Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/0/3138362e3231392e3136312e302f32342d3234203d3e20323632373534.roa
File:                     3138362e3231392e3136312e302f32342d3234203d3e20323632373534.roa (raw, json)
Hash identifier:          +ptYzeydqr6im1EtfGDqSndRtVUzXW6b49pz7AHF2Jw=
Subject key identifier:   E7:7A:70:B4:B6:2E:FF:D9:8A:E9:32:B5:EB:78:D6:F6:4F:A3:78:F1
Certificate issuer:       /CN=73DD1509F41E20667158C220C9E64781E7815EC6
Certificate serial:       63FC1E4BDAB3C6C55BAABD2052172CA3DEB91CED
Authority key identifier: 73:DD:15:09:F4:1E:20:66:71:58:C2:20:C9:E6:47:81:E7:81:5E:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73DD1509F41E20667158C220C9E64781E7815EC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/0/3138362e3231392e3136312e302f32342d3234203d3e20323632373534.roa
Signing time:             Fri 18 Sep 2026 23:16:54 +0000
ROA not before:           Fri 18 Sep 2026 23:11:54 +0000
ROA not after:            Fri 17 Sep 2027 23:16:54 +0000
asID:                     262754
IP address blocks:        186.219.161.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:fc:1e:4b:da:b3:c6:c5:5b:aa:bd:20:52:17:2c:a3:de:b9:1c:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73DD1509F41E20667158C220C9E64781E7815EC6
        Validity
            Not Before: Sep 18 23:11:54 2026 GMT
            Not After : Sep 17 23:16:54 2027 GMT
        Subject: CN=E77A70B4B62EFFD98AE932B5EB78D6F64FA378F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c5:be:d1:1f:7e:25:0c:0c:5c:2e:b1:ca:f4:
                    5b:4f:af:0c:ac:7e:ba:cb:85:eb:f9:30:5e:dc:a2:
                    b8:e0:a2:54:83:a4:af:f0:2b:2a:32:9c:3e:ab:33:
                    49:13:bc:c3:9e:96:a0:16:ac:67:fc:aa:7e:fa:5f:
                    f4:f2:ea:4f:f0:83:eb:24:46:36:71:16:2e:8f:24:
                    ad:1a:82:2a:32:76:f2:d3:a1:4c:a8:91:af:a7:6e:
                    59:31:54:8d:c9:d4:da:ff:42:85:27:ec:e5:f9:2d:
                    de:0e:8e:1e:99:0c:18:c5:df:6d:d3:e0:a7:23:6b:
                    bd:53:11:e0:3f:e9:33:0f:46:55:bd:02:e4:15:9a:
                    b7:0e:e4:25:0c:dd:56:19:15:30:b9:7f:5e:cb:77:
                    45:7f:28:e8:c3:cc:0c:06:aa:56:72:f7:fc:2d:63:
                    58:52:2d:28:f0:06:4a:fb:ea:92:48:38:96:ac:b3:
                    41:36:f8:43:23:9b:8c:fe:b6:6b:7e:c4:9d:2f:3e:
                    d2:ea:b3:bf:2e:d6:1f:ba:f2:96:42:62:0c:d1:81:
                    0e:59:de:64:a9:13:26:01:ec:9c:d9:22:0c:54:6d:
                    0e:6a:a7:d9:18:ea:24:01:f3:f8:2d:86:f9:24:0e:
                    62:11:a1:af:0e:f1:b1:69:1b:57:2a:3c:f4:b0:91:
                    2e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:7A:70:B4:B6:2E:FF:D9:8A:E9:32:B5:EB:78:D6:F6:4F:A3:78:F1
            X509v3 Authority Key Identifier:
                keyid:73:DD:15:09:F4:1E:20:66:71:58:C2:20:C9:E6:47:81:E7:81:5E:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/0/73DD1509F41E20667158C220C9E64781E7815EC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73DD1509F41E20667158C220C9E64781E7815EC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/0/3138362e3231392e3136312e302f32342d3234203d3e20323632373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:43:47:4b:a1:dd:51:6e:7c:a7:57:38:e8:b1:c8:8a:37:7e:
         ef:99:ed:07:67:fb:0a:03:27:52:93:17:2b:1d:c0:31:b8:93:
         3c:7b:79:1a:6d:68:9b:d6:89:72:00:a7:5e:04:97:d4:9d:b5:
         63:8c:d4:29:3d:3b:8a:50:f6:8c:79:9e:46:40:1a:f2:f7:32:
         bb:79:59:0e:21:5a:11:a8:53:90:6c:c0:f5:e8:c4:f6:7f:36:
         52:ab:3b:a0:79:f0:3e:9f:b9:cf:b3:c2:9e:4f:57:9d:53:16:
         db:6d:53:29:f9:63:41:d6:5e:c9:67:12:79:a1:19:fe:ca:28:
         d0:10:d9:7d:c8:bd:5a:7a:74:ed:0c:ff:5f:15:85:67:6a:90:
         f5:22:70:1b:4f:40:d8:46:08:0b:dc:ca:5d:dc:1a:63:7e:1a:
         eb:cb:d9:46:16:b4:be:f9:e2:15:ae:d7:c9:f3:2e:ad:8a:b0:
         62:ec:ac:5c:09:a6:84:42:c8:81:1c:6d:11:eb:d1:aa:cf:66:
         29:ba:95:e7:05:d6:9e:d7:01:bd:08:60:1f:9d:39:98:2b:41:
         e3:56:49:78:f3:08:80:2e:2d:c1:b6:77:f3:50:ed:ba:27:86:
         de:8e:09:80:53:e0:03:91:55:7b:ef:55:00:ee:b9:af:58:81:
         83:35:e6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----