Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3133382e39342e382e302f32322d3332203d3e203238333630.roa
File:                     3133382e39342e382e302f32322d3332203d3e203238333630.roa (raw, json)
Hash identifier:          ZIeFY3gdc3lepu1FXglvBXzc4i75PxZWdMN6gPlfPbI=
Subject key identifier:   C3:EF:2E:12:F0:45:09:7D:25:E7:79:E0:6F:CD:BA:C6:2A:CB:14:E2
Certificate issuer:       /CN=B6A91AB71E6FCF93A7C63F7857E181C280A08DE6
Certificate serial:       5D60353440DBBD813FBD80623DA1855CB36D9A35
Authority key identifier: B6:A9:1A:B7:1E:6F:CF:93:A7:C6:3F:78:57:E1:81:C2:80:A0:8D:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6A91AB71E6FCF93A7C63F7857E181C280A08DE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3133382e39342e382e302f32322d3332203d3e203238333630.roa
Signing time:             Wed 04 Feb 2026 22:27:28 +0000
ROA not before:           Wed 04 Feb 2026 22:22:28 +0000
ROA not after:            Wed 03 Feb 2027 22:27:28 +0000
asID:                     28360
IP address blocks:        138.94.8.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:60:35:34:40:db:bd:81:3f:bd:80:62:3d:a1:85:5c:b3:6d:9a:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6A91AB71E6FCF93A7C63F7857E181C280A08DE6
        Validity
            Not Before: Feb  4 22:22:28 2026 GMT
            Not After : Feb  3 22:27:28 2027 GMT
        Subject: CN=C3EF2E12F045097D25E779E06FCDBAC62ACB14E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c3:c3:30:86:d9:5b:c6:dc:51:e0:70:b7:7b:
                    b2:3c:cf:86:eb:b2:f0:6b:ae:c3:33:6a:e3:d4:05:
                    c2:1c:19:72:b3:7f:4c:ec:29:65:5f:31:d6:c5:7a:
                    84:e2:45:2c:43:66:e7:cf:21:5d:7c:37:44:67:13:
                    a9:0c:1e:d8:07:d7:ef:c8:0f:5d:c1:d1:51:a1:65:
                    8d:b0:70:98:5d:60:69:d9:be:05:e3:e5:ce:f9:ba:
                    3b:b1:37:99:53:28:31:e2:7f:82:07:f3:08:b5:41:
                    55:83:2b:44:4c:c0:9f:3d:6a:2f:86:1c:c4:38:64:
                    c1:0c:66:da:1d:a9:5e:81:91:3b:1b:39:d7:69:42:
                    1b:5c:b4:cb:81:f4:35:0c:a3:61:ec:f9:75:6d:19:
                    36:03:f6:cc:04:31:29:dc:99:4b:0f:5d:f6:98:17:
                    65:81:7e:c7:4f:5b:23:56:e7:be:c4:8d:d1:8a:12:
                    74:9a:09:1d:12:1f:b9:a1:ca:4f:d9:2f:45:db:a1:
                    6b:19:2c:3e:98:7e:17:b0:2e:1e:f4:39:b9:a2:7c:
                    35:71:56:00:a1:9c:f5:2e:92:20:21:1f:18:71:26:
                    44:e2:89:3b:24:6f:ae:c2:94:89:c6:d5:ba:60:da:
                    92:c7:e8:41:9e:c0:9e:e4:24:e5:51:0b:78:cf:89:
                    33:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:EF:2E:12:F0:45:09:7D:25:E7:79:E0:6F:CD:BA:C6:2A:CB:14:E2
            X509v3 Authority Key Identifier:
                keyid:B6:A9:1A:B7:1E:6F:CF:93:A7:C6:3F:78:57:E1:81:C2:80:A0:8D:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/B6A91AB71E6FCF93A7C63F7857E181C280A08DE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6A91AB71E6FCF93A7C63F7857E181C280A08DE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3133382e39342e382e302f32322d3332203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4e:08:61:6e:4b:8c:db:a2:d2:f2:8f:a6:7a:6a:d9:03:7d:3c:
         61:a0:d4:ee:e8:81:f9:76:28:16:a7:2d:85:be:d0:58:03:55:
         fa:9e:10:cc:52:ce:86:d4:80:8c:9c:0a:7d:b1:a2:79:9b:d8:
         86:8f:3a:cf:e7:01:b5:5a:5a:2a:37:67:e5:82:3c:b0:25:80:
         cb:56:b0:6c:fa:d9:38:a0:d3:c4:a5:e4:42:ef:25:f0:ce:0f:
         ba:e8:d9:ee:05:4c:2e:b2:3f:05:c8:b6:cc:8c:cc:56:e5:49:
         14:ce:6e:d3:9f:e3:ce:41:90:6f:61:47:c7:95:9f:ce:a1:ec:
         fd:c7:bb:a1:f5:f3:29:03:2e:11:ef:75:c3:38:3f:2a:05:13:
         6c:87:9b:aa:22:e3:60:cd:96:fe:81:bb:1d:dd:1a:8f:78:40:
         a0:8b:48:61:98:a2:de:8e:d8:a2:a4:15:e2:2a:36:2f:c1:d9:
         d6:3e:05:3d:7f:ba:59:5c:42:c0:ec:1d:17:ba:00:7c:fa:53:
         fb:0f:1f:8a:34:90:8b:0f:63:3f:5a:1e:05:73:e3:3d:50:8a:
         e0:dd:77:b1:5c:12:ef:01:1b:d7:1b:5a:c6:0c:20:e4:bb:75:
         fb:64:e1:5c:ce:4c:5a:8d:ee:29:b2:7e:d8:0c:d7:43:60:b1:
         3a:df:7a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:06:13 2026 by rpki-client