Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/3133312e3139362e3139362e302f32342d3234203d3e20323635393139.roa
File:                     3133312e3139362e3139362e302f32342d3234203d3e20323635393139.roa (raw, json)
Hash identifier:          mqo+75quIqRnBQqssfCPn6x7LhRXecqPt0mYo21LWAA=
Subject key identifier:   79:86:1B:7B:C9:44:8F:82:63:45:29:E4:F2:B8:26:C0:04:86:5B:1B
Certificate issuer:       /CN=D4C1800777B6B27702B6747E148FA0063550B046
Certificate serial:       3D70E673F20E5C953A0E8FEBCDD28B1BCB83E7DA
Authority key identifier: D4:C1:80:07:77:B6:B2:77:02:B6:74:7E:14:8F:A0:06:35:50:B0:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4C1800777B6B27702B6747E148FA0063550B046.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/3133312e3139362e3139362e302f32342d3234203d3e20323635393139.roa
Signing time:             Thu 17 Sep 2026 13:50:50 +0000
ROA not before:           Thu 17 Sep 2026 13:45:50 +0000
ROA not after:            Thu 16 Sep 2027 13:50:50 +0000
asID:                     265919
IP address blocks:        131.196.196.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:70:e6:73:f2:0e:5c:95:3a:0e:8f:eb:cd:d2:8b:1b:cb:83:e7:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4C1800777B6B27702B6747E148FA0063550B046
        Validity
            Not Before: Sep 17 13:45:50 2026 GMT
            Not After : Sep 16 13:50:50 2027 GMT
        Subject: CN=79861B7BC9448F82634529E4F2B826C004865B1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:04:0c:0d:f9:bd:0a:eb:0b:65:01:91:25:5d:
                    fb:ef:10:dc:bb:28:fd:51:e8:10:24:36:1a:b8:9c:
                    66:67:4f:fa:8c:ec:aa:06:aa:c2:6c:71:70:25:49:
                    e5:ad:69:0c:e0:88:be:bc:62:dd:3c:3e:eb:14:e9:
                    16:5c:d3:be:12:05:54:2b:46:21:f7:8a:09:54:2e:
                    66:8e:72:eb:87:cd:5f:3b:ad:72:9c:f7:ca:ba:cc:
                    66:33:99:ef:9c:9e:ca:a9:03:c3:73:ed:2c:6d:ba:
                    65:92:b9:d4:7e:4d:50:de:14:73:a6:ec:b8:34:0b:
                    ce:1f:84:c4:d2:fe:11:30:fa:17:ee:29:ad:bc:53:
                    55:fd:23:54:c8:3a:56:8c:b3:2e:d3:5b:4e:4f:ad:
                    84:b8:83:7d:e3:32:0e:03:39:06:e9:5d:1c:a8:4e:
                    b7:be:2a:6f:f5:a5:1e:cf:d2:43:38:ef:3d:b7:0a:
                    75:be:ea:51:41:79:d5:eb:f1:3c:ba:69:1b:4b:8f:
                    17:3f:c1:6a:40:b6:2d:70:1d:3f:01:50:69:bc:85:
                    73:91:c1:4b:8a:be:50:0b:5d:20:a5:94:5b:5d:47:
                    27:ac:70:da:b9:7d:28:5a:be:ca:8a:5d:e0:8a:d1:
                    aa:65:69:25:b0:01:52:b8:46:26:05:7e:1a:4f:bc:
                    de:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:86:1B:7B:C9:44:8F:82:63:45:29:E4:F2:B8:26:C0:04:86:5B:1B
            X509v3 Authority Key Identifier:
                keyid:D4:C1:80:07:77:B6:B2:77:02:B6:74:7E:14:8F:A0:06:35:50:B0:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/D4C1800777B6B27702B6747E148FA0063550B046.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4C1800777B6B27702B6747E148FA0063550B046.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/3133312e3139362e3139362e302f32342d3234203d3e20323635393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:ff:82:45:95:94:1e:85:69:a8:36:4a:53:1b:d1:52:97:a8:
         c4:a9:9b:e9:7a:5b:71:74:76:66:3b:59:9f:84:aa:c8:ca:97:
         63:20:e9:ab:aa:93:b9:2c:b7:36:d9:07:d6:ad:58:9f:02:23:
         85:0d:63:b6:c3:b3:a9:8b:bb:2b:10:a4:bb:7e:54:40:d8:20:
         fe:1d:ee:8c:7b:16:1c:84:b4:d8:26:2a:39:16:47:67:77:0c:
         c0:6f:8e:a0:e0:56:47:58:ed:8c:88:42:2c:73:83:46:3d:4b:
         13:b3:57:4d:4d:eb:a9:2e:cc:4c:47:a5:a3:7f:d7:de:e5:95:
         7a:bd:62:eb:46:f9:8d:45:d3:99:d1:91:f5:95:a9:bb:29:78:
         6b:cd:de:2f:b9:08:4a:f4:18:22:3f:27:ad:4a:a0:7d:22:89:
         3f:cc:50:6e:4d:eb:e9:5a:db:3b:64:e8:ce:58:67:e4:bd:76:
         f4:8b:ad:46:50:63:64:2b:fe:95:2b:c0:66:5a:59:75:f5:4c:
         89:33:2d:15:16:99:94:22:1e:12:08:86:8d:44:0d:de:cd:87:
         26:c7:ee:50:c7:5d:a4:83:44:1b:b4:c1:51:2e:75:9b:b3:3b:
         b6:b4:4f:75:2c:0d:7b:e6:a9:02:ba:22:56:b8:fb:2f:4b:49:
         0f:7d:16:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----