Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/34352e3232372e3134392e302f32342d3234203d3e20323637303335.roa
File:                     34352e3232372e3134392e302f32342d3234203d3e20323637303335.roa (raw, json)
Hash identifier:          zLgO4uW/+JKf4RqnliEr/xss2X7P0XtFBHacfbfzuSw=
Subject key identifier:   3C:26:4C:96:55:C3:0F:2E:5E:F1:92:5C:87:B9:DE:00:CF:80:E0:C0
Certificate issuer:       /CN=2663AFA82E4602B5A7902552CC8E4A3120909A6F
Certificate serial:       306E28AEF0356BA1D4595C8047B5A9951D1CCEB3
Authority key identifier: 26:63:AF:A8:2E:46:02:B5:A7:90:25:52:CC:8E:4A:31:20:90:9A:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2663AFA82E4602B5A7902552CC8E4A3120909A6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/34352e3232372e3134392e302f32342d3234203d3e20323637303335.roa
Signing time:             Fri 02 Oct 2026 19:20:34 +0000
ROA not before:           Fri 02 Oct 2026 19:15:34 +0000
ROA not after:            Fri 01 Oct 2027 19:20:34 +0000
asID:                     267035
IP address blocks:        45.227.149.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:6e:28:ae:f0:35:6b:a1:d4:59:5c:80:47:b5:a9:95:1d:1c:ce:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2663AFA82E4602B5A7902552CC8E4A3120909A6F
        Validity
            Not Before: Oct  2 19:15:34 2026 GMT
            Not After : Oct  1 19:20:34 2027 GMT
        Subject: CN=3C264C9655C30F2E5EF1925C87B9DE00CF80E0C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:60:5f:af:dd:f9:8e:fc:0d:b5:8a:97:3a:d9:
                    97:61:89:b7:c8:c3:e1:56:43:d0:3e:04:3a:b6:f8:
                    50:86:90:31:fa:13:ad:96:01:4e:93:3e:81:65:3f:
                    5e:0f:1f:59:49:c7:41:27:13:1c:cf:56:74:7b:87:
                    d8:af:9c:d9:49:4a:1f:e1:77:67:a0:1b:90:3e:5a:
                    b6:a1:d4:28:ea:1c:47:dc:45:99:49:6d:a0:ea:82:
                    d0:d7:ba:fe:f8:f4:e0:fb:be:d6:62:a6:bb:84:51:
                    76:99:01:08:97:88:9c:9b:75:e6:3f:c3:73:f5:8c:
                    51:a6:a5:81:bd:53:93:68:34:cc:f5:13:85:b2:50:
                    64:e0:ac:ed:5c:ba:7e:89:77:0b:8c:17:33:8b:6e:
                    61:3d:ac:8f:9c:ee:f7:1e:72:b4:e0:14:aa:f3:b2:
                    97:39:c1:1b:1e:56:d7:9c:c3:64:15:83:b4:40:91:
                    e7:2c:c1:12:74:77:13:6f:b2:8e:81:36:76:e5:c0:
                    85:f8:9b:78:ed:f9:d9:13:ab:7b:af:a4:ad:3b:0c:
                    14:a5:b2:9c:03:95:4e:49:c3:66:fb:53:26:1f:20:
                    3f:d9:d4:1d:6a:c3:d8:13:73:3e:ed:72:4b:34:cd:
                    48:a9:5c:3e:4d:45:b4:58:ca:71:ee:43:40:12:5b:
                    dd:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:26:4C:96:55:C3:0F:2E:5E:F1:92:5C:87:B9:DE:00:CF:80:E0:C0
            X509v3 Authority Key Identifier:
                keyid:26:63:AF:A8:2E:46:02:B5:A7:90:25:52:CC:8E:4A:31:20:90:9A:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/2663AFA82E4602B5A7902552CC8E4A3120909A6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2663AFA82E4602B5A7902552CC8E4A3120909A6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/34352e3232372e3134392e302f32342d3234203d3e20323637303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:4d:0b:5b:54:6d:30:df:7c:d3:65:b0:b4:6f:a4:53:d7:ab:
         0c:e7:49:01:87:d4:35:25:e9:e6:16:cd:9a:f0:ad:24:b6:6f:
         53:1c:66:67:db:6c:79:e1:23:b1:bc:ec:1f:74:37:69:46:14:
         56:d9:29:c5:c8:73:25:b4:3c:d9:c9:89:c9:3e:c1:c8:8c:ea:
         98:8f:c1:91:99:73:ce:f8:0c:1b:fd:5d:ab:36:3a:39:b0:00:
         03:8d:08:d0:82:93:45:85:b9:28:3d:5b:14:2d:46:89:ce:ae:
         ad:a6:de:3c:cc:e7:2a:a3:07:cb:d6:3a:93:c5:ae:6b:ed:d2:
         d6:99:4b:eb:65:f3:f9:39:e5:93:6a:a5:18:7a:3f:ac:21:0f:
         f9:6c:91:87:bf:ff:c7:ec:a5:19:5e:b5:79:b5:5a:a8:f0:7f:
         59:5f:13:ff:db:4f:f6:f1:2a:f4:37:db:ea:9e:bd:e3:16:dd:
         d2:11:3d:fa:e9:52:4f:07:a3:c5:5e:bf:d1:43:83:c2:6a:8f:
         cc:10:c3:44:1d:3f:49:31:cc:fd:14:b9:09:2d:cc:cf:c6:51:
         2a:b7:14:19:dd:a8:fa:d2:d6:b5:41:4a:df:c9:02:3b:55:05:
         24:ae:a3:79:c3:70:30:f4:c5:46:24:e4:c6:84:8e:f2:54:8f:
         1a:ed:bb:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----