Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3133312e37322e38302e302f32322d3234203d3e203238353834.roa
File:                     3133312e37322e38302e302f32322d3234203d3e203238353834.roa (raw, json)
Hash identifier:          l64Poq4g5hl9poyqsOLclQ0crjviwfOXU8Mmd2P/gQg=
Subject key identifier:   81:FD:D3:AC:FE:CB:C8:7D:35:EA:3C:80:0F:42:82:FF:F1:84:4D:DB
Certificate issuer:       /CN=B3EC7F5F7D6B690F3B724BC2B063C17F2D5419B9
Certificate serial:       37B48092243740C57FD28EDD5DB43BCD1488B5C3
Authority key identifier: B3:EC:7F:5F:7D:6B:69:0F:3B:72:4B:C2:B0:63:C1:7F:2D:54:19:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3EC7F5F7D6B690F3B724BC2B063C17F2D5419B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3133312e37322e38302e302f32322d3234203d3e203238353834.roa
Signing time:             Sat 04 Apr 2026 17:26:14 +0000
ROA not before:           Sat 04 Apr 2026 17:21:14 +0000
ROA not after:            Sat 03 Apr 2027 17:26:14 +0000
asID:                     28584
IP address blocks:        131.72.80.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:b4:80:92:24:37:40:c5:7f:d2:8e:dd:5d:b4:3b:cd:14:88:b5:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3EC7F5F7D6B690F3B724BC2B063C17F2D5419B9
        Validity
            Not Before: Apr  4 17:21:14 2026 GMT
            Not After : Apr  3 17:26:14 2027 GMT
        Subject: CN=81FDD3ACFECBC87D35EA3C800F4282FFF1844DDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:97:d8:82:f0:11:7f:0b:53:4c:50:c8:a4:74:
                    38:c7:af:d4:b0:23:19:c5:08:c0:b8:4f:b3:7f:64:
                    a2:53:9e:aa:0b:a8:c9:18:8f:a5:ec:e4:cb:91:3c:
                    00:89:d0:e1:a5:ab:29:cc:23:28:78:6e:c9:90:07:
                    40:a5:ee:0f:17:1b:f4:d4:f1:71:82:5f:89:f0:f2:
                    87:67:01:79:f2:ad:1a:07:2e:fa:d5:ad:6a:28:c7:
                    57:6f:c0:3f:ec:6a:b3:bc:62:f2:51:11:cc:9a:a2:
                    e1:ed:6e:ed:1a:5e:4e:b7:5a:98:8f:fe:3b:14:71:
                    91:2d:e2:b7:8d:7a:7a:97:e1:39:d8:43:bb:19:1d:
                    03:29:73:ad:74:02:6b:1e:ed:ce:2d:56:d8:3d:65:
                    36:6d:6b:f7:92:58:f9:62:9d:6a:39:d4:9e:5c:91:
                    bb:2d:13:91:86:01:95:54:18:f8:ed:23:1c:eb:2b:
                    ae:a4:2b:02:51:b4:b6:01:40:38:31:80:5b:75:b2:
                    90:da:19:de:81:a2:0c:f3:db:ca:f4:5c:ee:52:51:
                    2a:5e:66:48:97:c1:fb:39:7d:64:03:e1:a6:5b:27:
                    72:dd:a3:ad:26:ab:cb:33:5f:19:de:35:fe:07:2a:
                    51:f6:a5:66:49:e4:e5:38:5d:b3:7d:75:f6:45:c5:
                    9e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:FD:D3:AC:FE:CB:C8:7D:35:EA:3C:80:0F:42:82:FF:F1:84:4D:DB
            X509v3 Authority Key Identifier:
                keyid:B3:EC:7F:5F:7D:6B:69:0F:3B:72:4B:C2:B0:63:C1:7F:2D:54:19:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/B3EC7F5F7D6B690F3B724BC2B063C17F2D5419B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3EC7F5F7D6B690F3B724BC2B063C17F2D5419B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/3133312e37322e38302e302f32322d3234203d3e203238353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         97:c3:99:c0:83:63:d1:39:53:ce:dd:9c:1c:49:bf:2c:db:76:
         1f:73:85:ff:b1:3c:fe:26:0d:0d:13:21:ce:1c:fe:d1:d3:00:
         e3:f0:e2:ca:ed:97:c4:17:9d:3c:ec:b9:36:de:ec:cb:1e:29:
         c8:6b:5e:d6:4f:57:87:09:69:35:30:34:44:95:95:fd:c6:b7:
         03:de:86:ee:2e:e1:a7:52:89:7e:67:32:df:9b:f1:15:6d:53:
         3c:09:61:37:b7:88:0e:41:d3:df:b4:c0:4b:f7:0f:b8:be:d5:
         c7:74:1c:cc:e2:d7:52:79:de:9a:04:9c:1d:b1:9e:ea:04:61:
         1a:30:07:10:e3:2f:17:de:d0:e6:fb:74:80:f3:43:db:63:25:
         ad:f2:63:c9:42:bb:bf:46:d8:94:09:8a:36:86:7b:f5:a5:67:
         11:a1:47:c0:35:cf:f1:32:55:f9:5a:13:37:7c:db:7d:7b:43:
         c4:c3:54:95:89:3c:c2:2f:0d:08:59:a2:22:0d:93:dd:9c:c7:
         ea:31:92:ef:45:11:83:68:14:32:0d:40:b6:82:57:fb:c1:3d:
         97:62:66:ac:08:dc:e7:c3:56:f1:73:da:4d:6c:a9:72:05:6c:
         bf:58:a4:a3:c0:9b:df:af:c6:b5:24:b8:eb:53:f6:f5:da:52:
         2f:9d:73:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 23:11:12 2026 by rpki-client