Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GjyYAU52QoYGT2Po3nTaSeTUWhKxvkF8DetMZ9gxiV4J/0/3139302e38392e342e302f32342d3234203d3e20323730333939.roa
File:                     3139302e38392e342e302f32342d3234203d3e20323730333939.roa (raw, json)
Hash identifier:          Ap2IbxHDFS6Sm9V7QPUsgo7u9ui5oIoLeiW/2dMJ0pA=
Subject key identifier:   CD:E3:85:61:64:6A:A5:B6:5C:61:1F:CE:BF:DF:26:24:1C:FC:83:02
Certificate issuer:       /CN=2F3D9C77D7D15210EA3C6A62953B5FB52FEA876C
Certificate serial:       7111B5278986B885C961868758B231D9B4063549
Authority key identifier: 2F:3D:9C:77:D7:D1:52:10:EA:3C:6A:62:95:3B:5F:B5:2F:EA:87:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3D9C77D7D15210EA3C6A62953B5FB52FEA876C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GjyYAU52QoYGT2Po3nTaSeTUWhKxvkF8DetMZ9gxiV4J/0/3139302e38392e342e302f32342d3234203d3e20323730333939.roa
Signing time:             Tue 29 Sep 2026 01:55:34 +0000
ROA not before:           Tue 29 Sep 2026 01:50:34 +0000
ROA not after:            Tue 28 Sep 2027 01:55:34 +0000
asID:                     270399
IP address blocks:        190.89.4.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:11:b5:27:89:86:b8:85:c9:61:86:87:58:b2:31:d9:b4:06:35:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F3D9C77D7D15210EA3C6A62953B5FB52FEA876C
        Validity
            Not Before: Sep 29 01:50:34 2026 GMT
            Not After : Sep 28 01:55:34 2027 GMT
        Subject: CN=CDE38561646AA5B65C611FCEBFDF26241CFC8302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ba:be:e4:9a:dd:e8:96:77:ae:27:94:7c:65:
                    ad:74:87:3e:fe:19:d5:82:a2:dc:a6:fd:66:e2:ff:
                    93:43:61:7d:e8:b8:58:da:c3:24:49:69:33:88:fc:
                    e6:14:b9:54:90:41:f7:4b:10:72:6a:72:b7:8d:b9:
                    32:d8:30:0b:75:64:5a:3e:48:2f:a1:0e:11:a9:d6:
                    22:ae:cf:8a:9e:84:11:df:0b:1b:d8:f9:e1:fb:b2:
                    8a:c0:ed:b5:1a:92:a4:50:ab:ea:fc:d7:f9:84:69:
                    a4:d0:db:a8:34:35:6a:ed:e8:58:91:a3:b7:1c:7e:
                    fe:40:5d:70:25:92:e7:32:70:33:1e:e8:77:4f:be:
                    1a:b6:30:34:ed:70:97:7b:b9:18:13:54:56:d0:de:
                    2e:13:4a:df:63:36:da:4e:7f:3d:56:a7:9c:e0:40:
                    37:7a:89:a7:8a:d1:10:42:ab:e6:78:f6:82:73:cb:
                    14:37:fd:eb:f5:7f:06:cb:30:16:78:91:c1:44:04:
                    ae:ab:1c:9f:9a:01:af:c5:bf:cb:c7:f9:a3:fa:17:
                    ec:ab:75:ba:48:58:98:21:57:94:b4:f2:8f:a1:e8:
                    85:08:e1:02:c0:56:79:fc:13:92:b1:ee:b5:03:4e:
                    34:33:a6:a4:81:96:8e:f8:a9:56:2b:ea:37:1d:8d:
                    60:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E3:85:61:64:6A:A5:B6:5C:61:1F:CE:BF:DF:26:24:1C:FC:83:02
            X509v3 Authority Key Identifier:
                keyid:2F:3D:9C:77:D7:D1:52:10:EA:3C:6A:62:95:3B:5F:B5:2F:EA:87:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GjyYAU52QoYGT2Po3nTaSeTUWhKxvkF8DetMZ9gxiV4J/0/2F3D9C77D7D15210EA3C6A62953B5FB52FEA876C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3D9C77D7D15210EA3C6A62953B5FB52FEA876C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GjyYAU52QoYGT2Po3nTaSeTUWhKxvkF8DetMZ9gxiV4J/0/3139302e38392e342e302f32342d3234203d3e20323730333939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.4.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:02:d6:9a:af:cc:b6:f6:37:f9:5b:b0:88:93:9c:7d:af:83:
         8b:13:2c:9a:38:a6:ec:7d:0a:a9:a4:bc:41:b9:2c:dd:5b:7f:
         1e:c9:8a:51:f8:f5:da:e3:97:ea:59:24:25:da:2c:35:cf:18:
         04:45:aa:bb:8e:e7:cb:07:50:61:72:19:62:32:db:5a:52:9c:
         61:fc:fd:54:a7:bd:48:d7:92:c3:de:46:d5:e3:db:43:76:a8:
         85:d8:85:3a:6e:0c:fd:6c:e6:92:2c:21:09:df:44:7a:10:86:
         be:64:19:7e:ee:53:5d:e1:7d:6f:90:50:6b:aa:91:ee:9b:1b:
         77:21:cd:8a:c1:02:71:8b:5d:dd:09:ba:3e:03:16:f3:57:4a:
         16:93:b7:46:bf:20:1c:05:62:de:13:c7:5d:e7:a7:12:e3:78:
         05:81:20:a9:02:2b:56:bf:06:10:b8:62:e0:90:e7:50:77:5a:
         12:b7:ce:c0:b4:0e:96:a9:83:6a:74:73:65:25:82:37:f1:d0:
         50:40:53:9a:ff:90:71:b3:90:ac:6a:63:2a:fa:2f:59:d8:c1:
         8b:4c:f7:59:31:f2:5e:42:35:80:92:f8:43:d2:f9:f0:6e:6b:
         da:b4:14:06:89:8a:d1:b5:25:3c:86:13:30:fa:f3:e7:66:01:
         b5:f8:c1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----