Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/0/3138362e3231392e3136382e302f32342d3234203d3e20323632373534.roa
File:                     3138362e3231392e3136382e302f32342d3234203d3e20323632373534.roa (raw, json)
Hash identifier:          VV3KsnDsC4lQSs8bU60JO3pNbElvILV42FKpqcrtxWA=
Subject key identifier:   68:F0:10:AD:E3:18:E3:7C:3E:9E:7A:17:E8:16:F0:2F:07:7C:51:79
Certificate issuer:       /CN=73DD1509F41E20667158C220C9E64781E7815EC6
Certificate serial:       439115483E4CE71C523C50C822C14732BEBABB8D
Authority key identifier: 73:DD:15:09:F4:1E:20:66:71:58:C2:20:C9:E6:47:81:E7:81:5E:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73DD1509F41E20667158C220C9E64781E7815EC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/0/3138362e3231392e3136382e302f32342d3234203d3e20323632373534.roa
Signing time:             Fri 18 Sep 2026 23:16:56 +0000
ROA not before:           Fri 18 Sep 2026 23:11:56 +0000
ROA not after:            Fri 17 Sep 2027 23:16:56 +0000
asID:                     262754
IP address blocks:        186.219.168.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:91:15:48:3e:4c:e7:1c:52:3c:50:c8:22:c1:47:32:be:ba:bb:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73DD1509F41E20667158C220C9E64781E7815EC6
        Validity
            Not Before: Sep 18 23:11:56 2026 GMT
            Not After : Sep 17 23:16:56 2027 GMT
        Subject: CN=68F010ADE318E37C3E9E7A17E816F02F077C5179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d8:10:94:f9:01:55:b6:e6:38:82:00:a4:3c:
                    a7:4b:7d:30:c8:e7:f2:d4:dc:60:f2:e7:81:10:9b:
                    fa:49:da:29:a3:24:d0:f7:c7:85:6c:f1:58:fc:53:
                    98:2c:a4:f9:d4:fd:f5:d8:63:ab:6f:c4:98:1f:18:
                    f6:55:c4:76:eb:6b:94:87:25:a8:56:43:c2:57:1d:
                    dd:e5:b4:09:97:9b:3d:1e:50:1f:21:e8:05:8a:1c:
                    0b:8d:c2:a7:34:78:dc:d7:2e:d1:8b:d4:e4:76:25:
                    74:aa:0b:81:8f:15:76:15:9e:1a:9f:31:bd:a0:31:
                    a4:b7:fe:47:ee:16:4f:39:69:16:86:67:63:e8:57:
                    97:07:d8:d4:21:72:cd:9d:d0:f3:90:9a:85:13:51:
                    7c:34:f3:42:c4:8c:5d:3a:07:59:4c:0f:26:6a:0e:
                    eb:d1:35:a8:3f:43:23:e4:51:9a:6a:15:22:14:9c:
                    7e:aa:e2:31:90:4b:f4:c8:26:20:96:7c:39:6d:e9:
                    e1:81:fb:d1:85:65:a4:f7:43:80:e4:58:2d:34:c3:
                    21:2b:14:d7:95:3f:10:12:0d:d3:fb:63:5e:a5:16:
                    14:fc:a1:1e:0f:e0:18:fb:c3:cf:d7:d3:77:74:de:
                    dd:08:84:f1:13:4b:45:0a:dc:65:35:5e:5f:c9:27:
                    a9:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F0:10:AD:E3:18:E3:7C:3E:9E:7A:17:E8:16:F0:2F:07:7C:51:79
            X509v3 Authority Key Identifier:
