Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/3133382e39372e3138352e302f32342d3234203d3e20323634313933.roa
File:                     3133382e39372e3138352e302f32342d3234203d3e20323634313933.roa (raw, json)
Hash identifier:          +6gmlgW/DApdV7RoQdP2xiMbY7IM3zpwncb8Fg6M50U=
Subject key identifier:   F4:C8:0C:92:BD:62:DA:38:69:D0:05:5B:55:18:5F:23:8E:A4:BE:43
Certificate issuer:       /CN=19070C100CE160EA1A2AA743323AC5B5B152D553
Certificate serial:       2CCDD25D1F789C02C34463E03C3B20D2C59CFD72
Authority key identifier: 19:07:0C:10:0C:E1:60:EA:1A:2A:A7:43:32:3A:C5:B5:B1:52:D5:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19070C100CE160EA1A2AA743323AC5B5B152D553.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/3133382e39372e3138352e302f32342d3234203d3e20323634313933.roa
Signing time:             Sun 28 Dec 2025 20:51:14 +0000
ROA not before:           Sun 28 Dec 2025 20:46:14 +0000
ROA not after:            Sun 27 Dec 2026 20:51:14 +0000
asID:                     264193
IP address blocks:        138.97.185.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:cd:d2:5d:1f:78:9c:02:c3:44:63:e0:3c:3b:20:d2:c5:9c:fd:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19070C100CE160EA1A2AA743323AC5B5B152D553
        Validity
            Not Before: Dec 28 20:46:14 2025 GMT
            Not After : Dec 27 20:51:14 2026 GMT
        Subject: CN=F4C80C92BD62DA3869D0055B55185F238EA4BE43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:69:73:f9:53:cf:0e:8b:42:ad:e8:98:46:47:
                    1a:7e:49:9b:30:09:f3:eb:78:9d:7b:16:e0:12:d5:
                    52:ef:9e:56:a8:28:e4:c2:fd:28:0d:75:a1:e2:a4:
                    78:80:a4:b0:d3:7a:22:6d:7b:92:98:a1:e9:bd:02:
                    e4:bc:5c:ee:e4:c1:e8:e8:6e:3b:c2:5a:95:47:51:
                    20:43:06:9f:29:f6:b3:16:ae:a6:37:0d:94:d6:30:
                    a0:5d:13:79:51:32:99:e8:35:28:3d:8a:06:4e:e4:
                    a3:d8:e0:3e:1c:d9:50:99:4f:ca:ce:1c:2c:86:71:
                    a0:70:18:56:5d:fe:f5:e9:d5:fb:30:25:c8:33:5d:
                    56:85:fc:36:3b:52:e2:a0:37:6e:3d:cd:57:05:23:
                    af:1c:9d:3c:d6:f5:3d:31:e0:34:01:12:82:49:b6:
                    5c:5c:23:02:47:2c:db:66:1a:cc:7a:31:ed:3b:14:
                    31:34:be:c0:0b:be:52:2d:b2:4c:89:3e:aa:8b:eb:
                    ed:94:99:f3:37:30:ef:4f:ce:84:fb:8b:bd:53:aa:
                    0d:0f:72:3a:99:ad:83:c6:b5:f1:5c:e6:9b:7d:bb:
                    9a:de:9c:32:6d:c3:6d:f6:53:cc:3b:19:18:9d:15:
                    68:f0:ed:72:43:a2:a7:25:8f:f0:d4:be:16:f0:fb:
                    94:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C8:0C:92:BD:62:DA:38:69:D0:05:5B:55:18:5F:23:8E:A4:BE:43
            X509v3 Authority Key Identifier:
                keyid:19:07:0C:10:0C:E1:60:EA:1A:2A:A7:43:32:3A:C5:B5:B1:52:D5:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/19070C100CE160EA1A2AA743323AC5B5B152D553.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/19070C100CE160EA1A2AA743323AC5B5B152D553.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFSgqrqCwJzvoERzV1tyLYbudXVESE41rMuXREQX2JFQ/0/3133382e39372e3138352e302f32342d3234203d3e20323634313933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:2a:47:02:3a:08:91:ef:65:c0:a2:33:d2:87:86:8a:01:d3:
         f8:3d:a4:23:e1:4d:16:fa:cd:40:78:ac:e3:20:c1:f6:0c:29:
         39:a6:9c:c5:2e:bb:e5:be:f1:14:96:70:d6:c2:ab:22:16:19:
         a0:39:9e:14:40:81:c3:02:59:a8:63:83:83:78:9b:48:39:ce:
         b9:13:06:f6:4c:92:45:10:b8:55:19:fe:0d:26:19:03:2d:f1:
         24:d8:e9:f4:00:12:04:81:0e:91:32:52:d9:cf:c9:a5:dd:81:
         b8:63:d8:24:a0:f4:27:65:c9:69:bc:01:48:a0:39:39:31:0c:
         90:9b:e2:1b:68:55:9e:16:af:39:ba:21:e1:ee:3e:56:a5:86:
         0a:29:0a:9a:d8:f4:76:80:5f:97:09:e6:9b:50:62:5d:3b:2f:
         b4:bf:9b:09:45:96:3d:76:73:55:f1:b3:5b:d9:65:63:99:45:
         8d:d7:4e:4b:c7:fe:20:9f:5c:c3:0f:3c:99:97:d1:97:47:06:
         44:0b:dc:35:29:8f:f7:20:20:71:ae:de:72:96:ca:13:91:fc:
         5d:5c:c5:18:d5:c1:74:06:50:3a:ba:65:4e:72:e3:e8:2f:a3:
         93:69:a1:db:b3:0b:c1:a6:aa:53:ff:f7:96:eb:bb:ef:ba:39:
         92:49:52:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 06:12:15 2026 by rpki-client