Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3232342e302f32302d3332203d3e203238333630.roa
File:                     3138392e37362e3232342e302f32302d3332203d3e203238333630.roa (raw, json)
Hash identifier:          p39BVHeOdAo0PH64yNn13jAEOHN1kSRUXHdymcMd83w=
Subject key identifier:   F3:E5:CD:7E:C9:07:12:95:C4:42:D6:A2:67:BA:F9:C5:D9:42:86:9F
Certificate issuer:       /CN=B6A91AB71E6FCF93A7C63F7857E181C280A08DE6
Certificate serial:       6FD53A08194C87F90C984CBD5F86D4BB5F7B3DD4
Authority key identifier: B6:A9:1A:B7:1E:6F:CF:93:A7:C6:3F:78:57:E1:81:C2:80:A0:8D:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6A91AB71E6FCF93A7C63F7857E181C280A08DE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3232342e302f32302d3332203d3e203238333630.roa
Signing time:             Wed 04 Feb 2026 22:30:08 +0000
ROA not before:           Wed 04 Feb 2026 22:25:08 +0000
ROA not after:            Wed 03 Feb 2027 22:30:08 +0000
asID:                     28360
IP address blocks:        189.76.224.0/20 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:d5:3a:08:19:4c:87:f9:0c:98:4c:bd:5f:86:d4:bb:5f:7b:3d:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6A91AB71E6FCF93A7C63F7857E181C280A08DE6
        Validity
            Not Before: Feb  4 22:25:08 2026 GMT
            Not After : Feb  3 22:30:08 2027 GMT
        Subject: CN=F3E5CD7EC9071295C442D6A267BAF9C5D942869F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:af:27:0d:91:f3:04:89:37:ab:3d:00:de:d6:
                    28:47:2c:7c:bd:ae:c9:70:6f:a7:14:1a:dc:24:00:
                    1b:68:ff:cf:09:be:0b:ff:90:74:29:24:46:d3:f7:
                    20:15:4d:38:71:74:32:4d:92:46:91:fe:72:70:aa:
                    25:7b:a8:43:a7:1f:26:6a:4d:7f:44:cd:fc:c0:e4:
                    2a:b0:ef:11:52:8e:fb:26:b7:d2:fe:8c:85:d4:4c:
                    a0:bd:5a:59:28:ca:06:b5:a3:26:49:d4:05:e5:17:
                    df:7a:38:4c:8c:20:12:2a:c2:5b:d1:1a:cf:91:65:
                    44:c2:b3:9c:9d:47:9b:9d:ce:15:6c:83:52:99:8b:
                    ad:7d:16:78:fc:de:76:8f:42:2d:8e:82:00:eb:f5:
                    18:55:61:9b:0d:da:46:e5:8e:20:2a:9c:6e:5e:46:
                    49:2d:db:72:82:70:d8:34:7c:54:1c:92:8a:df:43:
                    a3:ed:ee:8f:65:34:95:5f:66:dc:5a:14:1e:85:96:
                    66:09:47:f0:2c:31:8b:eb:66:06:f5:a2:6f:ee:93:
                    6c:48:5c:50:00:a1:f4:e3:11:8f:c9:96:7d:06:5b:
                    d5:be:8f:f3:e6:df:7c:27:dc:f3:e7:df:57:ab:af:
                    48:05:9c:12:e6:16:dd:8a:83:0b:56:2c:bd:d5:fc:
                    bf:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:E5:CD:7E:C9:07:12:95:C4:42:D6:A2:67:BA:F9:C5:D9:42:86:9F
            X509v3 Authority Key Identifier:
                keyid:B6:A9:1A:B7:1E:6F:CF:93:A7:C6:3F:78:57:E1:81:C2:80:A0:8D:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/B6A91AB71E6FCF93A7C63F7857E181C280A08DE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B6A91AB71E6FCF93A7C63F7857E181C280A08DE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Bhazj8bFxvp7P6PcZgYFqm3bPxEryax3Q9RaDQNJ3P2/0/3138392e37362e3232342e302f32302d3332203d3e203238333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.76.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3e:22:a2:26:46:96:80:74:6b:b2:48:63:ea:18:bf:36:79:bd:
         9d:a3:f8:38:85:2b:f2:97:bc:39:73:ca:9a:ee:ef:4f:8e:a2:
         f6:c6:12:1d:6b:20:e0:45:61:8a:3a:49:00:c1:28:e2:88:1d:
         81:b1:9d:77:4c:06:e5:f5:55:8e:09:23:77:a4:cd:60:30:b7:
         ce:b8:bc:97:3f:d3:ea:31:07:92:c4:44:c5:b0:cc:5a:3f:13:
         14:23:94:06:39:ea:4a:34:bd:90:db:19:11:eb:ee:d6:aa:6a:
         37:26:db:2b:33:99:59:4c:e6:69:2d:8a:cc:70:4d:82:f8:e9:
         5a:9c:03:fd:bd:ac:de:e7:5a:a8:15:ab:08:0f:4b:b0:d9:aa:
         e8:3e:0f:7b:31:4e:26:b1:a6:9e:66:ac:79:66:79:42:ee:1e:
         6a:9e:a0:92:db:fc:d0:d6:95:99:70:b6:59:a9:53:de:34:92:
         c0:20:be:b3:52:fe:6d:5a:bf:05:83:24:26:1e:08:64:1f:9c:
         dc:79:9f:ef:c9:5d:85:c1:04:fb:8d:96:75:e2:5c:ba:0e:00:
         5d:ef:87:8e:b6:06:6e:4d:1a:3c:7f:ca:92:06:a4:40:8f:0a:
         42:ba:09:c7:1e:d4:5b:c7:81:1b:c7:71:ab:f2:31:fb:cf:b5:
         a0:91:eb:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 23:05:41 2026 by rpki-client