Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/0/3138362e3231392e3137352e302f32342d3234203d3e20323632373534.roa
File:                     3138362e3231392e3137352e302f32342d3234203d3e20323632373534.roa (raw, json)
Hash identifier:          kguGVEOoGvxZOVkocrGUxmbSnQJ/uHHsQXmza0Abv40=
Subject key identifier:   73:E6:DD:D6:8A:87:44:22:F0:7B:09:21:D1:79:51:35:17:86:4D:52
Certificate issuer:       /CN=73DD1509F41E20667158C220C9E64781E7815EC6
Certificate serial:       6D5D90A6CD0A905D08FDF4AD6A5339329601278B
Authority key identifier: 73:DD:15:09:F4:1E:20:66:71:58:C2:20:C9:E6:47:81:E7:81:5E:C6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73DD1509F41E20667158C220C9E64781E7815EC6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/0/3138362e3231392e3137352e302f32342d3234203d3e20323632373534.roa
Signing time:             Fri 18 Sep 2026 23:16:57 +0000
ROA not before:           Fri 18 Sep 2026 23:11:57 +0000
ROA not after:            Fri 17 Sep 2027 23:16:57 +0000
asID:                     262754
IP address blocks:        186.219.175.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:5d:90:a6:cd:0a:90:5d:08:fd:f4:ad:6a:53:39:32:96:01:27:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73DD1509F41E20667158C220C9E64781E7815EC6
        Validity
            Not Before: Sep 18 23:11:57 2026 GMT
            Not After : Sep 17 23:16:57 2027 GMT
        Subject: CN=73E6DDD68A874422F07B0921D179513517864D52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:7b:d3:54:10:5f:d5:55:80:36:ed:d5:fa:c0:
                    6f:2b:cd:f9:cd:6e:e9:d5:b4:98:e3:a6:f4:49:ab:
                    da:a1:4a:57:cf:f2:44:93:c5:f9:c3:8b:05:b8:19:
                    b4:99:45:d2:c0:5c:fc:2e:c4:bb:ba:57:8b:d1:09:
                    66:77:79:29:ce:9b:5f:17:c8:bc:5b:db:87:8e:b6:
                    25:04:bc:19:01:14:e5:c4:7d:55:df:77:3c:36:60:
                    e6:84:96:4f:e1:60:c7:97:9a:de:34:eb:e4:dd:38:
                    bf:86:bb:0a:b3:ad:94:ab:d5:77:fd:e1:20:58:68:
                    fe:84:18:6f:3c:05:a6:77:2f:f9:ab:09:a9:f9:59:
                    49:d4:62:52:97:a2:94:9d:be:bf:38:68:5f:78:32:
                    ad:50:bb:2c:18:e5:ec:26:e0:e4:93:8e:ea:b3:91:
                    5f:6e:6a:78:2d:78:4b:45:4b:16:3c:f4:9b:8f:6f:
                    75:e2:c4:fb:de:8a:fb:4b:65:ad:4b:fa:a3:d3:c1:
                    39:d7:ea:f0:2d:4e:7d:0c:03:4e:ef:ef:9f:36:33:
                    5f:6a:1e:33:de:5e:39:c3:9d:2a:ae:8a:69:71:be:
                    e9:4b:21:d7:fe:36:6b:09:a6:a7:fd:b3:1c:e1:13:
                    22:56:1f:e1:b3:c3:2e:d4:d8:c7:93:f1:28:04:56:
                    22:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E6:DD:D6:8A:87:44:22:F0:7B:09:21:D1:79:51:35:17:86:4D:52
            X509v3 Authority Key Identifier:
                keyid:73:DD:15:09:F4:1E:20:66:71:58:C2:20:C9:E6:47:81:E7:81:5E:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/0/73DD1509F41E20667158C220C9E64781E7815EC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/73DD1509F41E20667158C220C9E64781E7815EC6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vLER3ApinJLEdT9pyPWQbP3mVfBiCsYcfFgsSnqzH3i/0/3138362e3231392e3137352e302f32342d3234203d3e20323632373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.219.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:73:3f:9a:ac:90:dd:fd:20:25:a5:cf:25:1a:18:4a:9f:d3:
         76:77:52:c7:3a:ed:ea:f7:3f:19:50:4a:82:42:10:a8:bd:b0:
         07:b6:99:68:ac:d5:29:c2:0c:6e:fa:e0:d2:8d:c5:9d:36:73:
         1d:a3:7d:8c:6b:c7:e1:57:c9:08:f4:2c:bd:18:15:31:65:73:
         02:41:c0:db:fe:fc:24:ce:e7:e0:1b:30:b0:45:3d:a6:b7:50:
         4f:d4:d6:35:b5:63:12:54:4b:ac:c7:0f:0c:ed:b9:4b:32:bf:
         58:fe:18:9e:2c:97:a4:60:80:c1:f9:85:ef:6f:4a:39:9b:5a:
         37:a7:e0:00:31:71:7b:d5:19:7e:3e:49:20:6b:f1:9d:e5:9f:
         e8:f3:89:2c:31:ce:b4:5e:52:7b:df:75:99:57:be:7f:19:26:
         35:e3:b7:12:41:37:45:0e:b2:d7:af:ac:9b:88:06:af:b5:b2:
         6e:75:78:75:b6:12:92:51:72:42:ee:d2:f3:a7:a9:dc:27:ea:
         66:7b:4e:b4:3c:6a:f4:5f:8b:b3:4e:e2:38:50:9e:e6:a3:cb:
         fd:33:e6:69:ad:01:a9:df:fc:63:2e:86:b5:a4:cc:18:ca:95:
         72:57:6b:ca:bc:a4:49:f3:f5:e8:f9:66:2d:52:5c:f9:be:8b:
         7f:50:d9:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----