Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3133382e3138362e3138342e302f32322d3332203d3e203631373834.roa
File:                     3133382e3138362e3138342e302f32322d3332203d3e203631373834.roa (raw, json)
Hash identifier:          X7nolMx37Y0P5MTO8ImM9lwpJ5To85NV2yN3CwqdtvI=
Subject key identifier:   94:F3:FD:7F:E6:38:BD:08:85:71:2E:D2:B6:02:15:EA:CF:08:11:5C
Certificate issuer:       /CN=4A7A3E192DCCA87A3610881CB6D60D7DDF6044EC
Certificate serial:       0801C2302E1157988DF4747528020B67757561AD
Authority key identifier: 4A:7A:3E:19:2D:CC:A8:7A:36:10:88:1C:B6:D6:0D:7D:DF:60:44:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A7A3E192DCCA87A3610881CB6D60D7DDF6044EC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3133382e3138362e3138342e302f32322d3332203d3e203631373834.roa
Signing time:             Tue 25 Aug 2026 17:14:34 +0000
ROA not before:           Tue 25 Aug 2026 17:09:34 +0000
ROA not after:            Tue 24 Aug 2027 17:14:34 +0000
asID:                     61784
IP address blocks:        138.186.184.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:01:c2:30:2e:11:57:98:8d:f4:74:75:28:02:0b:67:75:75:61:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A7A3E192DCCA87A3610881CB6D60D7DDF6044EC
        Validity
            Not Before: Aug 25 17:09:34 2026 GMT
            Not After : Aug 24 17:14:34 2027 GMT
        Subject: CN=94F3FD7FE638BD0885712ED2B60215EACF08115C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:0d:71:cb:38:eb:4f:b8:75:3e:26:cb:13:53:
                    77:7a:58:70:1d:3f:34:80:3f:6b:cc:e2:03:67:26:
                    1b:01:65:cc:c3:b5:31:ea:47:95:25:a3:5b:43:45:
                    36:af:20:0f:d7:59:96:08:f1:63:4c:9f:13:64:45:
                    d8:99:4c:1a:cf:b3:39:13:16:02:92:c6:f8:f1:59:
                    1c:8f:54:ae:24:31:1f:03:4d:8e:8c:4a:a5:9c:0c:
                    0f:32:ca:bd:ac:52:34:87:ee:80:1b:0f:f4:d0:5f:
                    13:72:1e:c6:b5:ba:85:0f:07:de:7b:78:ac:c3:63:
                    a6:17:b9:8e:8b:fa:3b:9f:37:51:5a:98:d0:d4:52:
                    f2:28:a4:04:78:8d:a0:46:85:72:5b:33:5b:63:24:
                    d2:b9:31:ad:ae:4d:4c:63:f2:80:31:01:e5:84:fa:
                    9b:ab:2a:97:8f:32:4a:41:20:cd:a1:07:e4:3b:37:
                    f3:b8:76:bf:8d:19:91:37:56:92:37:fa:aa:b5:21:
                    e6:c7:58:66:de:98:95:79:71:c6:c0:6e:f5:72:6b:
                    2e:97:2c:92:68:f3:bf:1a:86:7f:cf:72:f9:e4:40:
                    d9:9e:e0:17:32:74:76:ef:d1:85:01:fb:00:e6:76:
                    08:7f:f8:0b:61:13:f5:79:1f:d6:3a:a8:68:1c:6d:
                    ab:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:F3:FD:7F:E6:38:BD:08:85:71:2E:D2:B6:02:15:EA:CF:08:11:5C
            X509v3 Authority Key Identifier:
