 01 Oct 2027 19:20:35 +0000
asID:                     267035
IP address blocks:        45.227.151.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:64:27:c0:8f:a6:14:c7:68:fb:65:89:84:e4:b1:db:65:b6:79:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2663AFA82E4602B5A7902552CC8E4A3120909A6F
        Validity
            Not Before: Oct  2 19:15:35 2026 GMT
            Not After : Oct  1 19:20:35 2027 GMT
        Subject: CN=E486E11570AE4A8C42CAB412E3C585E7BDBFA337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ab:2b:f4:74:1a:ae:18:4e:1e:39:df:a0:6c:
                    d8:f1:18:0a:13:67:62:30:9b:3f:53:c7:d9:36:61:
                    c0:94:a5:0e:d7:ab:c7:59:bf:e8:2a:f8:7a:ac:fd:
                    7f:8d:ed:2d:55:7a:ca:98:d1:e6:51:80:d2:bb:09:
                    66:55:f8:e4:33:a3:e1:c8:ae:bd:0b:6e:1b:08:69:
                    75:b8:af:1d:ee:fa:57:c9:16:07:25:42:12:a1:d8:
                    0b:d4:54:f3:a0:27:5b:4a:87:d5:fc:3d:47:5d:48:
                    f7:b5:ee:a0:2e:dd:d9:03:62:ad:ca:8d:84:61:b7:
                    d4:59:8b:f0:8e:0c:c6:9b:cc:d2:47:98:af:8e:c3:
                    d8:38:a1:ad:20:5a:4e:5e:f6:22:ac:f2:c6:6f:26:
                    53:6f:00:44:d4:3a:50:b7:71:7a:62:3e:76:1e:a9:
                    77:c3:ce:d0:68:86:5f:13:c3:58:21:27:ac:8f:2a:
                    cf:0f:b7:f0:78:d4:75:f9:d0:09:e1:e0:fe:26:2f:
                    1a:a0:32:c6:17:a2:84:45:72:14:06:04:07:1b:59:
                    e4:93:78:fe:3b:d3:19:36:19:91:04:f1:04:b5:5f:
                    09:93:64:69:1e:68:19:54:83:2b:94:be:83:f0:17:
                    11:c2:50:f0:c2:1c:22:0b:a0:89:1a:9d:24:c8:17:
                    b9:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:86:E1:15:70:AE:4A:8C:42:CA:B4:12:E3:C5:85:E7:BD:BF:A3:37
            X509v3 Authority Key Identifier:
                keyid:26:63:AF:A8:2E:46:02:B5:A7:90:25:52:CC:8E:4A:31:20:90:9A:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/2663AFA82E4602B5A7902552CC8E4A3120909A6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2663AFA82E4602B5A7902552CC8E4A3120909A6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/34352e3232372e3135312e302f32342d3234203d3e20323637303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.151.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:8a:df:20:f1:a0:d2:60:69:7e:18:64:a5:b6:bd:2e:13:c0:
         41:45:4f:53:ad:5a:bf:60:60:a4:bc:13:11:d1:a3:53:fc:7d:
         b5:d9:b8:6e:62:eb:72:98:cc:d2:91:39:c9:d3:78:ce:1c:2f:
