Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/3139302e3132332e37332e302f32342d3234203d3e20323731333236.roa
File:                     3139302e3132332e37332e302f32342d3234203d3e20323731333236.roa (raw, json)
Hash identifier:          66hkkQwPOK0dZ7zYrttZFob0U4SXv8j4ypFZ+bi95R4=
Subject key identifier:   7C:35:48:70:64:ED:C5:C6:74:DE:6E:4A:3A:6E:C0:E8:B4:C1:24:07
Certificate issuer:       /CN=E4EF53FA56395EDC1B6BFCE846D97E180E7541BA
Certificate serial:       2B524E55B727069BB8BE72E57EE6599424106E24
Authority key identifier: E4:EF:53:FA:56:39:5E:DC:1B:6B:FC:E8:46:D9:7E:18:0E:75:41:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4EF53FA56395EDC1B6BFCE846D97E180E7541BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/3139302e3132332e37332e302f32342d3234203d3e20323731333236.roa
Signing time:             Thu 28 May 2026 04:50:50 +0000
ROA not before:           Thu 28 May 2026 04:45:50 +0000
ROA not after:            Thu 27 May 2027 04:50:50 +0000
asID:                     271326
IP address blocks:        190.123.73.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:52:4e:55:b7:27:06:9b:b8:be:72:e5:7e:e6:59:94:24:10:6e:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4EF53FA56395EDC1B6BFCE846D97E180E7541BA
        Validity
            Not Before: May 28 04:45:50 2026 GMT
            Not After : May 27 04:50:50 2027 GMT
        Subject: CN=7C35487064EDC5C674DE6E4A3A6EC0E8B4C12407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:46:a6:c2:08:1e:a5:3e:6a:a0:f8:d3:50:59:
                    67:d8:48:9a:ea:e9:2d:ba:ea:55:6b:d4:03:7b:cb:
                    0d:f8:c6:24:c3:6d:8b:a6:7d:9a:4c:bb:53:56:97:
                    8c:5d:57:13:87:2f:af:01:b0:09:5f:63:10:2c:53:
                    ce:dd:f6:11:65:46:74:30:c9:54:ea:c3:8b:6e:b4:
                    50:5a:99:2b:46:6d:20:62:9b:e2:d3:76:b9:e4:2b:
                    e7:e7:d7:60:44:97:22:fd:be:bd:5a:36:7e:d0:ce:
                    95:86:55:29:a6:5b:e8:98:db:e6:3c:7b:9a:7c:ec:
                    4a:dc:20:7b:ed:46:48:92:81:cd:bb:67:47:5a:e2:
                    29:00:59:ec:a7:20:cb:52:c0:eb:71:dd:a7:bc:ff:
                    13:97:cc:2b:24:ee:b9:bd:26:02:7a:af:58:ba:f4:
                    51:da:d6:2b:f1:54:7e:8a:38:46:00:6f:ba:2b:9b:
                    f6:76:d7:fe:58:c9:4a:f9:c3:dc:d4:26:ac:e0:77:
                    46:e3:1d:20:65:24:fd:d9:5b:5d:e1:fe:7f:33:6c:
                    b4:b9:cc:96:10:15:11:c1:e7:c8:8e:53:23:e5:84:
                    25:52:4e:08:54:e9:6d:6e:c7:07:be:65:66:ba:86:
                    1a:4e:cf:81:bb:46:e0:9f:2d:be:7c:7c:b1:34:26:
                    8f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:35:48:70:64:ED:C5:C6:74:DE:6E:4A:3A:6E:C0:E8:B4:C1:24:07
            X509v3 Authority Key Identifier:
                keyid:E4:EF:53:FA:56:39:5E:DC:1B:6B:FC:E8:46:D9:7E:18:0E:75:41:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/E4EF53FA56395EDC1B6BFCE846D97E180E7541BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4EF53FA56395EDC1B6BFCE846D97E180E7541BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/3139302e3132332e37332e302f32342d3234203d3e20323731333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:ad:eb:d5:3f:71:e0:d2:9f:3b:71:5a:0c:9d:69:bd:d8:0a:
         3c:5c:83:57:0a:d8:b4:74:4e:f8:ef:ea:f8:b3:76:8d:d2:b6:
         c9:c2:55:db:b3:61:11:74:42:90:ae:9f:2c:df:08:70:b1:47:
         d7:81:ec:90:4f:7e:92:ff:68:ff:d8:1b:8c:0a:63:90:15:5e:
         aa:a9:d6:95:ab:d0:e7:13:13:5e:a9:8a:a5:bb:5d:07:2f:92:
         d3:64:b6:c3:18:f2:a3:a5:bb:e1:53:31:89:cc:86:39:94:2b:
         fe:82:19:7f:fc:41:1f:eb:ac:56:6d:fc:ee:27:14:df:cc:f0:
         c0:1d:a3:05:77:dd:61:45:fb:f5:cc:9d:dd:54:b9:01:f8:b6:
         ad:e5:8d:b7:b3:ee:ca:ec:80:28:fd:98:37:75:c7:14:d6:d8:
         dd:f4:90:3f:d5:b3:cb:5a:b4:21:84:f1:ea:9a:6d:d2:c9:85:
         d8:43:a5:89:d0:7a:0c:84:c2:97:84:3a:0a:9f:fc:e4:2a:c8:
         f5:87:93:f2:2e:14:94:06:08:57:68:8a:a4:08:6e:a7:00:0b:
         a1:ee:38:06:82:ad:75:30:86:b2:21:63:bb:3c:1e:21:78:45:
         93:2b:98:1b:e6:44:e4:1c:49:6f:fc:b4:a9:b2:3b:3c:e5:5d:
         ae:85:7b:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----