Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/0/3138362e3231392e3136342e302f32322d3233203d3e20323632373534.roa
File:                     3138362e3231392e3136342e302f32322d3233203d3e20323632373534.roa (raw, json)
Hash identifier:          2f6/ThpIQga29LVxR5QwbcldN/wVegV/+5seQTQEGaU=
Subject key identifier:   D3:4E:CA:CB:1A:2B:28:7B:BB:9F:FF:2A:0B:DA:CB:27:9C:10:72:3A
Certificate issuer:       /CN=73DD1509F41E20667158C220C9E64781E7815EC6
Certificate serial:       1F7858BD8102EDCD79831F7CF1D272BA83BE900A
Authority key identifier: 73:DD:15:09:F4:1E:20:66:71:58:C2:20:C9:E6:47:81:E7:81:5E:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73DD1509F41E20667158C220C9E64781E7815EC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/0/3138362e3231392e3136342e302f32322d3233203d3e20323632373534.roa
Signing time:             Fri 18 Sep 2026 23:16:55 +0000
ROA not before:           Fri 18 Sep 2026 23:11:55 +0000
ROA not after:            Fri 17 Sep 2027 23:16:55 +0000
asID:                     262754
IP address blocks:        186.219.164.0/22 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:78:58:bd:81:02:ed:cd:79:83:1f:7c:f1:d2:72:ba:83:be:90:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73DD1509F41E20667158C220C9E64781E7815EC6
        Validity
            Not Before: Sep 18 23:11:55 2026 GMT
            Not After : Sep 17 23:16:55 2027 GMT
        Subject: CN=D34ECACB1A2B287BBB9FFF2A0BDACB279C10723A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ab:3f:14:cb:99:0a:d3:70:57:ff:3b:9e:89:
                    b8:97:dc:0a:66:43:1a:dc:8c:b3:3a:12:68:88:0a:
                    17:e7:c9:b7:92:07:44:d4:71:cf:0c:da:c7:70:12:
                    64:75:22:28:41:09:31:74:d2:34:ce:94:f9:ec:df:
                    27:4c:24:81:05:4e:de:21:ca:8b:14:82:58:cb:fc:
                    fc:0e:07:85:e6:1f:45:0f:e4:7b:1d:b3:b6:6a:6c:
                    58:14:39:a5:57:b4:3e:c5:01:c1:b6:f7:c9:9e:7f:
                    fc:68:fb:19:ef:f4:a1:7b:f2:b9:89:ce:1f:29:82:
                    ea:d4:d0:c1:9c:22:b4:be:28:13:24:03:a6:83:16:
                    66:43:4d:0b:a9:e3:1f:25:72:5c:ea:df:f9:85:4f:
                    1c:e4:0c:5e:87:c7:74:49:6a:d2:f9:46:d0:f9:21:
                    a5:90:9e:79:e0:1c:80:f0:39:dc:7e:1f:2d:47:25:
                    73:a1:89:06:4c:b5:cf:83:95:d1:f4:71:3b:7f:f7:
                    23:52:c0:fb:a0:92:38:5a:ef:39:6b:6a:17:87:3c:
                    e4:61:bb:d4:44:48:88:69:05:9c:04:34:4c:77:70:
                    60:77:9e:88:04:40:aa:9b:d4:b4:f8:2b:eb:f7:ea:
                    d3:23:d1:c6:ab:9d:55:2d:e6:84:6c:4a:34:46:30:
                    c3:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:4E:CA:CB:1A:2B:28:7B:BB:9F:FF:2A:0B:DA:CB:27:9C:10:72:3A
            X509v3 Authority Key Identifier:
