Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/91qjiaF3VH7p6Psrx86zvFcr2RLjoRZxevnAz851GpqF/0/34352e3233352e3139362e302f32322d3234203d3e20323638313939.roa
File:                     34352e3233352e3139362e302f32322d3234203d3e20323638313939.roa (raw, json)
Hash identifier:          X2z+YzvcbmCG5HGgb3Tka8e/IXsH7tvUVRPEqH4OM1o=
Subject key identifier:   F9:C9:5D:1B:21:D0:2F:5D:49:4A:7B:7B:27:3C:33:A9:8F:FF:BD:92
Certificate issuer:       /CN=181ECDE4C70AFD827E75184D7AA9A4D1359BFE59
Certificate serial:       1E3573638FC8ABD3C8637C4593F192882C58F326
Authority key identifier: 18:1E:CD:E4:C7:0A:FD:82:7E:75:18:4D:7A:A9:A4:D1:35:9B:FE:59
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/181ECDE4C70AFD827E75184D7AA9A4D1359BFE59.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/91qjiaF3VH7p6Psrx86zvFcr2RLjoRZxevnAz851GpqF/0/34352e3233352e3139362e302f32322d3234203d3e20323638313939.roa
Signing time:             Mon 02 Mar 2026 20:37:41 +0000
ROA not before:           Mon 02 Mar 2026 20:32:41 +0000
ROA not after:            Mon 01 Mar 2027 20:37:41 +0000
asID:                     268199
IP address blocks:        45.235.196.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:35:73:63:8f:c8:ab:d3:c8:63:7c:45:93:f1:92:88:2c:58:f3:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=181ECDE4C70AFD827E75184D7AA9A4D1359BFE59
        Validity
            Not Before: Mar  2 20:32:41 2026 GMT
            Not After : Mar  1 20:37:41 2027 GMT
        Subject: CN=F9C95D1B21D02F5D494A7B7B273C33A98FFFBD92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d0:9d:40:03:90:b3:93:41:6a:b2:11:b7:50:
                    32:c5:26:e5:b1:5c:32:1d:e7:2f:0d:36:11:50:a2:
                    5a:45:26:3f:a0:7b:66:0d:10:d9:a2:6a:4a:08:08:
                    f2:7e:60:45:25:61:77:bb:5f:95:75:27:2e:45:54:
                    09:a3:38:cd:b0:79:55:73:f3:24:cd:7e:f8:4e:4d:
                    ce:dd:d2:c0:a8:c0:f8:ef:c6:db:f6:2f:df:2a:2c:
                    9c:20:3e:9f:aa:85:cf:e5:3c:32:78:5e:c9:37:b7:
                    90:5b:0f:39:1c:88:76:05:cb:3b:6b:49:14:2c:b9:
                    b4:1b:2d:58:c1:32:45:b7:e5:f6:6b:56:10:63:e4:
                    bc:79:f2:53:5d:21:dd:80:b8:c4:6e:a8:65:33:aa:
                    97:41:75:fe:08:7c:2b:4c:1c:b9:08:8d:c0:07:7a:
                    f5:02:9c:82:01:66:83:ec:c3:91:1d:13:10:40:07:
                    9b:14:cd:a4:90:4a:61:79:e4:cf:c4:a2:5d:00:3b:
                    46:44:04:07:4c:f4:76:ef:1e:a5:c3:19:88:ea:7e:
                    0c:0f:79:8b:bf:b5:1a:ea:97:a8:9d:56:8b:3f:0a:
                    0e:1e:8b:6d:48:af:ae:b4:d7:e8:48:4f:22:e5:2f:
                    8f:8e:57:30:cd:22:36:c6:71:bd:99:d2:98:f5:7b:
                    5a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:C9:5D:1B:21:D0:2F:5D:49:4A:7B:7B:27:3C:33:A9:8F:FF:BD:92
            X509v3 Authority Key Identifier:
