Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/0/3137372e32322e3138322e302f32342d3234203d3e203533313637.roa
File:                     3137372e32322e3138322e302f32342d3234203d3e203533313637.roa (raw, json)
Hash identifier:          pxxX008vz/OWtgdBDuuYEIj0yOdNqD/3I8U1EM4JPzg=
Subject key identifier:   02:35:73:C8:20:CD:B8:9C:0F:8C:83:49:4B:D7:B5:AC:F5:09:ED:62
Certificate issuer:       /CN=0CAC382B5A4247796D76A664F9F3A39C715ABD15
Certificate serial:       60673DAE610498736398F5F11CEAE1AAEEFE4975
Authority key identifier: 0C:AC:38:2B:5A:42:47:79:6D:76:A6:64:F9:F3:A3:9C:71:5A:BD:15
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CAC382B5A4247796D76A664F9F3A39C715ABD15.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/0/3137372e32322e3138322e302f32342d3234203d3e203533313637.roa
Signing time:             Mon 31 Aug 2026 20:35:15 +0000
ROA not before:           Mon 31 Aug 2026 20:30:15 +0000
ROA not after:            Mon 30 Aug 2027 20:35:15 +0000
asID:                     53167
IP address blocks:        177.22.182.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:67:3d:ae:61:04:98:73:63:98:f5:f1:1c:ea:e1:aa:ee:fe:49:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CAC382B5A4247796D76A664F9F3A39C715ABD15
        Validity
            Not Before: Aug 31 20:30:15 2026 GMT
            Not After : Aug 30 20:35:15 2027 GMT
        Subject: CN=023573C820CDB89C0F8C83494BD7B5ACF509ED62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5e:6d:5e:07:99:d4:0c:50:40:3b:75:2d:5f:
                    06:5a:7d:49:66:68:52:89:dc:ad:ae:e4:2b:f2:45:
                    23:55:d9:65:ba:83:9f:bf:22:05:94:de:08:ec:51:
                    80:b0:f3:2b:3e:49:d8:f4:31:c9:a4:8b:0d:f1:2f:
                    a2:58:c0:4d:6c:ee:5c:33:c2:7b:6d:03:98:9d:de:
                    71:34:3e:bc:09:84:5b:ea:c4:96:9e:98:aa:2b:2d:
                    17:2a:84:e5:0d:fd:11:8b:03:a3:de:f6:12:09:04:
                    b7:fa:9e:4e:4a:9b:2b:5d:e0:cf:b8:4f:ce:73:e4:
                    10:9a:33:ce:f4:59:f6:c5:10:09:f4:00:ca:17:9c:
                    20:b8:24:d0:11:57:11:51:d9:43:da:fb:18:06:0b:
                    7b:02:91:4a:88:5e:dc:98:35:09:ea:ad:b7:99:61:
                    d6:67:19:32:34:2a:ea:c0:e2:89:d3:d7:14:3c:5c:
                    bb:40:6a:90:76:48:5c:f6:1a:e9:ab:60:5b:2c:de:
                    71:45:db:b3:10:26:d2:06:b5:7b:23:1b:ec:27:53:
                    22:cb:e5:b3:85:bb:bc:96:3e:02:41:ed:e6:bb:c5:
                    d1:ea:d2:be:d6:69:6d:e4:83:be:c3:3b:18:aa:a1:
                    76:f8:8f:ad:11:d7:fd:b3:55:32:96:4f:9e:80:0d:
                    41:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:35:73:C8:20:CD:B8:9C:0F:8C:83:49:4B:D7:B5:AC:F5:09:ED:62
            X509v3 Authority Key Identifier:
                keyid:0C:AC:38:2B:5A:42:47:79:6D:76:A6:64:F9:F3:A3:9C:71:5A:BD:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/0/0CAC382B5A4247796D76A664F9F3A39C715ABD15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0CAC382B5A4247796D76A664F9F3A39C715ABD15.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CZFRUVi2U4ZjQ78BgEF79NQfzVxF5LxTT9vvd9odu1VP/0/3137372e32322e3138322e302f32342d3234203d3e203533313637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:4d:93:e4:41:ac:ad:ec:0c:7e:84:4f:72:c7:e1:cd:6f:f1:
         a2:a9:ce:b6:a3:fb:e4:80:90:20:f4:bc:5b:5c:48:86:05:72:
         98:b9:b3:a2:3d:e3:38:f9:73:92:3f:30:61:f8:a2:c1:63:77:
         28:51:b8:6b:dc:a8:55:f1:7c:9b:fb:e3:3e:98:4f:9a:00:d5:
         c7:fb:66:36:8b:9b:7c:d5:54:05:d2:d8:82:d6:dd:e9:56:1f:
         f8:36:64:72:83:a6:38:44:1b:50:aa:69:80:56:f1:13:1a:2d:
         2e:a0:9f:c4:95:22:33:34:74:ec:07:3d:0a:11:55:de:a9:37:
         4d:d2:4d:b1:56:0d:99:5a:9e:b6:a8:c8:73:d6:e5:af:f7:1b:
         59:a2:51:ef:8a:c1:2b:5f:7b:5d:6d:39:29:62:d6:e9:48:40:
         50:66:42:7f:ef:bc:85:c3:2c:60:d6:39:73:1f:af:a4:47:dd:
         72:49:b7:e2:98:b7:e1:5a:c4:38:30:ba:75:63:e5:5d:fd:e7:
         0e:0a:7d:93:5d:7f:6b:55:2d:68:5b:2c:c7:c8:19:c0:38:c6:
         87:e9:a8:7f:cb:a7:d5:72:03:b2:fd:df:17:b6:d6:cb:29:51:
         24:a7:e9:2c:be:02:39:db:0d:66:6a:32:bf:92:3b:6c:59:a3:
         31:49:1e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----