                keyid:73:DD:15:09:F4:1E:20:66:71:58:C2:20:C9:E6:47:81:E7:81:5E:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/0/73DD1509F41E20667158C220C9E64781E7815EC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73DD1509F41E20667158C220C9E64781E7815EC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/0/3138362e3231392e3136342e302f32322d3233203d3e20323632373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         37:96:6f:c0:ef:4b:30:32:2e:fa:76:8f:de:2b:80:2c:90:ba:
         5a:70:a6:16:a6:a8:53:1c:77:53:96:11:94:f9:38:15:2e:bd:
         a6:d2:57:92:bd:07:08:75:dd:a1:a3:b4:8c:cc:45:a2:e7:d7:
         c9:21:58:ba:bc:b0:8d:d2:ff:42:ad:5d:e0:36:7a:f6:5b:98:
         69:90:32:f2:c4:bc:55:66:85:65:1b:53:5a:ec:81:67:db:66:
         02:e4:ac:40:3e:9e:8b:63:aa:d0:e5:38:93:ec:fa:8b:1b:07:
         a4:da:8e:92:9b:96:86:48:3c:21:eb:64:5f:94:8a:ce:a1:f2:
         58:16:77:75:93:b6:aa:42:eb:b5:f4:b0:ad:49:b6:f4:d2:b3:
         14:2c:d9:6b:29:90:c1:61:71:c5:6c:30:f8:bf:41:b7:1d:fe:
         23:dc:ed:07:62:c0:75:2b:98:8e:60:c0:c8:ac:51:9d:8e:58:
         49:f4:3c:bd:7d:c1:3c:f7:52:c8:db:eb:e8:f7:f3:bd:8a:c3:
         63:f1:d7:e1:da:1e:c9:18:5a:bf:36:c3:3d:d4:4f:bd:ed:80:
         8b:46:88:14:9e:2c:d6:b9:b8:aa:db:db:b8:77:38:48:f5:7e:
         48:c3:fc:3f:13:a6:fd:8f:0e:53:a5:af:92:b2:ab:47:8c:43:
         ef:56:79:db
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUH3hYvYEC7c15gx988dJyuoO+kAowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzNERDE1MDlGNDFFMjA2NjcxNThDMjIwQzlFNjQ3ODFF
NzgxNUVDNjAeFw0yNjA5MTgyMzExNTVaFw0yNzA5MTcyMzE2NTVaMDMxMTAvBgNV
BAMTKEQzNEVDQUNCMUEyQjI4N0JCQjlGRkYyQTBCREFDQjI3OUMxMDcyM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVqz8Uy5kK03BX/zueibiX3Apm
QxrcjLM6EmiIChfnybeSB0TUcc8M2sdwEmR1IihBCTF00jTOlPns3ydMJIEFTt4h
yosUgljL/PwOB4XmH0UP5Hsds7ZqbFgUOaVXtD7FAcG298mef/xo+xnv9KF78rmJ
zh8pgurU0MGcIrS+KBMkA6aDFmZDTQup4x8lclzq3/mFTxzkDF6Hx3RJatL5RtD5
IaWQnnngHIDwOdx+Hy1HJXOhiQZMtc+DldH0cTt/9yNSwPugkjha7zlraheHPORh
u9RESIhpBZwENEx3cGB3nogEQKqb1LT4K+v36tMj0carnVUt5oRsSjRGMMPrAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQU007KyxorKHu7n/8qC9rLJ5wQcjowHwYDVR0j
BBgwFoAUc90VCfQeIGZxWMIgyeZHgeeBXsYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHZMRVIzQXBpbkpMRWRUOXB5UFdRYlAzbVZmQmlDc1ljZkZnc1NucXpI
M2kvMC83M0REMTUwOUY0MUUyMDY2NzE1OEMyMjBDOUU2NDc4MUU3ODE1RUM2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzczREQxNTA5RjQxRTIwNjY3
MTU4QzIyMEM5RTY0NzgxRTc4MTVFQzYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh2TEVSM0FwaW5KTEVkVDlweVBXUWJQM21WZkJpQ3NZY2ZGZ3NTbnF6SDNpLzAv
MzEzODM2MmUzMjMxMzkyZTMxMzYzNDJlMzAyZjMyMzIyZDMyMzMyMDNkM2UyMDMy
MzYzMjM3MzUzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEArrbpDANBgkqhkiG9w0BAQsFAAOCAQEAN5Zv
wO9LMDIu+naP3iuALJC6WnCmFqaoUxx3U5YRlPk4FS69ptJXkr0HCHXdoaO0jMxF
oufXySFYurywjdL/Qq1d4DZ69luYaZAy8sS8VWaFZRtTWuyBZ9tmAuSsQD6ei2Oq
0OU4k+z6ixsHpNqOkpuWhkg8IetkX5SKzqHyWBZ3dZO2qkLrtfSwrUm29NKzFCzZ
aymQwWFxxWww+L9Btx3+I9ztB2LAdSuYjmDAyKxRnY5YSfQ8vX3BPPdSyNvr6Pfz
vYrDY/HX4doeyRhavzbDPdRPve2Ai0aIFJ4s1rm4qtvbuHc4SPV+SMP8PxOm/Y8O
U6WvkrKrR4xD71Z52w==
-----END CERTIFICATE-----