Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e35362e302f32342d3234203d3e20323732373130.roa
File:                     3230312e32332e35362e302f32342d3234203d3e20323732373130.roa (raw, json)
Hash identifier:          HZADn8gn0gUt5Ok5aCzD2STV/4p1Zlnqxb3GAMXe4o0=
Subject key identifier:   55:B2:DD:15:D6:06:AF:FF:E5:24:11:35:3A:05:77:79:EB:48:67:D4
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       4B7D8FD0511C90B551671F1A0E602B92EF9F781C
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e35362e302f32342d3234203d3e20323732373130.roa
Signing time:             Mon 12 Oct 2026 21:44:30 +0000
ROA not before:           Mon 12 Oct 2026 21:39:30 +0000
ROA not after:            Mon 11 Oct 2027 21:44:30 +0000
asID:                     272710
IP address blocks:        201.23.56.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:7d:8f:d0:51:1c:90:b5:51:67:1f:1a:0e:60:2b:92:ef:9f:78:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Oct 12 21:39:30 2026 GMT
            Not After : Oct 11 21:44:30 2027 GMT
        Subject: CN=55B2DD15D606AFFFE52411353A057779EB4867D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f4:a2:10:b0:87:44:a5:4b:75:75:9a:1a:e9:
                    e5:aa:9e:47:85:25:2f:55:e3:af:29:e7:f7:ec:0b:
                    de:73:25:71:cd:9b:9c:42:da:08:1a:62:7c:51:ac:
                    24:46:c4:ae:d0:4b:6d:d4:60:74:6a:55:f0:c3:b5:
                    53:df:5d:2f:09:2e:0f:34:bc:a1:ff:64:bb:88:0c:
                    de:a5:44:ea:e7:4e:db:07:1e:ca:2c:a2:9b:1c:9f:
                    1a:7c:bd:74:a9:d3:90:b6:d8:22:62:dd:46:df:26:
                    d7:81:9a:ab:ef:42:46:b1:ce:a1:b3:53:2d:3a:4a:
                    96:93:09:5d:52:6e:34:af:c4:18:05:4f:2a:8c:f2:
                    8b:37:c9:61:36:0e:33:c5:9a:cf:92:5c:c5:a9:2c:
                    bc:ad:7c:86:b0:cc:ea:4f:71:42:ef:85:df:32:08:
                    3e:ff:da:c7:f5:29:09:90:ce:83:53:69:97:77:d4:
                    b5:70:69:85:6a:2d:ae:ca:4c:cf:3a:1c:39:d7:cb:
                    90:c6:56:ac:ba:2a:01:e8:8c:c2:28:04:37:d0:02:
                    12:42:7a:f7:48:79:10:3a:29:24:ba:cd:46:32:84:
                    2d:77:9b:72:18:b0:01:73:51:8a:68:4d:36:bd:4a:
                    61:a7:93:a6:6e:a8:60:ac:71:58:19:01:5b:4b:8c:
                    9f:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:B2:DD:15:D6:06:AF:FF:E5:24:11:35:3A:05:77:79:EB:48:67:D4
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3230312e32332e35362e302f32342d3234203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.23.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:63:de:0f:a0:fb:73:31:96:32:0b:1e:1a:28:33:4e:37:e6:
         b7:95:8d:da:ba:84:0f:a8:5b:41:ff:6d:10:31:02:93:3d:ef:
         2b:9c:80:a3:19:a7:85:07:ed:16:90:67:d9:09:69:2d:81:d3:
         a0:ed:19:50:0d:2c:71:93:3d:f7:62:d6:57:38:53:bf:3b:31:
         63:4a:e1:47:56:4f:90:50:14:8d:c8:d8:fb:63:d6:14:45:cd:
         a9:6c:26:4d:93:2f:6a:ae:21:cd:50:ec:74:e8:f1:1c:37:04:
         21:93:ce:4f:26:d5:23:21:b7:80:30:cb:16:ef:b5:da:c2:c0:
         39:53:13:4c:33:7d:f1:65:a1:97:78:e7:68:57:97:f1:e6:18:
         63:18:d3:fc:31:e2:0d:08:bf:f0:9e:9f:f1:f1:ef:a2:b3:36:
         b6:19:0e:91:f2:c6:94:0e:43:46:d7:0f:00:b0:9e:42:d8:44:
         15:b9:48:b3:7d:a8:f7:23:8e:14:ce:10:d8:90:09:0f:53:28:
         9f:10:e4:55:5f:34:0a:b8:1c:04:ef:12:0a:31:96:3f:6f:e4:
         7d:12:c4:a5:c2:51:97:e6:96:02:32:ed:1e:3e:11:bd:02:6a:
         0d:39:0b:46:bd:e2:fb:1f:2b:60:97:4b:a4:b3:4d:0e:d9:6a:
         82:c2:2d:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----