Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/3137392e3132372e3131322e302f32322d3234203d3e203238363035.roa
File:                     3137392e3132372e3131322e302f32322d3234203d3e203238363035.roa (raw, json)
Hash identifier:          aLeIdHLtrfQEOmmi+WUZPKDgrGyL/smNbjF3p8FOgUc=
Subject key identifier:   AD:9E:0D:D3:C2:B6:82:15:43:AF:D7:79:78:4E:8D:44:51:B6:B0:B2
Certificate issuer:       /CN=0A2B6CA6C9AA751D566934EB1DD9986288ECBC17
Certificate serial:       035E3D3575CB39DDFDF52E854775915BEA5BEA43
Authority key identifier: 0A:2B:6C:A6:C9:AA:75:1D:56:69:34:EB:1D:D9:98:62:88:EC:BC:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2B6CA6C9AA751D566934EB1DD9986288ECBC17.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/3137392e3132372e3131322e302f32322d3234203d3e203238363035.roa
Signing time:             Sat 04 Apr 2026 17:25:48 +0000
ROA not before:           Sat 04 Apr 2026 17:20:48 +0000
ROA not after:            Sat 03 Apr 2027 17:25:48 +0000
asID:                     28605
IP address blocks:        179.127.112.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:5e:3d:35:75:cb:39:dd:fd:f5:2e:85:47:75:91:5b:ea:5b:ea:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A2B6CA6C9AA751D566934EB1DD9986288ECBC17
        Validity
            Not Before: Apr  4 17:20:48 2026 GMT
            Not After : Apr  3 17:25:48 2027 GMT
        Subject: CN=AD9E0DD3C2B6821543AFD779784E8D4451B6B0B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:12:09:e4:09:ef:6e:c5:04:1f:9e:9c:e3:a9:
                    bd:ac:73:fa:c6:d6:57:b4:6c:21:5a:11:55:8c:e4:
                    2b:81:82:fa:e9:5c:47:23:70:df:93:e6:a1:fa:6c:
                    1e:d4:28:64:a9:2c:21:6d:10:e7:61:5e:ba:59:fb:
                    9c:8a:87:f3:a0:ac:3b:04:72:d8:cf:a5:85:d4:c5:
                    eb:e1:23:dc:15:2c:9f:26:d2:c6:d8:6c:86:2f:88:
                    fd:86:1c:83:de:14:81:1c:01:a7:d2:66:da:21:94:
                    3b:c5:96:ca:5d:35:3d:7e:b6:60:40:b5:d9:3d:f7:
                    59:c9:69:bf:1e:6b:dd:ae:8a:3d:f6:53:76:13:c2:
                    73:b2:1b:87:3d:25:31:a3:ab:da:6b:9b:13:7a:ed:
                    d0:90:47:e2:ca:ac:fa:97:d0:49:bc:e6:86:ee:87:
                    65:6d:48:0d:a2:76:54:e4:68:04:b3:46:51:0a:b3:
                    a3:70:08:ab:1e:55:c0:de:7d:5b:7b:a7:ed:05:be:
                    ea:19:d9:f7:6d:ca:65:e2:a2:1b:da:d8:2a:d5:bf:
                    7a:65:ad:bb:f7:5f:e4:e0:e6:cc:83:a8:d0:98:a7:
                    f9:90:64:e1:cb:9f:4d:ba:3c:e7:0e:b6:28:ca:20:
                    a6:25:5c:07:d0:e3:07:64:5f:cd:6c:de:fb:d6:8f:
                    91:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:9E:0D:D3:C2:B6:82:15:43:AF:D7:79:78:4E:8D:44:51:B6:B0:B2
            X509v3 Authority Key Identifier:
                keyid:0A:2B:6C:A6:C9:AA:75:1D:56:69:34:EB:1D:D9:98:62:88:EC:BC:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/0A2B6CA6C9AA751D566934EB1DD9986288ECBC17.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0A2B6CA6C9AA751D566934EB1DD9986288ECBC17.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4Z98wU5i5cM97Hhi6UobPmcbdMHeXe3EWyAv4P1mZHyS/0/3137392e3132372e3131322e302f32322d3234203d3e203238363035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.127.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a4:d8:f3:a4:2a:b6:1d:b5:cd:ff:08:de:ce:fc:11:8a:e4:1a:
         ef:b1:83:74:bd:ef:f2:95:09:e8:49:0c:50:5b:05:75:a1:e0:
         d2:ed:e3:62:74:0e:93:d7:8a:80:9d:64:62:31:7b:1c:58:0c:
         e3:81:7a:1a:4e:78:a7:32:14:30:c1:6a:8b:4f:12:1b:86:13:
         fb:33:9b:c1:08:e2:91:e8:8c:18:5f:ea:fa:44:61:89:5d:36:
         44:be:8b:58:27:c5:96:4b:52:d6:1f:f1:1a:9e:8f:92:5a:99:
         12:ef:65:7e:ef:70:a7:76:5e:9f:9c:77:1e:d5:1f:35:4c:d1:
         ad:d3:ad:00:df:0c:b0:ef:0d:4e:b4:4f:b4:03:17:3f:a6:6d:
         45:21:a6:12:03:f8:47:7e:81:eb:81:35:60:e9:69:23:d2:4b:
         64:de:8c:35:b6:e0:e9:ba:38:ba:89:2c:b6:4a:6b:46:4f:f3:
         8d:ef:60:81:19:62:d4:e3:f0:af:6a:e2:d1:e2:5d:6a:08:e4:
         b3:6e:99:75:c6:6c:2b:61:87:75:e9:48:bc:4c:04:e6:cf:f5:
         f9:70:7a:25:3f:cd:da:97:d6:d0:33:e5:0b:45:e8:63:1f:c5:
         be:65:41:47:81:37:0b:57:54:ff:24:d0:02:57:51:84:8c:7c:
         be:73:00:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 06:23:36 2026 by rpki-client