Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/0/3138362e3231392e3136332e302f32342d3234203d3e20323632373534.roa
File:                     3138362e3231392e3136332e302f32342d3234203d3e20323632373534.roa (raw, json)
Hash identifier:          NKh/2mCN0V1/m+X9vTs/0scm5ao9r75J/ZyHVL/e0ts=
Subject key identifier:   3F:7F:76:A0:91:95:AA:40:54:AA:69:FF:35:C3:85:D5:65:49:29:F9
Certificate issuer:       /CN=73DD1509F41E20667158C220C9E64781E7815EC6
Certificate serial:       3E72B0E65AC01B681AA84534B2EE2D50F39DF066
Authority key identifier: 73:DD:15:09:F4:1E:20:66:71:58:C2:20:C9:E6:47:81:E7:81:5E:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73DD1509F41E20667158C220C9E64781E7815EC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/0/3138362e3231392e3136332e302f32342d3234203d3e20323632373534.roa
Signing time:             Fri 18 Sep 2026 23:16:57 +0000
ROA not before:           Fri 18 Sep 2026 23:11:57 +0000
ROA not after:            Fri 17 Sep 2027 23:16:57 +0000
asID:                     262754
IP address blocks:        186.219.163.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:72:b0:e6:5a:c0:1b:68:1a:a8:45:34:b2:ee:2d:50:f3:9d:f0:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73DD1509F41E20667158C220C9E64781E7815EC6
        Validity
            Not Before: Sep 18 23:11:57 2026 GMT
            Not After : Sep 17 23:16:57 2027 GMT
        Subject: CN=3F7F76A09195AA4054AA69FF35C385D5654929F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:39:d7:24:bc:16:38:06:57:aa:a9:b4:1b:9b:
                    2b:78:1a:e4:3b:6e:29:21:72:bf:aa:e4:99:b5:e6:
                    1f:cb:4c:7b:c0:97:81:e2:d5:2d:d7:ef:97:f4:e7:
                    e1:00:27:a6:e4:04:d9:b3:53:3c:9e:01:9b:9b:0e:
                    a4:a0:44:8b:70:e2:8c:23:da:b9:58:1c:b8:ab:45:
                    a8:35:69:fe:b7:fa:1a:c9:97:14:89:ba:e4:40:22:
                    80:6b:7c:94:a7:4c:0c:28:ea:c8:7e:5e:ad:b1:b2:
                    87:ad:2b:6f:d8:a2:60:36:df:a3:bf:46:b7:17:66:
                    79:36:89:02:8b:dd:2d:16:1f:6e:7a:0d:d3:fc:33:
                    a5:e3:a2:94:06:ec:a9:01:ab:2f:12:3d:1b:34:5c:
                    e6:ca:8d:ea:21:3f:27:73:07:3d:09:0c:5a:8b:01:
                    46:af:31:47:55:c5:51:0a:fc:29:66:6b:f5:45:8f:
                    2c:fa:44:db:b8:0f:18:e2:3a:83:37:ff:16:60:be:
                    2b:c7:88:62:73:33:40:68:b4:57:ba:bd:65:7c:4f:
                    86:af:bc:f7:e2:81:4c:74:ee:ed:9c:35:b9:7e:12:
                    3e:44:b9:96:e6:c9:a1:8a:31:99:9b:47:37:e0:a3:
                    ff:60:2b:c7:21:81:82:61:43:d8:0f:ce:6b:e3:6b:
                    09:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:7F:76:A0:91:95:AA:40:54:AA:69:FF:35:C3:85:D5:65:49:29:F9
            X509v3 Authority Key Identifier:
                keyid:73:DD:15:09:F4:1E:20:66:71:58:C2:20:C9:E6:47:81:E7:81:5E:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/0/73DD1509F41E20667158C220C9E64781E7815EC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73DD1509F41E20667158C220C9E64781E7815EC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/0/3138362e3231392e3136332e302f32342d3234203d3e20323632373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.163.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:10:61:41:fc:67:d9:5e:c6:f8:d6:6e:c0:ce:33:04:b7:d7:
         f6:76:6b:59:4c:ad:bb:11:47:5b:85:39:0c:69:6f:9c:f6:53:
         10:6d:04:21:43:d4:01:a1:92:6e:92:a8:4e:03:b0:61:d6:9f:
         9d:9f:0c:f9:7e:a8:a0:77:7a:01:16:a5:d0:c6:93:69:4c:46:
         43:1d:9a:b6:89:db:97:85:4d:cd:d3:d9:87:4b:7e:ed:fb:07:
         3e:b8:c0:da:98:1d:19:ec:b1:76:8b:da:89:56:81:60:07:3b:
         4e:3f:0e:6c:5b:44:6b:ab:4a:a5:67:46:00:e4:a1:fa:75:ef:
         b2:f9:65:c0:9b:d4:08:7d:88:91:a9:61:d9:f4:c2:9c:be:ab:
         70:3f:5b:28:9f:e8:3d:f7:2a:2f:33:ad:dd:dd:64:46:9c:d7:
         7c:df:e1:8c:65:c6:ff:f3:3d:40:6e:b2:b0:2f:e2:b3:25:f4:
         4e:96:eb:09:eb:cc:e1:21:67:94:3f:79:3f:24:c5:79:17:ca:
         fa:a9:0a:e7:77:9f:cb:02:a6:b7:a4:4f:0b:ad:99:73:3e:bc:
         fe:41:bc:91:76:92:02:3b:46:62:f2:66:ab:47:cc:9c:80:35:
         2d:f4:9a:2d:16:44:c2:ea:3d:c5:cd:a9:36:b8:6b:65:29:3c:
         ac:35:a7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----