Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3fCGbqn7pBfFivrRUdzjSRrvi1nJgxraoQZoTwm3tshD/0/3133312e3139362e3134382e302f32322d3332203d3e20323635393133.roa
File:                     3133312e3139362e3134382e302f32322d3332203d3e20323635393133.roa (raw, json)
Hash identifier:          7VfUqQ+sQeLZHJjR+noWt0EimmzfyZneIXGQxTzVl7s=
Subject key identifier:   9A:7A:60:99:FF:60:92:9E:98:09:EB:67:4C:D1:AD:C8:25:37:0B:96
Certificate issuer:       /CN=395059341ED0269CD3F888FC1759C53519AF7ECD
Certificate serial:       05AF1B00386E3241BED35FEB602209371E15261C
Authority key identifier: 39:50:59:34:1E:D0:26:9C:D3:F8:88:FC:17:59:C5:35:19:AF:7E:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395059341ED0269CD3F888FC1759C53519AF7ECD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3fCGbqn7pBfFivrRUdzjSRrvi1nJgxraoQZoTwm3tshD/0/3133312e3139362e3134382e302f32322d3332203d3e20323635393133.roa
Signing time:             Fri 03 Jul 2026 22:23:22 +0000
ROA not before:           Fri 03 Jul 2026 22:18:22 +0000
ROA not after:            Fri 02 Jul 2027 22:23:22 +0000
asID:                     265913
IP address blocks:        131.196.148.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:af:1b:00:38:6e:32:41:be:d3:5f:eb:60:22:09:37:1e:15:26:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=395059341ED0269CD3F888FC1759C53519AF7ECD
        Validity
            Not Before: Jul  3 22:18:22 2026 GMT
            Not After : Jul  2 22:23:22 2027 GMT
        Subject: CN=9A7A6099FF60929E9809EB674CD1ADC825370B96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:45:69:0a:24:66:40:28:13:8e:90:5d:88:91:
                    12:b0:7c:2d:14:06:6c:e3:1d:21:20:28:42:06:ce:
                    63:19:4e:d5:54:b1:4f:37:e7:58:6e:b2:d9:9c:0a:
                    49:d2:73:9a:f8:45:f1:04:60:18:0a:ba:70:15:c3:
                    74:22:75:f3:03:0f:2e:f5:00:46:3a:0c:60:79:a4:
                    a0:5f:76:46:be:7b:5d:0d:5b:a7:c0:8f:20:fc:6b:
                    6f:84:db:9d:a7:03:f7:56:d1:ad:cd:be:86:09:9e:
                    08:e1:b4:13:b7:9a:01:51:97:f3:c7:5b:73:34:62:
                    27:34:17:4f:1f:37:df:60:0c:dd:02:1f:c3:da:29:
                    b4:eb:bd:b5:12:0e:4b:e4:7f:50:5c:43:ef:79:03:
                    1b:08:89:e0:da:fa:d0:c4:d7:dd:37:ed:b8:95:45:
                    b2:38:f1:4e:82:8f:29:f3:3f:55:1c:36:ef:6e:ce:
                    23:ed:13:28:21:f3:58:d4:ab:17:8c:0d:f1:a6:35:
                    21:c0:3c:3f:77:81:36:d0:73:ae:f9:dc:c5:46:b5:
                    49:45:c5:c1:b9:6d:c1:39:36:22:04:f4:0e:a2:0e:
                    d9:3b:46:e3:6f:a1:e6:ea:68:68:99:60:9b:11:24:
                    ff:11:b3:74:2a:3c:39:2b:a5:ab:48:26:0b:25:fc:
                    41:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:7A:60:99:FF:60:92:9E:98:09:EB:67:4C:D1:AD:C8:25:37:0B:96
            X509v3 Authority Key Identifier:
                keyid:39:50:59:34:1E:D0:26:9C:D3:F8:88:FC:17:59:C5:35:19:AF:7E:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3fCGbqn7pBfFivrRUdzjSRrvi1nJgxraoQZoTwm3tshD/0/395059341ED0269CD3F888FC1759C53519AF7ECD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/395059341ED0269CD3F888FC1759C53519AF7ECD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3fCGbqn7pBfFivrRUdzjSRrvi1nJgxraoQZoTwm3tshD/0/3133312e3139362e3134382e302f32322d3332203d3e20323635393133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:dc:55:49:81:d9:50:11:f8:b3:bb:ce:cf:fa:c1:cc:de:67:
         1d:0b:5d:0a:8e:2a:54:10:c2:2a:75:f8:85:6d:9d:eb:87:83:
         46:ed:5f:d3:66:86:71:15:30:f4:58:84:1c:13:d1:7e:16:cb:
         52:3b:a8:56:ec:8d:73:a7:27:54:85:0a:34:67:a3:3b:70:e1:
         f9:ae:c1:e5:a8:39:14:d4:b3:e8:4d:a9:46:c0:59:8a:29:4a:
         cb:3a:34:6b:6c:8c:fc:ff:f2:08:75:53:4b:f9:78:6b:e5:b7:
         54:92:93:f1:1d:fe:bb:bd:00:38:19:69:72:08:f1:b3:a9:0e:
         89:e8:c5:ff:ab:a9:3a:75:d6:a8:db:50:fd:f5:83:49:0b:83:
         b2:8e:3d:e4:18:57:8d:55:09:74:d9:fe:3c:98:99:94:6d:a1:
         e2:b7:4f:63:e7:92:24:54:d0:46:0a:13:eb:75:1e:9d:bf:81:
         da:b7:08:b5:38:80:ae:b5:d3:5b:ee:8d:3a:c6:c4:d3:b4:11:
         ef:22:d6:2b:38:57:28:4f:61:d0:6e:3a:da:d3:f7:bf:b5:9f:
         fe:14:96:7e:b6:e8:03:63:5b:93:a2:26:a2:a6:c6:a1:13:a7:
         86:82:ff:3d:b1:51:9a:ad:36:fa:29:e5:59:0a:7e:51:4f:0b:
         0c:a4:6d:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----