                keyid:18:1E:CD:E4:C7:0A:FD:82:7E:75:18:4D:7A:A9:A4:D1:35:9B:FE:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/91qjiaF3VH7p6Psrx86zvFcr2RLjoRZxevnAz851GpqF/0/181ECDE4C70AFD827E75184D7AA9A4D1359BFE59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/181ECDE4C70AFD827E75184D7AA9A4D1359BFE59.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/91qjiaF3VH7p6Psrx86zvFcr2RLjoRZxevnAz851GpqF/0/34352e3233352e3139362e302f32322d3234203d3e20323638313939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c9:c3:ea:29:65:e9:7c:67:6f:f5:77:da:bd:6d:d8:11:15:bc:
         67:fa:7e:66:29:d9:46:14:aa:9f:81:31:c4:f0:d9:8a:06:31:
         b3:65:c2:22:b4:42:39:c3:e5:4c:f9:8b:2e:e9:62:b2:71:7e:
         0c:1e:73:ee:bd:0b:b3:15:e3:dd:42:e3:c9:9e:4f:24:e2:2c:
         87:70:9d:5c:09:ca:fd:ba:47:ba:5c:b3:c0:db:35:2a:28:45:
         70:a8:24:11:6c:0b:5e:60:14:dc:5b:6e:6f:83:95:71:f1:a9:
         f0:c8:36:be:f8:d8:4d:b7:a5:29:56:b8:3c:b6:c9:81:48:64:
         7e:0a:5f:b8:56:c9:1d:eb:11:89:57:d5:26:9b:bc:c3:c6:b8:
         07:43:61:9e:16:98:4e:8c:03:95:26:95:72:bf:6f:46:4d:67:
         59:fb:41:82:ac:ba:fd:ab:e6:35:a5:5f:62:61:b7:de:3e:91:
         78:9f:29:42:91:aa:c1:7e:c7:10:19:08:db:2a:d0:1c:81:15:
         cc:7c:5c:18:01:b2:00:eb:c4:d0:2a:dc:b4:3e:78:36:37:38:
         df:28:93:97:71:df:bd:71:d8:d2:7c:9e:92:23:59:12:9f:7d:
         7e:f6:a5:2d:a0:89:e0:8e:2c:e4:e8:13:d6:19:35:72:0a:8f:
         fb:a5:4f:be
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUHjVzY4/Iq9PIY3xFk/GSiCxY8yYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTgxRUNERTRDNzBBRkQ4MjdFNzUxODREN0FBOUE0RDEz
NTlCRkU1OTAeFw0yNjAzMDIyMDMyNDFaFw0yNzAzMDEyMDM3NDFaMDMxMTAvBgNV
BAMTKEY5Qzk1RDFCMjFEMDJGNUQ0OTRBN0I3QjI3M0MzM0E5OEZGRkJEOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC90J1AA5Czk0FqshG3UDLFJuWx
XDId5y8NNhFQolpFJj+ge2YNENmiakoICPJ+YEUlYXe7X5V1Jy5FVAmjOM2weVVz
8yTNfvhOTc7d0sCowPjvxtv2L98qLJwgPp+qhc/lPDJ4Xsk3t5BbDzkciHYFyztr
SRQsubQbLVjBMkW35fZrVhBj5Lx58lNdId2AuMRuqGUzqpdBdf4IfCtMHLkIjcAH
evUCnIIBZoPsw5EdExBAB5sUzaSQSmF55M/Eol0AO0ZEBAdM9HbvHqXDGYjqfgwP
eYu/tRrql6idVos/Cg4ei21Ir6601+hITyLlL4+OVzDNIjbGcb2Z0pj1e1q7AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU+cldGyHQL11JSnt7JzwzqY//vZIwHwYDVR0j
BBgwFoAUGB7N5McK/YJ+dRhNeqmk0TWb/lkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOTFxamlhRjNWSDdwNlBzcng4Nnp2RmNyMlJMam9SWnhldm5Bejg1MUdw
cUYvMC8xODFFQ0RFNEM3MEFGRDgyN0U3NTE4NEQ3QUE5QTREMTM1OUJGRTU5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE4MUVDREU0QzcwQUZEODI3
RTc1MTg0RDdBQTlBNEQxMzU5QkZFNTkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzkxcWppYUYzVkg3cDZQc3J4ODZ6dkZjcjJSTGpvUlp4ZXZuQXo4NTFHcHFGLzAv
MzQzNTJlMzIzMzM1MmUzMTM5MzYyZTMwMmYzMjMyMmQzMjM0MjAzZDNlMjAzMjM2
MzgzMTM5Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAIt68QwDQYJKoZIhvcNAQELBQADggEBAMnD6ill
6Xxnb/V32r1t2BEVvGf6fmYp2UYUqp+BMcTw2YoGMbNlwiK0QjnD5Uz5iy7pYrJx
fgwec+69C7MV491C48meTyTiLIdwnVwJyv26R7pcs8DbNSooRXCoJBFsC15gFNxb
bm+DlXHxqfDINr742E23pSlWuDy2yYFIZH4KX7hWyR3rEYlX1SabvMPGuAdDYZ4W
mE6MA5UmlXK/b0ZNZ1n7QYKsuv2r5jWlX2Jht94+kXifKUKRqsF+xxAZCNsq0ByB
Fcx8XBgBsgDrxNAq3LQ+eDY3ON8ok5dx371x2NJ8npIjWRKffX72pS2gieCOLOTo
E9YZNXIKj/ulT74=
-----END CERTIFICATE-----
Generated at Wed Apr 8 06:00:04 2026 by rpki-client