Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GjyYAU52QoYGT2Po3nTaSeTUWhKxvkF8DetMZ9gxiV4J/0/3139302e38392e372e302f32342d3234203d3e20323730333939.roa
File:                     3139302e38392e372e302f32342d3234203d3e20323730333939.roa (raw, json)
Hash identifier:          eDkYXs8rJL7jQhCX0oEFlseWkrxelmhe/NLvUngpKCA=
Subject key identifier:   7B:23:C7:05:41:0A:AB:87:6A:70:32:3C:83:6B:A6:82:04:DE:B4:83
Certificate issuer:       /CN=2F3D9C77D7D15210EA3C6A62953B5FB52FEA876C
Certificate serial:       495913B7731A54C96E40F392BA25CB36E6CE1E55
Authority key identifier: 2F:3D:9C:77:D7:D1:52:10:EA:3C:6A:62:95:3B:5F:B5:2F:EA:87:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3D9C77D7D15210EA3C6A62953B5FB52FEA876C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GjyYAU52QoYGT2Po3nTaSeTUWhKxvkF8DetMZ9gxiV4J/0/3139302e38392e372e302f32342d3234203d3e20323730333939.roa
Signing time:             Tue 29 Sep 2026 01:56:40 +0000
ROA not before:           Tue 29 Sep 2026 01:51:40 +0000
ROA not after:            Tue 28 Sep 2027 01:56:40 +0000
asID:                     270399
IP address blocks:        190.89.7.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:59:13:b7:73:1a:54:c9:6e:40:f3:92:ba:25:cb:36:e6:ce:1e:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2F3D9C77D7D15210EA3C6A62953B5FB52FEA876C
        Validity
            Not Before: Sep 29 01:51:40 2026 GMT
            Not After : Sep 28 01:56:40 2027 GMT
        Subject: CN=7B23C705410AAB876A70323C836BA68204DEB483
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:dc:a6:eb:2c:d6:67:1c:c2:9f:d5:11:39:02:
                    26:f8:c0:01:39:19:85:32:36:2c:e1:ba:23:00:ff:
                    c5:f4:0f:ec:04:13:dd:5a:69:a2:08:2c:ec:67:36:
                    b3:c2:b6:b3:64:c2:1d:be:9e:5d:7c:52:33:a4:3a:
                    ed:2e:97:6b:62:68:02:fe:bb:69:ad:ef:6c:13:1a:
                    4e:17:d0:59:d7:28:6c:32:a5:70:ad:8e:10:87:98:
                    35:f9:42:90:62:03:d7:6f:57:03:3e:7f:a4:ea:b4:
                    32:5d:38:50:6f:be:a1:28:10:e7:4d:e4:83:30:52:
                    87:55:29:aa:0b:27:e1:d8:db:34:d6:58:09:62:16:
                    81:52:f2:1e:b9:bf:ac:d1:97:87:22:8e:f5:35:5a:
                    be:cc:be:56:bd:ae:a4:a6:cf:ab:4f:84:31:a4:0e:
                    e6:c3:66:cb:0b:0d:40:fa:21:70:7f:04:dc:4b:fd:
                    03:c3:12:0f:5a:49:d6:c5:97:d7:f3:53:93:c4:24:
                    55:82:e8:68:b8:b2:86:30:63:ff:ff:b3:c7:15:95:
                    17:61:8e:32:eb:52:4e:e8:28:0c:05:db:6a:8f:1a:
                    81:7c:f5:4b:4c:0a:9e:0f:83:f7:f3:a0:ec:f2:14:
                    f7:d7:70:79:a4:e3:81:a9:f7:ab:b9:cc:5e:a2:71:
                    5d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:23:C7:05:41:0A:AB:87:6A:70:32:3C:83:6B:A6:82:04:DE:B4:83
            X509v3 Authority Key Identifier:
                keyid:2F:3D:9C:77:D7:D1:52:10:EA:3C:6A:62:95:3B:5F:B5:2F:EA:87:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GjyYAU52QoYGT2Po3nTaSeTUWhKxvkF8DetMZ9gxiV4J/0/2F3D9C77D7D15210EA3C6A62953B5FB52FEA876C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2F3D9C77D7D15210EA3C6A62953B5FB52FEA876C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GjyYAU52QoYGT2Po3nTaSeTUWhKxvkF8DetMZ9gxiV4J/0/3139302e38392e372e302f32342d3234203d3e20323730333939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:85:17:8a:dd:21:c9:fc:01:0b:f7:12:ad:b9:7f:97:0a:38:
         45:f9:c6:81:0a:a0:f0:9b:2e:3c:c1:ff:c9:b8:9f:90:c2:35:
         7b:62:e4:74:34:09:67:30:e5:eb:bc:6b:31:43:03:77:6a:d0:
         09:0f:fa:3d:43:84:6a:fb:f2:a8:83:30:3f:c0:a8:3d:89:db:
         9a:07:a4:a3:f4:7c:3e:8e:5b:ff:1d:56:53:5b:a6:82:9d:b9:
         fa:fd:77:a4:44:ae:b9:ed:60:0c:2b:53:ca:f0:94:58:a4:eb:
         65:81:35:0d:b9:e3:98:a4:c3:fa:8a:c7:ba:4b:4b:85:eb:31:
         0f:d0:dd:f0:07:c1:f9:a6:83:27:25:74:75:80:c3:2a:10:dd:
         9e:91:1a:27:9a:b0:c9:5b:4f:4e:2e:64:7c:c0:bf:03:9b:0d:
         5a:0f:24:70:a9:5c:0d:df:c2:26:9d:ee:1e:17:b2:e7:c6:12:
         98:fc:9b:4c:01:26:c5:ea:a1:ec:e4:6b:50:5d:fd:a7:ba:74:
         02:e5:98:ea:fc:04:b3:dc:0e:21:c7:8d:51:5d:21:07:4e:18:
         7e:dc:3f:7d:5c:a0:69:91:87:c7:26:4d:20:a4:f8:1b:78:f5:
         e0:03:1d:04:4c:80:f5:51:fb:07:3f:43:17:54:76:99:36:f4:
         76:49:7f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----