Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/0/3138362e3231392e3136302e302f32342d3234203d3e20323632373534.roa
File:                     3138362e3231392e3136302e302f32342d3234203d3e20323632373534.roa (raw, json)
Hash identifier:          3XK+8c2WxOSVQ6MeoK2x+jYZgiUh5H17mipVki2If9I=
Subject key identifier:   A1:69:05:E4:4F:48:59:9B:D1:5D:7C:61:4D:EB:59:94:0D:95:4C:85
Certificate issuer:       /CN=73DD1509F41E20667158C220C9E64781E7815EC6
Certificate serial:       4EBBB9968D24C95AA59355D55F7CB3C647F53137
Authority key identifier: 73:DD:15:09:F4:1E:20:66:71:58:C2:20:C9:E6:47:81:E7:81:5E:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73DD1509F41E20667158C220C9E64781E7815EC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/0/3138362e3231392e3136302e302f32342d3234203d3e20323632373534.roa
Signing time:             Fri 18 Sep 2026 23:16:57 +0000
ROA not before:           Fri 18 Sep 2026 23:11:57 +0000
ROA not after:            Fri 17 Sep 2027 23:16:57 +0000
asID:                     262754
IP address blocks:        186.219.160.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:bb:b9:96:8d:24:c9:5a:a5:93:55:d5:5f:7c:b3:c6:47:f5:31:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73DD1509F41E20667158C220C9E64781E7815EC6
        Validity
            Not Before: Sep 18 23:11:57 2026 GMT
            Not After : Sep 17 23:16:57 2027 GMT
        Subject: CN=A16905E44F48599BD15D7C614DEB59940D954C85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:75:32:60:4b:fc:aa:83:22:1f:a9:e8:5d:b0:
                    2c:d5:61:61:1f:19:b1:cb:71:c7:5d:d4:83:9f:3e:
                    db:3f:4d:55:e4:4f:86:ad:81:07:dd:03:53:b1:83:
                    fc:21:4b:64:2a:ca:f8:cc:7d:b8:4e:36:bb:d5:47:
                    8c:fa:09:cd:5f:c2:81:ad:ae:bf:5e:e3:db:36:8c:
                    36:81:4c:e2:69:87:30:1b:24:bd:4b:0b:ed:cc:ba:
                    f7:ed:c8:c9:70:b0:f3:f9:a1:bb:5d:ce:f3:63:7e:
                    e6:7a:6f:09:0f:c7:ad:27:14:66:88:28:b8:eb:28:
                    95:23:fd:90:7f:0a:55:e2:64:18:67:3b:ac:37:36:
                    c2:0b:8f:a5:36:d5:12:3e:b9:82:09:5d:b6:3f:b5:
                    f9:92:19:01:0f:61:dc:e9:c2:25:66:aa:e6:15:4b:
                    a9:11:80:b5:35:13:40:e2:de:55:4d:3b:91:d3:1d:
                    c4:02:bd:08:36:84:c8:87:38:ef:cd:3f:75:b2:04:
                    49:d7:c2:01:92:4c:59:2a:7b:f5:c0:97:f4:ec:f6:
                    dc:86:2e:e2:73:32:08:2a:56:4f:76:9c:66:c1:4a:
                    1f:35:90:d5:4b:86:63:4b:88:f3:b5:16:70:61:3a:
                    92:78:08:bf:84:fb:7e:70:47:4c:f1:3e:ea:46:40:
                    f5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:69:05:E4:4F:48:59:9B:D1:5D:7C:61:4D:EB:59:94:0D:95:4C:85
            X509v3 Authority Key Identifier:
                keyid:73:DD:15:09:F4:1E:20:66:71:58:C2:20:C9:E6:47:81:E7:81:5E:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/0/73DD1509F41E20667158C220C9E64781E7815EC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73DD1509F41E20667158C220C9E64781E7815EC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/0/3138362e3231392e3136302e302f32342d3234203d3e20323632373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:64:79:17:ee:1e:bc:4a:5e:bc:ce:aa:1b:3e:d5:6c:e3:a1:
         d8:37:86:ae:36:d3:d6:0d:bd:cd:e4:f1:3a:90:bf:c9:60:f9:
         5a:cb:1c:ed:f8:c9:30:00:19:34:6e:a3:a4:88:7a:a7:4f:37:
         9a:92:53:24:3c:a9:27:9f:20:80:82:5e:25:a8:3a:57:01:c7:
         23:77:66:0a:fa:6c:64:32:3a:30:b6:c2:f0:68:71:1f:3d:43:
         17:ac:02:c6:6b:7c:87:21:d2:98:3c:0d:bb:80:fd:74:6b:db:
         b5:e5:0f:09:a4:2e:f8:95:c3:81:20:60:65:c4:e7:74:76:37:
         aa:1b:87:61:78:fd:7a:c6:f2:33:f6:88:e2:71:5f:fe:49:ff:
         e2:90:71:aa:ea:45:90:76:4a:e6:2f:2b:ac:d6:ee:aa:bf:19:
         3e:3b:08:f5:af:67:26:77:6d:24:05:d1:dd:6f:89:75:15:67:
         c0:46:81:18:dc:14:fb:1c:90:3d:53:86:d3:bc:45:87:3e:15:
         74:02:b5:d3:e3:ce:ae:aa:49:3f:16:35:1b:35:9d:79:98:30:
         f1:c8:e2:9e:9e:24:5e:a9:2a:22:b5:1f:80:37:e9:1d:a3:a5:
         39:45:2e:6c:ba:ab:b9:ec:a5:7f:0f:f3:8c:5a:04:ab:0c:ca:
         c0:a1:29:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----