Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/3139302e3132332e37322e302f32342d3234203d3e20323731333236.roa
File:                     3139302e3132332e37322e302f32342d3234203d3e20323731333236.roa (raw, json)
Hash identifier:          3GD8V4nGxvI9lH3c7tcEbWZH1jE1tundaet7J3W3+cM=
Subject key identifier:   DB:2E:B7:19:1F:E3:2C:72:88:A0:9A:57:0F:E3:08:0D:D5:D2:0B:B0
Certificate issuer:       /CN=E4EF53FA56395EDC1B6BFCE846D97E180E7541BA
Certificate serial:       626F4003E4E0050EB1307C9255DA58CE363BA24D
Authority key identifier: E4:EF:53:FA:56:39:5E:DC:1B:6B:FC:E8:46:D9:7E:18:0E:75:41:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4EF53FA56395EDC1B6BFCE846D97E180E7541BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/3139302e3132332e37322e302f32342d3234203d3e20323731333236.roa
Signing time:             Thu 28 May 2026 04:50:35 +0000
ROA not before:           Thu 28 May 2026 04:45:35 +0000
ROA not after:            Thu 27 May 2027 04:50:35 +0000
asID:                     271326
IP address blocks:        190.123.72.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:6f:40:03:e4:e0:05:0e:b1:30:7c:92:55:da:58:ce:36:3b:a2:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4EF53FA56395EDC1B6BFCE846D97E180E7541BA
        Validity
            Not Before: May 28 04:45:35 2026 GMT
            Not After : May 27 04:50:35 2027 GMT
        Subject: CN=DB2EB7191FE32C7288A09A570FE3080DD5D20BB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:62:7c:91:d4:82:01:58:12:d5:e7:81:7d:b6:
                    ca:8f:00:08:dc:24:1e:b1:0b:08:d0:8c:d6:49:06:
                    1a:8e:cd:29:e4:d8:7f:f3:b2:47:60:e9:3a:40:33:
                    9c:56:3e:00:33:df:f3:ff:fa:2b:78:3d:5b:44:74:
                    c3:08:23:24:a4:92:dc:fc:4c:ec:66:76:ba:88:3f:
                    5d:07:b7:40:55:c7:c6:30:8c:e0:84:85:70:e8:d3:
                    21:f6:8d:96:8c:34:4c:86:bd:15:e5:78:61:f0:29:
                    83:60:9a:db:5b:d4:41:81:50:c3:2a:cf:68:20:e0:
                    d7:c9:1a:76:ba:fd:2d:4d:74:55:f4:62:66:c7:ba:
                    86:b7:3d:fa:a8:91:4f:7f:62:fe:16:47:af:cf:2b:
                    1a:20:e5:b3:50:b7:0a:03:3e:d9:4a:5d:34:f1:ef:
                    d1:10:fe:38:88:bd:80:2c:3d:4e:c0:d6:4e:a4:aa:
                    16:7a:7f:05:36:99:34:78:4a:92:78:5c:97:cc:68:
                    f6:22:24:b6:a7:d8:13:f4:fa:64:7e:41:19:d8:6e:
                    e3:26:6c:24:f9:7b:01:74:40:12:9d:7a:7b:ba:09:
                    69:45:2b:25:95:dc:a7:ae:44:bd:f7:d2:3b:31:ed:
                    86:49:ed:57:87:b1:8d:86:a7:9b:7d:3d:26:0a:b8:
                    19:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:2E:B7:19:1F:E3:2C:72:88:A0:9A:57:0F:E3:08:0D:D5:D2:0B:B0
            X509v3 Authority Key Identifier:
                keyid:E4:EF:53:FA:56:39:5E:DC:1B:6B:FC:E8:46:D9:7E:18:0E:75:41:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/E4EF53FA56395EDC1B6BFCE846D97E180E7541BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4EF53FA56395EDC1B6BFCE846D97E180E7541BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/3139302e3132332e37322e302f32342d3234203d3e20323731333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:98:dc:94:ff:96:52:d5:e1:e4:b2:22:0b:ef:18:ac:a5:3d:
         a0:76:2e:83:65:15:e1:f0:71:c9:50:f7:d4:83:a8:dc:dc:01:
         d1:84:be:b6:ff:87:42:93:90:c4:04:ef:88:f0:df:37:67:ad:
         81:4b:68:ad:9d:b6:b7:d8:9d:96:3e:38:38:9b:42:e5:7f:a2:
         d0:9e:2a:48:5d:49:18:64:01:8c:4d:f2:16:86:73:6b:f0:29:
         f6:43:ba:5c:66:33:ac:d4:e7:8f:0b:38:31:3f:d6:f0:3a:45:
         73:7d:9a:51:6b:be:9d:19:ca:0f:be:00:be:2b:86:84:b8:df:
         71:65:ac:13:08:9b:1f:a8:3e:60:67:a6:f2:f7:01:d3:a8:e4:
         37:35:3c:80:c4:c1:8e:ae:55:3a:22:6a:0f:48:ec:48:03:56:
         8a:33:38:ed:d3:67:9e:c7:f4:0f:bd:72:0a:df:6e:32:80:54:
         e4:c8:37:18:68:7a:4f:2a:68:b8:11:d5:81:21:df:33:0f:8c:
         09:0a:99:a6:af:f7:4d:a6:56:c4:01:d1:ff:9c:73:89:f4:3d:
         b0:38:22:bf:f3:a9:15:f3:59:b5:a5:ba:61:41:08:8a:cc:04:
         e1:5e:99:09:ea:dc:31:f9:26:98:bf:d6:15:47:e7:8e:57:32:
         c6:cd:bc:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----