Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/0/3136382e3139342e3138342e302f32322d3234203d3e20323635333937.roa
File:                     3136382e3139342e3138342e302f32322d3234203d3e20323635333937.roa (raw, json)
Hash identifier:          0ykDL46jH6e1NP9xpxccjeDf050usNZBvxkrbXft89A=
Subject key identifier:   77:09:E7:24:60:F4:7B:78:CD:AC:16:2B:87:95:48:9A:CF:E2:E9:49
Certificate issuer:       /CN=B377B7482ED7F503357F5828A4FA2A53C077B23A
Certificate serial:       735D96E8242DCEBBD0863D3E315511C2CC77725C
Authority key identifier: B3:77:B7:48:2E:D7:F5:03:35:7F:58:28:A4:FA:2A:53:C0:77:B2:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B377B7482ED7F503357F5828A4FA2A53C077B23A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/0/3136382e3139342e3138342e302f32322d3234203d3e20323635333937.roa
Signing time:             Mon 24 Aug 2026 21:11:13 +0000
ROA not before:           Mon 24 Aug 2026 21:06:13 +0000
ROA not after:            Mon 23 Aug 2027 21:11:13 +0000
asID:                     265397
IP address blocks:        168.194.184.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:5d:96:e8:24:2d:ce:bb:d0:86:3d:3e:31:55:11:c2:cc:77:72:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B377B7482ED7F503357F5828A4FA2A53C077B23A
        Validity
            Not Before: Aug 24 21:06:13 2026 GMT
            Not After : Aug 23 21:11:13 2027 GMT
        Subject: CN=7709E72460F47B78CDAC162B8795489ACFE2E949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f1:08:7b:7b:d5:cc:10:03:e9:85:16:d2:84:
                    d4:1c:d8:c3:2d:24:1c:16:37:c5:71:7a:12:7e:68:
                    62:b9:23:21:cd:0b:b6:bc:85:fb:f4:db:f2:e9:fc:
                    47:6f:59:0a:ee:90:98:83:92:35:de:7f:02:d7:35:
                    f2:8f:c8:50:a8:fe:e6:04:65:ae:2e:c9:ba:a0:1a:
                    3a:cc:62:8d:42:7e:01:83:2b:70:ff:46:a5:42:a7:
                    4a:d5:2a:4c:c1:63:fa:06:52:ef:21:97:3e:ce:50:
                    f5:30:cb:e0:3f:64:3b:45:0a:30:bc:16:3a:18:d3:
                    58:e8:a5:68:c3:d4:85:be:2e:01:e2:8a:9f:3e:4c:
                    3e:d3:af:fe:3e:4b:30:e2:56:7f:c8:00:e8:4e:33:
                    19:75:c5:e0:63:63:0c:20:6a:dd:a8:f8:de:55:79:
                    6b:04:2b:35:94:e0:50:36:2b:7b:df:93:3f:24:21:
                    c3:b0:ec:08:00:31:95:fc:2a:34:49:96:26:08:51:
                    7d:47:78:9e:ca:31:a8:1e:9f:7f:4a:d6:e8:88:67:
                    9f:d6:99:3b:6c:07:f2:a2:e7:17:20:e6:77:32:79:
                    5d:f0:18:e1:b5:4d:aa:64:ae:a0:7c:8c:b0:85:e4:
                    11:dc:85:c0:49:49:96:a8:05:64:e4:ad:27:e4:94:
                    37:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:09:E7:24:60:F4:7B:78:CD:AC:16:2B:87:95:48:9A:CF:E2:E9:49
            X509v3 Authority Key Identifier:
                keyid:B3:77:B7:48:2E:D7:F5:03:35:7F:58:28:A4:FA:2A:53:C0:77:B2:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/0/B377B7482ED7F503357F5828A4FA2A53C077B23A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B377B7482ED7F503357F5828A4FA2A53C077B23A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/0/3136382e3139342e3138342e302f32322d3234203d3e20323635333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:e0:1e:a1:6f:b5:8b:31:31:a5:db:1d:1b:18:bd:ea:df:3d:
         2f:8f:b3:35:56:16:f3:7b:16:73:9d:af:ee:2f:cf:a5:a8:8e:
         a3:5a:92:86:32:da:c6:f4:67:9a:97:2e:9b:01:7f:b9:33:e7:
         2f:b0:45:82:fd:63:85:49:c0:f0:ef:1b:bc:d7:00:f3:d4:f3:
         f1:d9:d7:e3:0d:e7:3f:a9:2d:ac:9e:d3:d5:79:25:dd:ae:df:
         6e:c2:3c:d4:df:8d:dc:53:5a:f8:a8:cf:0b:d8:1c:4d:fd:a9:
         32:d4:69:60:c6:8d:43:9a:f9:6d:1f:13:83:11:bd:52:0d:89:
         3e:dd:fd:73:61:42:fa:bb:d0:30:dd:ac:c2:62:31:95:a1:90:
         31:30:7f:10:0c:6a:2b:03:b5:06:cf:35:48:de:03:f9:ca:7f:
         e3:87:77:af:30:86:6a:a8:66:06:de:45:d0:2c:9f:84:92:3f:
         bd:2e:ec:01:6a:a1:2a:55:2c:1b:73:e9:d7:09:42:0b:83:e6:
         ec:ae:5d:be:53:6a:36:e0:c2:34:39:0e:2f:23:ec:33:8c:24:
         76:ea:f4:80:81:34:8b:3a:12:38:c7:df:81:91:28:41:fb:3a:
         d6:74:c0:81:bc:6f:c2:ae:88:ba:31:06:d3:4f:e8:cf:fd:26:
         a7:bc:4e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----