Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/3133382e33362e38342e302f32342d3234203d3e20323634313933.roa
File:                     3133382e33362e38342e302f32342d3234203d3e20323634313933.roa (raw, json)
Hash identifier:          DGc5Twdf6OOtumE4GOiGTWFg2/olTI58QW2JdPPBjdY=
Subject key identifier:   15:27:57:AD:CD:AF:D8:44:A6:CB:18:9C:6C:E9:D1:AF:B7:4B:D5:63
Certificate issuer:       /CN=19070C100CE160EA1A2AA743323AC5B5B152D553
Certificate serial:       2BA75DD22CEFE26FA49A4521593BDF3FBAB82AE9
Authority key identifier: 19:07:0C:10:0C:E1:60:EA:1A:2A:A7:43:32:3A:C5:B5:B1:52:D5:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19070C100CE160EA1A2AA743323AC5B5B152D553.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/3133382e33362e38342e302f32342d3234203d3e20323634313933.roa
Signing time:             Sun 28 Dec 2025 20:51:11 +0000
ROA not before:           Sun 28 Dec 2025 20:46:11 +0000
ROA not after:            Sun 27 Dec 2026 20:51:11 +0000
asID:                     264193
IP address blocks:        138.36.84.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:a7:5d:d2:2c:ef:e2:6f:a4:9a:45:21:59:3b:df:3f:ba:b8:2a:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19070C100CE160EA1A2AA743323AC5B5B152D553
        Validity
            Not Before: Dec 28 20:46:11 2025 GMT
            Not After : Dec 27 20:51:11 2026 GMT
        Subject: CN=152757ADCDAFD844A6CB189C6CE9D1AFB74BD563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:48:75:56:a1:87:94:df:72:e1:68:08:7b:09:
                    52:75:8e:6c:92:06:45:17:9c:e5:0d:33:ca:bf:bc:
                    e1:62:d9:ad:fb:79:3f:df:c3:e4:c4:39:16:50:ac:
                    a1:3a:e4:c6:73:56:e5:9c:3e:6e:c4:27:de:9d:6d:
                    07:7f:82:a8:45:b8:99:b6:26:11:40:9a:d7:66:7f:
                    2d:e0:e9:a8:38:8e:6f:c9:0c:38:ab:cf:63:36:02:
                    b3:d2:ff:f4:52:9a:89:a6:48:c4:5d:ab:e3:27:05:
                    62:f3:97:d3:8a:98:e7:fd:f7:af:00:98:c0:23:b7:
                    d0:d5:31:0c:bb:06:eb:da:73:22:65:f0:47:3d:d7:
                    c8:2e:08:92:0d:7a:c2:bd:1a:bf:f7:65:c3:c3:8c:
                    fb:66:cc:a0:15:a2:10:27:5d:06:97:99:2f:9e:13:
                    42:25:3e:4d:4d:42:96:18:50:23:1a:8b:f6:5c:0a:
                    36:f9:73:08:e6:2e:cf:01:6e:7c:da:b1:b3:9c:5d:
                    6e:55:aa:c9:c2:18:fe:da:33:63:79:a5:7e:8d:95:
                    a3:b5:5e:f6:ef:8d:15:2b:f7:da:b8:e2:85:8e:84:
                    09:64:89:ce:27:c4:48:45:5a:23:9f:84:7d:49:4f:
                    1d:45:54:c3:c9:f9:a0:55:87:85:33:96:a0:77:ec:
                    52:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:27:57:AD:CD:AF:D8:44:A6:CB:18:9C:6C:E9:D1:AF:B7:4B:D5:63
            X509v3 Authority Key Identifier:
                keyid:19:07:0C:10:0C:E1:60:EA:1A:2A:A7:43:32:3A:C5:B5:B1:52:D5:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/19070C100CE160EA1A2AA743323AC5B5B152D553.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19070C100CE160EA1A2AA743323AC5B5B152D553.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/3133382e33362e38342e302f32342d3234203d3e20323634313933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:f6:49:b7:db:54:40:49:42:dc:58:b2:ff:15:7f:3b:8f:0e:
         dc:72:3e:87:d5:70:23:2b:1a:1e:55:2e:4c:fa:68:10:4b:7c:
         e7:b8:9a:2b:93:d4:cd:e9:ee:6a:f5:ca:9a:f0:46:9d:d9:38:
         24:c9:cc:be:e2:e9:b7:3f:dc:55:5a:db:22:84:c0:5b:eb:de:
         17:ef:6b:ea:7f:ad:e5:02:55:9c:13:14:33:30:86:77:5f:e0:
         3a:9d:11:47:6f:3a:90:28:53:fb:73:c2:88:7e:49:5d:ab:dc:
         47:eb:54:a4:87:82:db:f3:fd:b3:82:43:3e:45:73:82:6e:18:
         7c:26:8b:4f:18:68:56:a7:34:c4:37:97:08:55:7b:29:f7:b3:
         aa:cb:6c:ac:ad:81:62:3a:e1:f3:3a:ce:76:5d:73:d2:f9:f1:
         c3:60:5a:a4:af:46:e1:2a:f3:88:b2:e6:b4:74:96:69:a4:07:
         26:80:41:b7:68:18:58:ac:18:6a:d2:c9:b3:37:b5:22:ed:67:
         27:55:f4:9b:1c:12:c3:7c:e2:e0:d3:0b:1a:35:92:c9:63:71:
         70:8c:cb:a2:cc:be:a4:72:e3:d3:88:4d:83:61:f0:64:97:7d:
         aa:82:2b:c6:43:46:98:d9:a1:8f:a1:45:de:17:f2:99:ec:d0:
         67:df:65:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 06:12:04 2026 by rpki-client