         c5:ad:00:10:fb:59:d6:4d:44:b1:e6:13:f5:d2:4d:d5:53:f5:
         02:31:b4:ad:53:ec:12:6c:dc:22:09:28:60:91:24:c8:29:c5:
         5b:7b:f7:b2:48:d2:c7:8c:4b:bd:ed:65:a9:55:fd:7e:fb:da:
         ff:db:f6:77:eb:d4:39:e2:4f:9c:c7:87:41:a4:56:2f:51:e0:
         9c:f3:c4:72:c4:9c:92:41:77:6d:e1:e9:b3:d5:9d:51:31:34:
         f7:ea:2b:6f:7e:59:5b:4b:43:90:5d:94:5b:b1:35:29:07:a3:
         36:c1:31:60:a8:66:33:6b:55:45:62:a3:d7:b8:2e:ff:a0:76:
         29:53:4f:47:45:b9:22:3e:62:82:09:83:3c:9f:8f:11:39:72:
         66:0e:37:75:57:17:74:8c:30:71:79:ab:86:98:c9:ab:07:56:
         f8:a8:f9:bc:c0:e5:9b:c9:7c:08:15:be:85:e4:39:cc:58:d0:
         0d:b0:af:ff:f2:96:9f:07:c8:64:1d:b0:62:9e:91:79:cb:fa:
         f2:6e:c5:ca
-----BEGIN CERTIFICATE-----
MIIFRDCCBCygAwIBAgIUCWQnwI+mFMdo+2WJhOSx22W2eSUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjY2M0FGQTgyRTQ2MDJCNUE3OTAyNTUyQ0M4RTRBMzEy
MDkwOUE2RjAeFw0yNjEwMDIxOTE1MzVaFw0yNzEwMDExOTIwMzVaMDMxMTAvBgNV
BAMTKEU0ODZFMTE1NzBBRTRBOEM0MkNBQjQxMkUzQzU4NUU3QkRCRkEzMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTqyv0dBquGE4eOd+gbNjxGAoT
Z2Iwmz9Tx9k2YcCUpQ7Xq8dZv+gq+Hqs/X+N7S1VesqY0eZRgNK7CWZV+OQzo+HI
rr0LbhsIaXW4rx3u+lfJFgclQhKh2AvUVPOgJ1tKh9X8PUddSPe17qAu3dkDYq3K
jYRht9RZi/CODMabzNJHmK+Ow9g4oa0gWk5e9iKs8sZvJlNvAETUOlC3cXpiPnYe
qXfDztBohl8Tw1ghJ6yPKs8Pt/B41HX50Anh4P4mLxqgMsYXooRFchQGBAcbWeST
eP470xk2GZEE8QS1XwmTZGkeaBlUgyuUvoPwFxHCUPDCHCILoIkanSTIF7nnAgMB
AAGjggJOMIICSjAdBgNVHQ4EFgQU5IbhFXCuSoxCyrQS48WF572/ozcwHwYDVR0j
BBgwFoAUJmOvqC5GArWnkCVSzI5KMSCQmm8wDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9ZSm5SQlVvTFZyZ1Y2dktvTDdtaVVwZ3E1b0xLa25MZFlGeTRoaWRVM0U2
LzAvMjY2M0FGQTgyRTQ2MDJCNUE3OTAyNTUyQ0M4RTRBMzEyMDkwOUE2Ri5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS8yNjYzQUZBODJFNDYwMkI1QTc5
MDI1NTJDQzhFNEEzMTIwOTA5QTZGLmNlcjCBrQYIKwYBBQUHAQsEgaAwgZ0wgZoG
CCsGAQUFBzALhoGNcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9Z
Sm5SQlVvTFZyZ1Y2dktvTDdtaVVwZ3E1b0xLa25MZFlGeTRoaWRVM0U2LzAvMzQz
NTJlMzIzMjM3MmUzMTM1MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2Mzcz
MDMzMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAAt45cwDQYJKoZIhvcNAQELBQADggEBAESK3yDxoNJg
aX4YZKW2vS4TwEFFT1OtWr9gYKS8ExHRo1P8fbXZuG5i63KYzNKROcnTeM4cL8Wt
ABD7WdZNRLHmE/XSTdVT9QIxtK1T7BJs3CIJKGCRJMgpxVt797JI0seMS73tZalV
/X772v/b9nfr1DniT5zHh0GkVi9R4JzzxHLEnJJBd23h6bPVnVExNPfqK29+WVtL
Q5BdlFuxNSkHozbBMWCoZjNrVUVio9e4Lv+gdilTT0dFuSI+YoIJgzyfjxE5cmYO
N3VXF3SMMHF5q4aYyasHVvio+bzA5ZvJfAgVvoXkOcxY0A2wr//ylp8HyGQdsGKe
kXnL+vJuxco=
-----END CERTIFICATE-----