Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/0/3133382e39342e3136382e302f32342d3234203d3e20323730383736.roa
File:                     3133382e39342e3136382e302f32342d3234203d3e20323730383736.roa (raw, json)
Hash identifier:          8MKYBRYS7PkqLjRcL5BtFIqufMMHJLCTMt35ZT7XP5E=
Subject key identifier:   95:03:48:32:04:82:CF:F6:E5:7B:3D:1D:6B:2B:DA:BF:15:89:68:00
Certificate issuer:       /CN=215EFBF4ED052171AF3D905A95BF8D33E800A9FE
Certificate serial:       7BF98AC2FE1418CB3D14EE87794CE55DA6685F42
Authority key identifier: 21:5E:FB:F4:ED:05:21:71:AF:3D:90:5A:95:BF:8D:33:E8:00:A9:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/215EFBF4ED052171AF3D905A95BF8D33E800A9FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/0/3133382e39342e3136382e302f32342d3234203d3e20323730383736.roa
Signing time:             Thu 09 Jul 2026 20:02:01 +0000
ROA not before:           Thu 09 Jul 2026 19:57:01 +0000
ROA not after:            Thu 08 Jul 2027 20:02:01 +0000
asID:                     270876
IP address blocks:        138.94.168.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:f9:8a:c2:fe:14:18:cb:3d:14:ee:87:79:4c:e5:5d:a6:68:5f:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=215EFBF4ED052171AF3D905A95BF8D33E800A9FE
        Validity
            Not Before: Jul  9 19:57:01 2026 GMT
            Not After : Jul  8 20:02:01 2027 GMT
        Subject: CN=950348320482CFF6E57B3D1D6B2BDABF15896800
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cd:20:26:31:ec:89:6c:27:b2:1e:68:8b:64:
                    fe:df:f4:87:ef:78:83:32:fd:59:b4:e2:e0:e6:51:
                    5a:95:49:08:5c:67:f8:8e:7b:9d:7d:8c:b6:78:6c:
                    e4:d8:57:06:bc:fe:dc:1c:dc:b7:45:19:a2:d7:4a:
                    a6:c2:0c:b8:f3:f1:c5:22:38:7e:3a:0b:96:68:d4:
                    d3:d4:87:ba:3f:99:c1:ba:99:97:db:c3:de:f1:a2:
                    17:07:20:0f:53:9f:11:ab:df:ee:ea:1b:ba:3e:5e:
                    3d:46:f2:18:43:2e:cd:65:cd:1a:a8:e2:5f:04:6d:
                    e5:13:4b:d1:11:26:86:21:31:f8:bd:a6:87:54:d4:
                    0f:de:af:35:ba:7a:88:6c:36:83:92:1d:6a:87:5a:
                    53:56:4c:4d:10:a9:f1:b2:6f:74:a1:0e:f5:80:91:
                    41:31:b3:55:58:8a:97:f1:f4:d0:d9:2d:0a:86:cb:
                    2a:bf:19:58:3f:8d:e8:9f:21:12:fd:95:69:36:21:
                    e4:5b:da:34:99:4e:80:5c:4d:6c:37:74:c9:3e:af:
                    af:20:f9:61:ee:f2:74:61:ea:e5:86:cb:a7:8f:6b:
                    4e:f0:ad:e4:8c:95:24:29:f4:74:db:ce:ef:cd:1b:
                    a4:bb:dd:e3:de:b3:a1:c7:6f:44:61:6f:62:67:e3:
                    40:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:03:48:32:04:82:CF:F6:E5:7B:3D:1D:6B:2B:DA:BF:15:89:68:00
            X509v3 Authority Key Identifier:
                keyid:21:5E:FB:F4:ED:05:21:71:AF:3D:90:5A:95:BF:8D:33:E8:00:A9:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/0/215EFBF4ED052171AF3D905A95BF8D33E800A9FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/215EFBF4ED052171AF3D905A95BF8D33E800A9FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/0/3133382e39342e3136382e302f32342d3234203d3e20323730383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:58:3f:57:d0:64:fb:34:d4:7a:dc:f2:da:ad:8b:78:db:15:
         83:bc:5c:4c:eb:7f:7f:83:36:c4:24:dd:b4:17:d0:1d:79:f9:
         b4:c0:cb:8e:a7:c1:62:7f:b2:06:92:82:a5:70:f3:45:1c:75:
         53:71:25:5f:8c:08:27:f2:60:88:d3:ff:be:8d:94:c3:35:90:
         66:65:5c:af:d7:da:75:3e:67:0b:77:5c:d3:53:43:2c:7f:fa:
         59:0d:fc:64:d7:25:fb:0f:cd:b3:15:06:45:c8:f3:e6:25:a7:
         38:1c:bf:62:cc:1e:82:d1:b5:2e:94:85:ed:0d:0f:0f:ec:7b:
         bd:da:d4:ef:63:d1:e0:bf:ac:08:6b:e9:8d:15:68:35:58:a0:
         f9:f8:b3:6b:8d:44:e0:14:df:cc:3e:80:41:ba:03:7e:e3:23:
         d4:e5:b4:d0:a8:6c:ca:2e:df:b1:71:56:f5:c4:d2:5f:fe:aa:
         fc:52:e5:89:18:e8:57:59:77:d9:b1:0c:f3:47:e7:2b:2d:3c:
         d1:e7:0e:c6:30:5e:70:cc:ec:2a:a5:41:94:ea:d4:9c:ca:a1:
         4f:57:2a:46:69:cc:a4:09:89:76:cf:f5:41:c3:94:5c:bf:7d:
         64:ed:f7:92:cd:9c:a7:7f:72:e9:8b:8d:4e:94:0a:b1:0b:25:
         4f:8c:79:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----