Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/34352e3138362e33322e302f32322d3234203d3e20323639343235.roa
File:                     34352e3138362e33322e302f32322d3234203d3e20323639343235.roa (raw, json)
Hash identifier:          JcKzFMENzMVKX+VyRke0UQRCDXWKYUDnSxvcw/PDhyo=
Subject key identifier:   04:18:83:CF:50:C4:C0:A7:7B:0A:31:79:FB:0A:1F:E1:C3:88:8B:A0
Certificate issuer:       /CN=F9FFCCDBCA691A6CB21B455057F486C3805DEF29
Certificate serial:       30EF8992D9BDA34036BC8D52E07008DF74AFCFBB
Authority key identifier: F9:FF:CC:DB:CA:69:1A:6C:B2:1B:45:50:57:F4:86:C3:80:5D:EF:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9FFCCDBCA691A6CB21B455057F486C3805DEF29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/34352e3138362e33322e302f32322d3234203d3e20323639343235.roa
Signing time:             Tue 15 Sep 2026 16:46:49 +0000
ROA not before:           Tue 15 Sep 2026 16:41:49 +0000
ROA not after:            Tue 14 Sep 2027 16:46:49 +0000
asID:                     269425
IP address blocks:        45.186.32.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:ef:89:92:d9:bd:a3:40:36:bc:8d:52:e0:70:08:df:74:af:cf:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9FFCCDBCA691A6CB21B455057F486C3805DEF29
        Validity
            Not Before: Sep 15 16:41:49 2026 GMT
            Not After : Sep 14 16:46:49 2027 GMT
        Subject: CN=041883CF50C4C0A77B0A3179FB0A1FE1C3888BA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:60:32:de:af:47:a9:b4:a9:f9:e9:f3:ed:53:
                    4b:68:23:9d:90:be:1d:50:73:bf:48:2f:c3:02:2a:
                    cf:40:2d:10:b2:2d:5a:c0:3e:e9:e0:b6:cc:f0:c8:
                    df:1f:8b:4c:3e:c1:36:ad:5c:4c:29:67:04:ae:23:
                    d0:ce:db:23:1f:36:be:f4:ba:26:1d:40:da:66:ad:
                    2e:9c:fd:1a:29:9c:02:a5:a1:eb:c9:cb:74:a5:e7:
                    ef:3e:c8:f1:dc:3a:ba:ae:ef:f5:a4:f3:94:85:21:
                    cc:65:b5:9f:1a:33:4c:28:43:ec:14:37:b3:57:51:
                    23:19:41:bd:ef:e5:90:f7:93:8e:cd:84:c7:84:49:
                    ec:3b:70:33:79:d0:a3:ae:3c:78:0a:ac:35:22:88:
                    00:92:d2:3f:eb:c5:4a:81:66:30:45:4e:a4:ac:a9:
                    8c:b0:73:cb:d7:4c:24:ae:94:5f:db:c1:df:f2:2f:
                    ff:59:0b:2f:b9:72:6c:af:97:d6:c6:a8:d0:2c:02:
                    47:b8:0e:41:ac:54:4f:69:02:b3:5b:8a:e5:6c:9f:
                    e9:da:c5:3d:16:64:22:fc:84:bd:ae:58:37:df:91:
                    ec:eb:5f:c4:85:ce:35:f2:21:68:89:71:55:1d:36:
                    23:5a:e3:87:ec:b6:5d:95:3f:d6:19:d6:04:17:f6:
                    87:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:18:83:CF:50:C4:C0:A7:7B:0A:31:79:FB:0A:1F:E1:C3:88:8B:A0
            X509v3 Authority Key Identifier:
                keyid:F9:FF:CC:DB:CA:69:1A:6C:B2:1B:45:50:57:F4:86:C3:80:5D:EF:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/F9FFCCDBCA691A6CB21B455057F486C3805DEF29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9FFCCDBCA691A6CB21B455057F486C3805DEF29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BbpQPjL6yHsfeegJbAKw7fD3h7XzWNqLv3KjjcJDdLGN/0/34352e3138362e33322e302f32322d3234203d3e20323639343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         93:a9:4e:01:4a:e8:6e:01:11:2b:5c:60:c8:fc:d1:04:9f:ab:
         e4:32:79:22:e9:93:b4:91:5c:76:79:6e:5f:f7:99:f1:dd:01:
         4c:cf:43:07:0b:40:b1:0a:9c:f0:78:33:aa:8b:66:2e:92:67:
         39:ec:98:f1:c0:1b:2a:b5:a1:e8:cb:8c:88:80:63:81:09:39:
         0a:00:0a:92:78:be:24:06:73:88:7f:9c:a4:7d:f0:76:69:3a:
         6d:69:0f:9e:d7:cc:75:8a:55:cc:5c:c0:fe:e4:60:e1:7b:b9:
         7d:68:df:ed:ff:2e:79:56:15:9e:f3:d6:3c:e4:10:f2:00:0c:
         3a:b2:7f:15:99:ad:92:ef:1e:9d:c2:db:f7:b6:c2:8b:5b:65:
         1e:8b:b1:65:1d:30:26:5b:76:9d:3e:1b:61:a8:b3:04:71:33:
         29:c7:6a:e5:c2:88:33:f2:a1:d3:51:13:1e:f6:24:eb:c9:bd:
         4f:ae:2f:ea:e2:a5:40:06:37:de:c5:7e:95:1c:0e:87:13:0b:
         70:2a:02:5c:28:3f:91:8a:25:05:51:04:f5:ca:f1:50:b5:f0:
         7d:77:0b:00:f4:03:e2:c1:b5:9d:43:3c:99:64:aa:32:61:92:
         d1:5b:96:99:ee:e3:b3:bb:2a:f4:85:8d:e2:5e:44:b6:d8:09:
         89:f1:d7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----