Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/0/34352e3137362e3235322e302f32322d3234203d3e20323638393733.roa
File:                     34352e3137362e3235322e302f32322d3234203d3e20323638393733.roa (raw, json)
Hash identifier:          oO54TAhwXfEbC3Gerthas2sN0CqOdafWeii9JWTym4o=
Subject key identifier:   4B:30:63:65:27:39:98:71:27:80:C9:13:98:A6:B7:2B:64:74:47:0D
Certificate issuer:       /CN=5A3AE20076D062C545A8A8573997926813E925D8
Certificate serial:       78907A2B2A4A5D6FFDE0A68E8ADA53F8E220F3F2
Authority key identifier: 5A:3A:E2:00:76:D0:62:C5:45:A8:A8:57:39:97:92:68:13:E9:25:D8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A3AE20076D062C545A8A8573997926813E925D8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/0/34352e3137362e3235322e302f32322d3234203d3e20323638393733.roa
Signing time:             Fri 11 Sep 2026 19:52:33 +0000
ROA not before:           Fri 11 Sep 2026 19:47:33 +0000
ROA not after:            Fri 10 Sep 2027 19:52:33 +0000
asID:                     268973
IP address blocks:        45.176.252.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:90:7a:2b:2a:4a:5d:6f:fd:e0:a6:8e:8a:da:53:f8:e2:20:f3:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A3AE20076D062C545A8A8573997926813E925D8
        Validity
            Not Before: Sep 11 19:47:33 2026 GMT
            Not After : Sep 10 19:52:33 2027 GMT
        Subject: CN=4B306365273998712780C91398A6B72B6474470D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:66:43:45:14:64:c7:e4:a7:1e:43:44:b0:8a:
                    ca:49:5e:88:11:90:b3:7d:53:5a:a1:bd:ee:c4:4c:
                    1b:c0:d7:dd:4d:c9:6d:93:a9:8e:17:53:97:fc:84:
                    51:be:f7:1e:9b:2b:0e:7b:10:fb:2b:c5:c4:39:cd:
                    a5:da:35:84:c5:84:f1:9f:e1:e3:f2:a5:c9:09:ef:
                    eb:33:29:65:9f:ff:ad:27:90:86:9d:d3:cf:8d:3e:
                    fd:69:f0:e4:8f:56:bd:4b:ee:e0:ee:fb:1a:5f:7b:
                    78:1a:b0:57:ea:72:ef:92:5c:a1:7d:24:8b:90:72:
                    e8:26:e2:b6:5e:0d:42:c9:87:83:5e:a7:1d:11:c6:
                    74:d2:20:81:3b:c8:c2:2f:95:eb:bb:9c:d9:f6:d9:
                    35:63:92:c4:3a:85:6c:50:e8:93:9c:14:ca:01:2c:
                    53:ee:63:20:58:53:47:9a:af:bd:14:23:bb:2f:ce:
                    cb:dd:a7:8b:41:ee:70:04:7b:bd:e4:dd:94:13:fa:
                    88:fb:69:22:8a:b2:45:60:8a:b4:57:1e:c3:72:48:
                    4e:5d:4d:62:a6:0e:8d:6e:af:ed:ab:c1:41:75:a1:
                    14:aa:c9:ad:78:e2:14:2b:70:25:b9:ba:6f:f3:3a:
                    4e:77:8d:23:52:5f:09:fd:50:02:e8:09:08:e8:4f:
                    38:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:30:63:65:27:39:98:71:27:80:C9:13:98:A6:B7:2B:64:74:47:0D
            X509v3 Authority Key Identifier:
                keyid:5A:3A:E2:00:76:D0:62:C5:45:A8:A8:57:39:97:92:68:13:E9:25:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/0/5A3AE20076D062C545A8A8573997926813E925D8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5A3AE20076D062C545A8A8573997926813E925D8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BAYS1KHUZaf1AZQhNa8wnqvyednfc6fzMb3T2Yvqazk7/0/34352e3137362e3235322e302f32322d3234203d3e20323638393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         be:4d:eb:5a:dd:ff:79:ac:66:0b:bc:d9:66:5d:63:18:57:8d:
         7a:b2:dc:8e:f1:4c:1c:1a:01:c5:25:41:b6:31:93:96:9c:68:
         79:c6:8f:be:62:e2:c7:57:80:1a:50:62:93:bd:13:07:c0:48:
         4e:c8:90:af:1c:ca:ca:f9:86:9f:6c:22:9b:c9:43:6f:f2:86:
         8f:4c:80:b3:3c:6c:3f:ba:3e:dc:67:a9:c7:10:9a:60:ae:eb:
         a8:9a:d7:38:d9:41:55:7a:03:21:11:66:71:6c:17:3f:80:cd:
         de:12:6d:ef:6b:ad:77:9a:1a:3d:e2:a2:96:f1:89:13:88:d5:
         c5:fb:39:99:93:df:e9:5f:06:f6:2b:29:78:5d:3d:8a:13:3e:
         3d:b2:c3:e8:58:c2:46:69:14:da:75:33:82:49:12:93:bd:d7:
         5a:d6:44:0c:67:e8:91:52:9c:ba:7d:bd:a1:9d:33:96:2e:28:
         be:15:cd:bc:39:18:50:bc:4f:b8:24:a0:92:06:e9:e5:00:e9:
         6d:c4:51:65:91:ac:bb:62:5a:24:97:05:27:75:7d:f1:16:76:
         0f:97:54:48:fc:57:d6:4a:40:3f:f2:6f:2a:76:b6:52:0b:3a:
         2b:06:1e:2b:22:32:96:7b:8c:9d:45:aa:2c:0f:57:1e:0e:94:
         d4:61:f2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----