                keyid:73:DD:15:09:F4:1E:20:66:71:58:C2:20:C9:E6:47:81:E7:81:5E:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/0/73DD1509F41E20667158C220C9E64781E7815EC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73DD1509F41E20667158C220C9E64781E7815EC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/0/3138362e3231392e3136382e302f32342d3234203d3e20323632373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:5e:07:45:8c:2b:a6:23:a0:f2:1f:a3:5b:b8:6e:f4:ff:46:
         f7:a9:e3:cd:89:ca:5a:b7:d2:3f:4c:4b:38:28:2d:6c:44:da:
         e6:97:c5:b4:dc:f0:a9:92:4c:f1:22:24:e2:b5:80:4f:0a:f9:
         9c:20:96:ad:9f:4c:76:8c:61:55:93:bf:05:ae:48:fe:a8:35:
         77:ed:5a:d2:1f:dd:74:49:7e:37:76:4d:9f:15:a0:22:31:7d:
         6b:f0:4d:e3:29:79:d4:3b:22:fd:19:e4:c4:1b:41:16:e6:97:
         b9:6b:25:d3:4b:39:5b:ad:65:f6:09:07:9b:e6:29:b3:0a:7c:
         3c:b4:c7:a9:17:05:46:95:ef:ac:ed:e0:97:87:c8:c6:71:24:
         7a:88:93:02:57:87:c4:bd:27:47:cf:1a:f4:77:e6:f5:3d:2a:
         53:c2:40:3d:1c:29:f4:d9:ec:33:c6:cb:db:6b:53:11:7e:6d:
         ba:94:2a:f0:32:dc:d4:99:3e:5f:aa:30:56:5a:f8:8d:de:12:
         a8:aa:45:58:98:e6:24:b4:72:24:4a:2b:80:60:c8:7d:6e:c8:
         69:22:bb:f2:04:0d:ac:9b:75:3e:96:40:2e:4a:a3:07:02:2c:
         70:05:50:92:27:d3:0f:92:63:c4:dc:dc:06:49:02:d8:7b:9b:
         1f:21:0d:0a
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUQ5EVSD5M5xxSPFDIIsFHMr66u40wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzNERDE1MDlGNDFFMjA2NjcxNThDMjIwQzlFNjQ3ODFF
NzgxNUVDNjAeFw0yNjA5MTgyMzExNTZaFw0yNzA5MTcyMzE2NTZaMDMxMTAvBgNV
BAMTKDY4RjAxMEFERTMxOEUzN0MzRTlFN0ExN0U4MTZGMDJGMDc3QzUxNzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC22BCU+QFVtuY4ggCkPKdLfTDI
5/LU3GDy54EQm/pJ2imjJND3x4Vs8Vj8U5gspPnU/fXYY6tvxJgfGPZVxHbra5SH
JahWQ8JXHd3ltAmXmz0eUB8h6AWKHAuNwqc0eNzXLtGL1OR2JXSqC4GPFXYVnhqf
Mb2gMaS3/kfuFk85aRaGZ2PoV5cH2NQhcs2d0POQmoUTUXw080LEjF06B1lMDyZq
DuvRNag/QyPkUZpqFSIUnH6q4jGQS/TIJiCWfDlt6eGB+9GFZaT3Q4DkWC00wyEr
FNeVPxASDdP7Y16lFhT8oR4P4Bj7w8/X03d03t0IhPETS0UK3GU1Xl/JJ6lRAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUaPAQreMY43w+nnoX6BbwLwd8UXkwHwYDVR0j
BBgwFoAUc90VCfQeIGZxWMIgyeZHgeeBXsYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOHZMRVIzQXBpbkpMRWRUOXB5UFdRYlAzbVZmQmlDc1ljZkZnc1NucXpI
M2kvMC83M0REMTUwOUY0MUUyMDY2NzE1OEMyMjBDOUU2NDc4MUU3ODE1RUM2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzczREQxNTA5RjQxRTIwNjY3
MTU4QzIyMEM5RTY0NzgxRTc4MTVFQzYuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
Lzh2TEVSM0FwaW5KTEVkVDlweVBXUWJQM21WZkJpQ3NZY2ZGZ3NTbnF6SDNpLzAv
MzEzODM2MmUzMjMxMzkyZTMxMzYzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMjM3MzUzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEALrbqDANBgkqhkiG9w0BAQsFAAOCAQEAgF4H
RYwrpiOg8h+jW7hu9P9G96njzYnKWrfSP0xLOCgtbETa5pfFtNzwqZJM8SIk4rWA
Twr5nCCWrZ9MdoxhVZO/Ba5I/qg1d+1a0h/ddEl+N3ZNnxWgIjF9a/BN4yl51Dsi
/RnkxBtBFuaXuWsl00s5W61l9gkHm+Ypswp8PLTHqRcFRpXvrO3gl4fIxnEkeoiT
AleHxL0nR88a9Hfm9T0qU8JAPRwp9NnsM8bL22tTEX5tupQq8DLc1Jk+X6owVlr4
jd4SqKpFWJjmJLRyJEorgGDIfW7IaSK78gQNrJt1PpZALkqjBwIscAVQkifTD5Jj
xNzcBkkC2HubHyENCg==
-----END CERTIFICATE-----