Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/0/3133382e39342e3136382e302f32332d3233203d3e20323730383736.roa
File:                     3133382e39342e3136382e302f32332d3233203d3e20323730383736.roa (raw, json)
Hash identifier:          OeSY58F2jo5pyuTUM6upxGczxfKLqycRJ3CIJJWPMTs=
Subject key identifier:   47:91:AF:B1:36:FB:95:89:56:F8:60:D0:46:5B:4F:67:E9:71:D4:68
Certificate issuer:       /CN=215EFBF4ED052171AF3D905A95BF8D33E800A9FE
Certificate serial:       1B3C6A8210C0ED50F895C04B931B5A04CEC5B1F9
Authority key identifier: 21:5E:FB:F4:ED:05:21:71:AF:3D:90:5A:95:BF:8D:33:E8:00:A9:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/215EFBF4ED052171AF3D905A95BF8D33E800A9FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/0/3133382e39342e3136382e302f32332d3233203d3e20323730383736.roa
Signing time:             Thu 09 Jul 2026 20:02:00 +0000
ROA not before:           Thu 09 Jul 2026 19:57:00 +0000
ROA not after:            Thu 08 Jul 2027 20:02:00 +0000
asID:                     270876
IP address blocks:        138.94.168.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:3c:6a:82:10:c0:ed:50:f8:95:c0:4b:93:1b:5a:04:ce:c5:b1:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=215EFBF4ED052171AF3D905A95BF8D33E800A9FE
        Validity
            Not Before: Jul  9 19:57:00 2026 GMT
            Not After : Jul  8 20:02:00 2027 GMT
        Subject: CN=4791AFB136FB958956F860D0465B4F67E971D468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e3:d6:f9:d4:f0:de:dc:e7:df:c0:3a:11:83:
                    c3:30:b9:60:18:b1:9c:18:33:e9:d9:55:78:72:58:
                    30:e5:e9:b3:e5:1b:d9:e5:67:15:2e:fe:4e:7d:5d:
                    1d:bb:35:7b:f7:aa:05:98:ca:f7:9e:19:65:ca:2b:
                    d8:af:8f:62:68:b3:4e:d9:7a:82:ac:d4:61:3b:4a:
                    39:a2:cd:bd:49:60:72:95:ef:e4:e5:ba:a5:7a:5a:
                    31:cf:89:da:bb:f6:c0:97:63:35:9c:e9:1a:73:fd:
                    f2:80:88:bd:c2:69:60:1b:76:86:0e:a4:2e:28:c4:
                    2d:16:14:b1:c9:d1:ae:c9:c1:98:ff:9c:7d:9a:f2:
                    ff:7e:5c:65:a1:85:13:37:e2:99:c7:01:7c:3d:28:
                    f0:ad:ab:08:24:82:3e:ac:a4:98:0a:0a:cb:5f:7e:
                    ef:bb:ed:a0:b9:e9:b0:44:a4:22:ce:d7:af:d6:63:
                    cf:51:67:6e:c8:e4:58:bc:35:d7:0e:2d:ee:a3:f5:
                    cc:6c:3c:d1:65:34:46:f2:4b:fb:dc:77:94:98:f5:
                    63:ae:fa:a5:0e:40:6f:16:2b:ed:c8:fe:c7:7c:dc:
                    30:d6:c9:b0:5f:f2:a7:ef:e3:7c:e3:34:b9:91:f5:
                    8a:7f:94:93:70:c2:9e:08:d0:94:97:b4:dc:eb:44:
                    4a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:91:AF:B1:36:FB:95:89:56:F8:60:D0:46:5B:4F:67:E9:71:D4:68
            X509v3 Authority Key Identifier:
                keyid:21:5E:FB:F4:ED:05:21:71:AF:3D:90:5A:95:BF:8D:33:E8:00:A9:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/0/215EFBF4ED052171AF3D905A95BF8D33E800A9FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/215EFBF4ED052171AF3D905A95BF8D33E800A9FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/0/3133382e39342e3136382e302f32332d3233203d3e20323730383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:27:a6:dd:cb:8e:54:69:5a:ae:5e:1e:cd:17:32:53:0e:2c:
         48:cb:cd:de:1c:04:91:d1:64:ad:10:59:42:65:36:b3:fb:eb:
         91:9f:48:09:31:39:12:c1:8f:df:6a:e5:3b:97:a4:4b:4f:44:
         37:1f:b6:65:7d:9a:7b:ca:d9:02:cf:06:5c:71:0a:3a:39:fd:
         6d:e5:a3:c6:d9:90:7e:c8:50:1c:41:fc:2b:ee:0c:83:56:86:
         c0:3f:b1:1e:dd:77:b5:ef:c9:d3:70:17:21:73:33:a6:5a:95:
         d6:37:40:63:00:19:53:ad:7a:c5:f6:60:7c:5f:38:c8:3e:bb:
         c2:9c:e4:22:8e:1d:71:b6:9b:d3:17:a9:32:92:ac:71:0f:6b:
         71:74:b5:87:eb:67:f7:a8:11:78:2c:0d:df:25:81:17:be:8b:
         de:93:8b:90:69:ea:dc:db:74:56:3a:c4:50:4f:ce:cf:81:3b:
         e6:eb:f1:ab:2f:7e:e7:47:ba:80:c3:91:81:b0:02:eb:f7:ea:
         46:e6:f6:d0:73:3d:e1:bc:f5:57:4e:14:a6:b3:c3:53:5c:81:
         8e:73:ef:e4:c8:15:9b:1c:9d:f0:2b:96:5e:33:20:9e:2f:01:
         66:7d:f7:cf:2a:4a:14:aa:ce:f2:04:7b:11:28:f4:7f:97:5c:
         1b:3f:71:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----