Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/34352e3136302e3136382e302f32332d3233203d3e20323638343235.roa
File:                     34352e3136302e3136382e302f32332d3233203d3e20323638343235.roa (raw, json)
Hash identifier:          1OGcxYAzSEcQD+EnMBy1UZG3CK34roi292RX6/+/DaI=
Subject key identifier:   1A:20:56:85:1F:44:54:BE:75:25:FC:D0:1E:E6:3F:21:CC:71:58:E5
Certificate issuer:       /CN=E968F08C3BD0A821112BDBD86914ED5964A1FF29
Certificate serial:       0B184A8F1A1F1136BE8C728D6EFA99F747EE0FB9
Authority key identifier: E9:68:F0:8C:3B:D0:A8:21:11:2B:DB:D8:69:14:ED:59:64:A1:FF:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E968F08C3BD0A821112BDBD86914ED5964A1FF29.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/34352e3136302e3136382e302f32332d3233203d3e20323638343235.roa
Signing time:             Tue 22 Sep 2026 11:46:25 +0000
ROA not before:           Tue 22 Sep 2026 11:41:25 +0000
ROA not after:            Tue 21 Sep 2027 11:46:25 +0000
asID:                     268425
IP address blocks:        45.160.168.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:18:4a:8f:1a:1f:11:36:be:8c:72:8d:6e:fa:99:f7:47:ee:0f:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E968F08C3BD0A821112BDBD86914ED5964A1FF29
        Validity
            Not Before: Sep 22 11:41:25 2026 GMT
            Not After : Sep 21 11:46:25 2027 GMT
        Subject: CN=1A2056851F4454BE7525FCD01EE63F21CC7158E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d9:2a:76:79:e0:c9:fd:2f:ba:d3:28:ff:5b:
                    33:30:c4:0e:ff:af:4e:2e:4d:40:f9:70:94:3d:5a:
                    93:72:11:14:6e:25:d1:b2:b1:13:3d:00:bd:09:fe:
                    96:29:6b:2e:e4:6c:c2:a7:fd:1f:1e:a4:d5:6b:49:
                    3a:88:5b:1c:86:9c:7d:19:77:f5:90:d9:ab:5c:5c:
                    fc:6b:68:55:9f:17:0c:cf:de:31:d2:dc:56:47:56:
                    1a:42:54:07:ef:fe:ac:72:c4:1f:50:3d:42:1b:3a:
                    ea:ce:1a:af:1e:4e:c4:a4:33:2a:be:9c:4a:2a:35:
                    63:81:c6:1e:bb:fe:5d:79:71:da:d0:11:eb:0c:5a:
                    5e:31:97:56:d8:df:de:b3:bb:0a:87:9c:8d:5a:11:
                    d0:47:f0:c2:dd:f0:76:2d:14:10:f5:e6:b3:7c:d6:
                    cc:3b:a8:33:36:0a:ec:9e:07:f6:ee:63:52:0b:d9:
                    e4:89:a3:02:e5:27:8e:23:73:2d:92:da:e0:41:5a:
                    5d:92:23:90:97:7c:fb:56:10:bb:4f:f4:21:dc:ea:
                    95:24:23:67:54:27:0c:3d:56:7b:2c:1d:e7:16:e7:
                    d9:de:45:ee:0a:e1:d8:f4:eb:89:db:c1:08:d7:bb:
                    47:fc:04:a0:9c:2f:ac:7f:9e:bb:c8:98:5a:22:21:
                    21:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:20:56:85:1F:44:54:BE:75:25:FC:D0:1E:E6:3F:21:CC:71:58:E5
            X509v3 Authority Key Identifier:
                keyid:E9:68:F0:8C:3B:D0:A8:21:11:2B:DB:D8:69:14:ED:59:64:A1:FF:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/E968F08C3BD0A821112BDBD86914ED5964A1FF29.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E968F08C3BD0A821112BDBD86914ED5964A1FF29.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/34352e3136302e3136382e302f32332d3233203d3e20323638343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bd:10:c8:73:fb:d0:f4:6f:a8:49:c3:64:fc:cd:c5:38:f6:c7:
         a7:eb:2f:61:b7:60:10:31:3c:8a:e5:75:ad:14:11:c1:d6:11:
         19:20:f9:a3:ae:05:b4:17:4a:00:6b:3d:ae:1e:a9:5d:69:14:
         3e:fd:d9:4a:e0:1d:16:c0:44:4b:58:df:4f:68:9e:1c:69:e1:
         9f:19:7e:d5:a4:64:2f:99:6e:38:ed:e0:94:03:d7:31:cb:d7:
         6a:d3:d3:ac:36:ff:5f:37:b6:2e:ae:3f:48:c4:e9:02:36:db:
         07:b4:81:2b:05:9e:7b:12:12:b8:37:9d:99:1f:0b:f6:40:5d:
         6f:b3:71:af:a0:1c:bc:83:b5:1a:fb:dc:ec:43:b0:b3:0c:af:
         ed:b1:a4:ed:b3:c3:2c:a2:a2:8f:47:e4:77:18:52:db:9b:fc:
         38:a0:f5:94:46:89:18:69:1f:23:44:0b:87:a3:54:96:24:dc:
         ca:5b:fc:e7:e0:1b:1c:59:bd:94:4c:9a:25:63:af:3b:94:df:
         b0:34:9e:73:2b:11:15:59:7b:55:dd:b3:60:a2:b3:02:95:5c:
         89:89:7f:61:ec:a4:d8:60:eb:cc:d4:9f:ef:4c:b0:59:e7:03:
         a9:3b:fe:18:13:e9:bd:d6:d2:74:b2:51:9a:ee:e9:ee:b0:a0:
         70:d7:0d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----