Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2rMAZ2FtX8DoBx8mrBo6oTtY1nBZd56ptxqmjy2bucdq/0/3138362e3139352e3139322e302f32302d3234203d3e203533323038.roa
File:                     3138362e3139352e3139322e302f32302d3234203d3e203533323038.roa (raw, json)
Hash identifier:          EjXejHfl0GrVSlwFbbJ+F+OfTkA4kCCzuM7sYK9q7NA=
Subject key identifier:   65:7D:C8:51:97:10:94:2E:86:0A:FE:BB:00:99:DF:44:D8:95:8C:DF
Certificate issuer:       /CN=0F78626D3BF8B07214C737318E62EE73094347B3
Certificate serial:       5D0077FB555B8692F2E80F3E3ABDDEFE4689870D
Authority key identifier: 0F:78:62:6D:3B:F8:B0:72:14:C7:37:31:8E:62:EE:73:09:43:47:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F78626D3BF8B07214C737318E62EE73094347B3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2rMAZ2FtX8DoBx8mrBo6oTtY1nBZd56ptxqmjy2bucdq/0/3138362e3139352e3139322e302f32302d3234203d3e203533323038.roa
Signing time:             Fri 20 Feb 2026 13:08:36 +0000
ROA not before:           Fri 20 Feb 2026 13:03:36 +0000
ROA not after:            Fri 19 Feb 2027 13:08:36 +0000
asID:                     53208
IP address blocks:        186.195.192.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:00:77:fb:55:5b:86:92:f2:e8:0f:3e:3a:bd:de:fe:46:89:87:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F78626D3BF8B07214C737318E62EE73094347B3
        Validity
            Not Before: Feb 20 13:03:36 2026 GMT
            Not After : Feb 19 13:08:36 2027 GMT
        Subject: CN=657DC8519710942E860AFEBB0099DF44D8958CDF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ba:dc:37:d3:de:ff:0d:cc:a0:4b:40:57:42:
                    fa:92:f1:4d:99:28:72:3b:01:8b:93:49:90:71:96:
                    90:dc:16:7e:dc:17:0f:ab:89:ff:88:91:36:7a:3c:
                    b3:3a:bd:56:d7:e5:df:98:df:a5:44:5c:5a:8b:9a:
                    99:37:0c:b7:58:f6:02:07:bd:6f:79:7e:8d:e8:3a:
                    a2:95:ba:d2:58:31:3a:07:ec:a1:84:c1:13:bd:88:
                    b3:d1:9c:b1:2a:52:8a:a3:50:08:a0:39:fb:d8:93:
                    95:8c:6a:5e:b3:02:5c:39:c1:90:bb:c1:37:c9:74:
                    a0:6d:cd:3c:72:e4:1d:d6:b9:03:6a:2c:27:44:d0:
                    26:ee:d2:4f:28:d7:4f:cd:a3:37:30:29:70:8c:cc:
                    93:47:97:15:a9:32:26:f3:9c:c1:c5:d1:24:dd:fe:
                    d5:f6:00:6b:c7:6d:a0:90:be:45:e5:4a:af:bc:8d:
                    79:de:d1:b9:4f:d9:5a:75:86:78:e3:f1:d6:22:92:
                    7b:33:a0:17:d2:67:34:b2:d3:23:1e:e0:b3:32:51:
                    90:c9:8f:7c:67:74:82:cc:fb:cc:e2:f4:56:9a:d3:
                    6b:71:7e:34:d4:44:2c:dd:d4:1f:01:16:0c:23:2c:
                    94:70:24:69:dd:d7:89:e7:82:53:f6:6f:cf:9c:9f:
                    b8:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:7D:C8:51:97:10:94:2E:86:0A:FE:BB:00:99:DF:44:D8:95:8C:DF
            X509v3 Authority Key Identifier:
                keyid:0F:78:62:6D:3B:F8:B0:72:14:C7:37:31:8E:62:EE:73:09:43:47:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2rMAZ2FtX8DoBx8mrBo6oTtY1nBZd56ptxqmjy2bucdq/0/0F78626D3BF8B07214C737318E62EE73094347B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0F78626D3BF8B07214C737318E62EE73094347B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2rMAZ2FtX8DoBx8mrBo6oTtY1nBZd56ptxqmjy2bucdq/0/3138362e3139352e3139322e302f32302d3234203d3e203533323038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         86:e9:af:6a:ce:0d:ba:40:00:6e:23:87:0c:30:b6:00:b5:9a:
         24:7f:32:79:39:8b:bb:a9:8c:e7:01:f6:34:b7:05:2a:73:18:
         09:ab:49:bc:da:3c:95:c3:50:3f:43:dc:00:a3:7e:69:cb:e5:
         bd:c7:0c:54:e2:7a:25:20:0f:bc:b0:87:2d:08:f6:5f:94:b8:
         c5:ce:fd:45:6e:4c:8b:e1:45:42:87:27:d9:b8:a5:fb:9a:1b:
         9c:65:26:ec:25:b7:9a:90:80:31:9c:43:a0:5b:a9:db:e6:9b:
         80:1f:d3:13:e4:93:2c:41:fd:8e:19:1c:0e:f7:9a:19:0a:4d:
         6f:f7:16:79:fb:d9:f6:3c:4b:e3:bb:d1:99:46:4f:34:c6:83:
         9c:e0:47:af:e6:be:01:ba:c4:52:67:4c:0b:3a:d0:c0:7b:9c:
         68:b1:01:12:41:48:5d:97:51:a2:e8:ae:04:b1:68:6b:62:10:
         13:d8:b2:dd:ed:64:47:2c:d0:20:74:e3:c0:cf:c8:14:06:93:
         29:30:86:66:be:fb:2e:05:3f:72:1b:31:99:39:12:c8:f1:a4:
         60:70:ab:cc:47:5f:85:76:9b:11:0e:6f:b9:2b:72:cd:cb:4c:
         97:b6:0e:37:c9:f8:fb:ec:cb:6c:da:5f:ae:f7:5a:3a:9c:b4:
         10:e8:53:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 14:55:25 2026 by rpki-client