Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6jgbAf35bWdVVwZDcf7wPAYARzYistD7TsRwMVFZtTMM/0/3138362e3235302e33322e302f32322d3233203d3e20323730383633.roa
File:                     3138362e3235302e33322e302f32322d3233203d3e20323730383633.roa (raw, json)
Hash identifier:          ODLJYAkJz3AAYolhECB5hGJ4yJp2uy3a8kfyoAibht0=
Subject key identifier:   1A:F7:CE:1E:6C:85:AA:23:1C:1F:43:DF:EF:9B:F1:1A:34:89:5B:29
Certificate issuer:       /CN=9856E6EC431EB6EF91607E2865CCEFB48EC91E18
Certificate serial:       2EC787C6FA9A6A4C94CD6FBECAD0298FD240F054
Authority key identifier: 98:56:E6:EC:43:1E:B6:EF:91:60:7E:28:65:CC:EF:B4:8E:C9:1E:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9856E6EC431EB6EF91607E2865CCEFB48EC91E18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6jgbAf35bWdVVwZDcf7wPAYARzYistD7TsRwMVFZtTMM/0/3138362e3235302e33322e302f32322d3233203d3e20323730383633.roa
Signing time:             Wed 26 Aug 2026 14:16:08 +0000
ROA not before:           Wed 26 Aug 2026 14:11:08 +0000
ROA not after:            Wed 25 Aug 2027 14:16:08 +0000
asID:                     270863
IP address blocks:        186.250.32.0/22 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:c7:87:c6:fa:9a:6a:4c:94:cd:6f:be:ca:d0:29:8f:d2:40:f0:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9856E6EC431EB6EF91607E2865CCEFB48EC91E18
        Validity
            Not Before: Aug 26 14:11:08 2026 GMT
            Not After : Aug 25 14:16:08 2027 GMT
        Subject: CN=1AF7CE1E6C85AA231C1F43DFEF9BF11A34895B29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:75:52:d8:a6:d2:7f:a7:a2:fa:bc:06:71:1c:
                    dd:ad:92:ec:0d:a0:a9:a6:83:08:a0:00:d7:3a:40:
                    03:b2:ae:26:29:59:ec:04:db:7f:25:8b:c2:da:71:
                    63:97:9b:86:2c:97:a7:6b:ea:43:ca:dc:4e:c7:bb:
                    32:92:b1:44:67:ce:7e:98:00:44:aa:4b:2c:3c:30:
                    e0:f0:06:3b:e5:1a:3a:68:46:27:8e:0f:34:2e:1b:
                    31:a1:cd:03:8f:58:9a:1b:bb:a8:6b:f9:90:ad:92:
                    f1:76:7e:e0:50:65:b3:52:67:e5:40:d6:01:30:26:
                    8f:08:53:5c:e7:74:0f:1a:b1:d4:9f:1b:23:41:4e:
                    03:2c:96:eb:f7:b4:cb:30:14:a5:4e:1a:ad:51:2f:
                    79:b7:03:44:a1:0a:b7:dd:2e:98:ab:a8:af:e3:aa:
                    f6:b0:e3:ce:24:80:4d:55:4a:47:f2:47:62:a1:ce:
                    3b:4d:b0:e2:0a:c5:a2:b0:01:2e:4e:1d:91:4d:14:
                    56:cc:86:99:1a:38:db:e4:f4:23:86:44:00:c7:9d:
                    02:00:97:aa:6a:34:5c:2f:b1:a7:a8:5e:a8:6c:48:
                    17:3e:9d:bb:19:ac:5e:f3:a9:9d:7f:14:3e:76:08:
                    a1:66:b1:dc:52:60:09:c0:fd:df:bb:ff:42:b9:80:
                    4f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:F7:CE:1E:6C:85:AA:23:1C:1F:43:DF:EF:9B:F1:1A:34:89:5B:29
            X509v3 Authority Key Identifier:
                keyid:98:56:E6:EC:43:1E:B6:EF:91:60:7E:28:65:CC:EF:B4:8E:C9:1E:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6jgbAf35bWdVVwZDcf7wPAYARzYistD7TsRwMVFZtTMM/0/9856E6EC431EB6EF91607E2865CCEFB48EC91E18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9856E6EC431EB6EF91607E2865CCEFB48EC91E18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6jgbAf35bWdVVwZDcf7wPAYARzYistD7TsRwMVFZtTMM/0/3138362e3235302e33322e302f32322d3233203d3e20323730383633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.250.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         cf:a8:65:e5:12:a2:21:bd:48:7b:bd:22:5a:a1:a4:99:04:b2:
         81:71:c3:35:98:cc:5e:d9:81:19:e2:18:46:2a:22:98:dc:79:
         5c:fe:2b:e8:ae:76:fc:f0:dd:47:1b:8d:e2:15:9b:af:5a:24:
         2c:f2:88:38:2f:2d:11:ee:b8:67:1b:e4:cc:93:49:23:a4:60:
         45:14:e9:a0:3a:3b:f8:e5:60:31:2c:04:37:46:b6:a7:50:cd:
         98:56:33:9e:7a:32:04:53:d6:b6:32:6c:9b:26:ff:59:6b:fd:
         2c:46:6b:6d:58:d6:7d:43:04:64:ed:21:25:c8:9d:d1:33:1e:
         90:11:e3:57:56:74:17:dc:2e:a6:12:1e:a4:09:52:95:e3:43:
         4c:b5:c9:fe:a2:fd:2c:0c:42:2f:03:66:26:00:4f:ef:0a:45:
         48:54:bf:1f:a9:8e:b6:86:b5:20:95:36:b1:e0:93:c6:4e:45:
         7f:64:ba:2d:cb:40:e2:f6:b1:38:73:02:5e:ac:d4:6f:cf:4d:
         3e:e4:8f:dc:e0:63:b8:94:a7:11:33:aa:21:a9:af:f5:32:d6:
         a9:c9:5e:3e:80:a5:a8:30:0a:37:0c:a7:18:4d:2b:e1:a3:6c:
         69:c6:df:d2:0f:aa:cb:62:49:76:92:85:a3:7c:65:37:62:c1:
         dd:ef:51:35
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIULseHxvqaakyUzW++ytApj9JA8FQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTg1NkU2RUM0MzFFQjZFRjkxNjA3RTI4NjVDQ0VGQjQ4
RUM5MUUxODAeFw0yNjA4MjYxNDExMDhaFw0yNzA4MjUxNDE2MDhaMDMxMTAvBgNV
BAMTKDFBRjdDRTFFNkM4NUFBMjMxQzFGNDNERkVGOUJGMTFBMzQ4OTVCMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+dVLYptJ/p6L6vAZxHN2tkuwN
oKmmgwigANc6QAOyriYpWewE238li8LacWOXm4Ysl6dr6kPK3E7HuzKSsURnzn6Y
AESqSyw8MODwBjvlGjpoRieODzQuGzGhzQOPWJobu6hr+ZCtkvF2fuBQZbNSZ+VA
1gEwJo8IU1zndA8asdSfGyNBTgMsluv3tMswFKVOGq1RL3m3A0ShCrfdLpirqK/j
qvaw484kgE1VSkfyR2KhzjtNsOIKxaKwAS5OHZFNFFbMhpkaONvk9COGRADHnQIA
l6pqNFwvsaeoXqhsSBc+nbsZrF7zqZ1/FD52CKFmsdxSYAnA/d+7/0K5gE9/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUGvfOHmyFqiMcH0Pf75vxGjSJWykwHwYDVR0j
BBgwFoAUmFbm7EMetu+RYH4oZczvtI7JHhgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNmpnYkFmMzViV2RWVndaRGNmN3dQQVlBUnpZaXN0RDdUc1J3TVZGWnRU
TU0vMC85ODU2RTZFQzQzMUVCNkVGOTE2MDdFMjg2NUNDRUZCNDhFQzkxRTE4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk4NTZFNkVDNDMxRUI2RUY5
MTYwN0UyODY1Q0NFRkI0OEVDOTFFMTguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZqZ2JBZjM1YldkVlZ3WkRjZjd3UEFZQVJ6WWlzdEQ3VHNSd01WRlp0VE1NLzAv
MzEzODM2MmUzMjM1MzAyZTMzMzIyZTMwMmYzMjMyMmQzMjMzMjAzZDNlMjAzMjM3
MzAzODM2MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAK6+iAwDQYJKoZIhvcNAQELBQADggEBAM+oZeUS
oiG9SHu9IlqhpJkEsoFxwzWYzF7ZgRniGEYqIpjceVz+K+iudvzw3UcbjeIVm69a
JCzyiDgvLRHuuGcb5MyTSSOkYEUU6aA6O/jlYDEsBDdGtqdQzZhWM556MgRT1rYy
bJsm/1lr/SxGa21Y1n1DBGTtISXIndEzHpAR41dWdBfcLqYSHqQJUpXjQ0y1yf6i
/SwMQi8DZiYAT+8KRUhUvx+pjraGtSCVNrHgk8ZORX9kui3LQOL2sThzAl6s1G/P
TT7kj9zgY7iUpxEzqiGpr/Uy1qnJXj6ApagwCjcMpxhNK+GjbGnG39IPqstiSXaS
haN8ZTdiwd3vUTU=
-----END CERTIFICATE-----