Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/3139302e3132332e37352e302f32342d3234203d3e20323731333236.roa
File:                     3139302e3132332e37352e302f32342d3234203d3e20323731333236.roa (raw, json)
Hash identifier:          L0V7WHINayAO1q3KqC08EkkV5A175nujDAi9cp0ViIo=
Subject key identifier:   21:6D:6A:C6:4A:BE:38:05:2F:B3:1B:ED:3C:0D:81:31:36:58:F8:75
Certificate issuer:       /CN=E4EF53FA56395EDC1B6BFCE846D97E180E7541BA
Certificate serial:       286B800FC7E67F7D3CF6EEC708BC10B0D105A360
Authority key identifier: E4:EF:53:FA:56:39:5E:DC:1B:6B:FC:E8:46:D9:7E:18:0E:75:41:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4EF53FA56395EDC1B6BFCE846D97E180E7541BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/3139302e3132332e37352e302f32342d3234203d3e20323731333236.roa
Signing time:             Thu 28 May 2026 04:51:12 +0000
ROA not before:           Thu 28 May 2026 04:46:12 +0000
ROA not after:            Thu 27 May 2027 04:51:12 +0000
asID:                     271326
IP address blocks:        190.123.75.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:6b:80:0f:c7:e6:7f:7d:3c:f6:ee:c7:08:bc:10:b0:d1:05:a3:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4EF53FA56395EDC1B6BFCE846D97E180E7541BA
        Validity
            Not Before: May 28 04:46:12 2026 GMT
            Not After : May 27 04:51:12 2027 GMT
        Subject: CN=216D6AC64ABE38052FB31BED3C0D81313658F875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:fe:5e:28:55:24:9b:d3:11:45:90:b8:8a:fd:
                    22:c8:18:ae:36:fe:4e:03:3b:72:b1:e4:b9:41:0b:
                    54:64:43:f5:50:b4:c2:57:ea:20:07:a4:15:f6:9a:
                    87:83:80:da:0d:35:ca:15:9f:08:36:16:be:b0:89:
                    9d:bf:1b:af:26:12:cb:20:18:ba:07:be:f4:20:46:
                    a7:df:be:89:d4:5f:76:fb:73:84:d6:5b:ca:0a:46:
                    0b:6f:54:08:7e:ee:73:40:7e:68:81:fb:2e:1e:3e:
                    87:09:00:78:0b:85:e9:8e:4d:56:53:67:9b:4d:4b:
                    ea:5b:ef:87:47:ff:d1:4c:f1:e0:c5:a5:cf:35:e0:
                    6b:4e:2f:f3:57:20:e7:ae:7c:6a:a7:ae:e1:56:2c:
                    91:e2:14:e0:df:9a:a9:dd:13:6a:a4:54:3e:a4:70:
                    5d:69:c4:f3:7f:93:2b:0d:e3:29:34:76:22:69:15:
                    28:ab:1a:8d:99:50:0a:0d:c2:a9:aa:b4:61:00:79:
                    96:43:1a:16:e5:92:99:24:ec:d8:63:fe:c0:e7:61:
                    e0:43:c7:06:54:04:3b:c4:bf:28:96:94:01:bc:dc:
                    36:8f:f0:da:4c:21:8f:46:ed:e9:8b:4f:09:2c:81:
                    db:be:a2:c6:6d:46:e2:7c:5b:14:8b:f5:71:ef:a5:
                    43:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:6D:6A:C6:4A:BE:38:05:2F:B3:1B:ED:3C:0D:81:31:36:58:F8:75
            X509v3 Authority Key Identifier:
                keyid:E4:EF:53:FA:56:39:5E:DC:1B:6B:FC:E8:46:D9:7E:18:0E:75:41:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/E4EF53FA56395EDC1B6BFCE846D97E180E7541BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E4EF53FA56395EDC1B6BFCE846D97E180E7541BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/3139302e3132332e37352e302f32342d3234203d3e20323731333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.123.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d0:ef:13:4f:df:3c:31:1e:01:ba:99:1e:13:ee:69:2c:dc:1e:
         7c:0a:8b:03:1e:4a:69:f0:40:66:f8:04:66:a5:31:b6:9d:34:
         3f:4a:fb:a4:1b:4d:45:7c:04:a1:3e:66:50:f6:8b:73:fd:b9:
         23:16:9b:12:87:29:86:75:66:e0:eb:68:9d:65:7b:7d:f1:f0:
         4e:8a:1e:06:88:d7:db:0f:e5:c1:42:42:57:81:a8:61:2f:f9:
         b4:34:91:3f:da:b5:f6:bd:4e:6a:ca:7a:ac:b2:75:19:6b:92:
         1a:ab:bb:12:b9:3f:60:14:e3:8e:00:3e:1d:2a:a1:05:03:5a:
         bf:c3:24:75:44:01:a7:b7:27:1a:44:c8:a6:50:60:52:bf:d0:
         5e:78:34:de:19:0e:75:92:44:05:28:6c:07:f4:3c:44:bc:fa:
         75:71:6a:6c:65:58:46:af:64:9b:c1:f3:1a:8e:dd:97:14:ba:
         96:8d:d7:83:3f:35:c1:bf:62:5b:d8:97:17:92:3c:c9:ac:9c:
         cf:06:04:01:c7:53:62:7e:58:b1:27:cd:a3:a0:b2:6e:50:52:
         d9:e3:c2:92:5b:29:ec:bf:7c:bb:73:94:b7:29:37:3e:28:7e:
         62:5f:4e:0d:91:21:a4:bf:d6:39:e7:bb:78:f9:1b:34:1e:5d:
         ca:fa:5d:b1
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUKGuAD8fmf3089u7HCLwQsNEFo2AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTRFRjUzRkE1NjM5NUVEQzFCNkJGQ0U4NDZEOTdFMTgw
RTc1NDFCQTAeFw0yNjA1MjgwNDQ2MTJaFw0yNzA1MjcwNDUxMTJaMDMxMTAvBgNV
BAMTKDIxNkQ2QUM2NEFCRTM4MDUyRkIzMUJFRDNDMEQ4MTMxMzY1OEY4NzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6/l4oVSSb0xFFkLiK/SLIGK42
/k4DO3Kx5LlBC1RkQ/VQtMJX6iAHpBX2moeDgNoNNcoVnwg2Fr6wiZ2/G68mEssg
GLoHvvQgRqffvonUX3b7c4TWW8oKRgtvVAh+7nNAfmiB+y4ePocJAHgLhemOTVZT
Z5tNS+pb74dH/9FM8eDFpc814GtOL/NXIOeufGqnruFWLJHiFODfmqndE2qkVD6k
cF1pxPN/kysN4yk0diJpFSirGo2ZUAoNwqmqtGEAeZZDGhblkpkk7Nhj/sDnYeBD
xwZUBDvEvyiWlAG83DaP8NpMIY9G7emLTwksgdu+osZtRuJ8WxSL9XHvpUP1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUIW1qxkq+OAUvsxvtPA2BMTZY+HUwHwYDVR0j
BBgwFoAU5O9T+lY5Xtwba/zoRtl+GA51QbowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEhFZnA4R1pXUXFoVHh5Z3JSb3RXQVl6MXhDR2p5MnNmUmV2cTFiOTV4
dm8vMC9FNEVGNTNGQTU2Mzk1RURDMUI2QkZDRTg0NkQ5N0UxODBFNzU0MUJBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0U0RUY1M0ZBNTYzOTVFREMx
QjZCRkNFODQ2RDk3RTE4MEU3NTQxQkEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRIRWZwOEdaV1FxaFR4eWdyUm90V0FZejF4Q0dqeTJzZlJldnExYjk1eHZvLzAv
MzEzOTMwMmUzMTMyMzMyZTM3MzUyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM3
MzEzMzMyMzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC+e0swDQYJKoZIhvcNAQELBQADggEBANDvE0/f
PDEeAbqZHhPuaSzcHnwKiwMeSmnwQGb4BGalMbadND9K+6QbTUV8BKE+ZlD2i3P9
uSMWmxKHKYZ1ZuDraJ1le33x8E6KHgaI19sP5cFCQleBqGEv+bQ0kT/atfa9TmrK
eqyydRlrkhqruxK5P2AU444APh0qoQUDWr/DJHVEAae3JxpEyKZQYFK/0F54NN4Z
DnWSRAUobAf0PES8+nVxamxlWEavZJvB8xqO3ZcUupaN14M/NcG/YlvYlxeSPMms
nM8GBAHHU2J+WLEnzaOgsm5QUtnjwpJbKey/fLtzlLcpNz4ofmJfTg2RIaS/1jnn
u3j5GzQeXcr6XbE=
-----END CERTIFICATE-----