                keyid:4A:7A:3E:19:2D:CC:A8:7A:36:10:88:1C:B6:D6:0D:7D:DF:60:44:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/4A7A3E192DCCA87A3610881CB6D60D7DDF6044EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4A7A3E192DCCA87A3610881CB6D60D7DDF6044EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/3133382e3138362e3138342e302f32322d3332203d3e203631373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         79:7c:c1:83:68:18:d6:09:d7:d5:b2:6a:93:82:1d:31:c5:12:
         f8:90:2c:b2:3f:d2:57:69:c3:d9:b3:a3:31:4b:99:af:b5:36:
         2d:70:8a:77:5d:6c:71:32:0b:34:b1:1d:28:c5:76:1f:4d:6b:
         a8:03:fd:4d:39:a7:59:9f:89:7e:dc:c5:93:44:ee:ce:ef:c4:
         5e:63:a6:d8:cd:40:0a:5c:4f:3d:80:90:eb:54:92:77:7b:9b:
         4a:fb:98:fb:5f:bc:47:c0:72:cd:d7:99:d9:26:c6:95:47:41:
         22:7b:47:8a:89:01:6c:e5:b3:5c:57:91:8e:26:b8:95:c4:72:
         ce:3b:44:2b:4f:e0:48:62:e3:e3:71:29:51:26:76:8c:0e:4f:
         f3:78:1e:7c:76:b8:66:b9:d5:7b:69:5b:a1:6d:0a:b9:e3:97:
         c5:2e:3f:80:33:5b:e6:da:ac:b4:5e:0e:fd:c0:e5:05:8d:08:
         a6:ae:d8:9c:12:c9:77:3d:f6:b2:18:cb:c2:f7:b9:d6:4a:f6:
         82:be:20:50:12:a4:f0:d0:d2:c3:38:e6:92:d7:fd:3c:09:88:
         92:ab:60:2c:7d:0a:c4:a0:14:d8:f8:f6:7a:3e:f6:4c:cb:21:
         50:64:62:00:3e:7e:49:6a:d6:65:ac:74:65:3c:7e:21:7f:e7:
         36:e7:55:bf
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCAHCMC4RV5iN9HR1KAILZ3V1Ya0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEE3QTNFMTkyRENDQTg3QTM2MTA4ODFDQjZENjBEN0RE
RjYwNDRFQzAeFw0yNjA4MjUxNzA5MzRaFw0yNzA4MjQxNzE0MzRaMDMxMTAvBgNV
BAMTKDk0RjNGRDdGRTYzOEJEMDg4NTcxMkVEMkI2MDIxNUVBQ0YwODExNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJDXHLOOtPuHU+JssTU3d6WHAd
PzSAP2vM4gNnJhsBZczDtTHqR5Ulo1tDRTavIA/XWZYI8WNMnxNkRdiZTBrPszkT
FgKSxvjxWRyPVK4kMR8DTY6MSqWcDA8yyr2sUjSH7oAbD/TQXxNyHsa1uoUPB957
eKzDY6YXuY6L+jufN1FamNDUUvIopAR4jaBGhXJbM1tjJNK5Ma2uTUxj8oAxAeWE
+purKpePMkpBIM2hB+Q7N/O4dr+NGZE3VpI3+qq1IebHWGbemJV5ccbAbvVyay6X
LJJo878ahn/PcvnkQNme4BcydHbv0YUB+wDmdgh/+AthE/V5H9Y6qGgcbatLAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUlPP9f+Y4vQiFcS7StgIV6s8IEVwwHwYDVR0j
BBgwFoAUSno+GS3MqHo2EIgcttYNfd9gROwwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDRFV1RYWEdVaW9CcGFTMzhiV1VHUDMxdzFwR2hFVkxxRGRSYlViWjJU
VVIvMC80QTdBM0UxOTJEQ0NBODdBMzYxMDg4MUNCNkQ2MEQ3RERGNjA0NEVDLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRBN0EzRTE5MkRDQ0E4N0Ez
NjEwODgxQ0I2RDYwRDdEREY2MDQ0RUMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q0RVdUWFhHVWlvQnBhUzM4YldVR1AzMXcxcEdoRVZMcURkUmJVYloyVFVSLzAv
MzEzMzM4MmUzMTM4MzYyZTMxMzgzNDJlMzAyZjMyMzIyZDMzMzIyMDNkM2UyMDM2
MzEzNzM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAKKurgwDQYJKoZIhvcNAQELBQADggEBAHl8wYNo
GNYJ19WyapOCHTHFEviQLLI/0ldpw9mzozFLma+1Ni1winddbHEyCzSxHSjFdh9N
a6gD/U05p1mfiX7cxZNE7s7vxF5jptjNQApcTz2AkOtUknd7m0r7mPtfvEfAcs3X
mdkmxpVHQSJ7R4qJAWzls1xXkY4muJXEcs47RCtP4Ehi4+NxKVEmdowOT/N4Hnx2
uGa51XtpW6FtCrnjl8UuP4AzW+barLReDv3A5QWNCKau2JwSyXc99rIYy8L3udZK
9oK+IFASpPDQ0sM45pLX/TwJiJKrYCx9CsSgFNj49no+9kzLIVBkYgA+fklq1mWs
dGU8fiF/5zbnVb8=
-----END CERTIFICATE-----