Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/3137372e3233342e3136302e302f31392d3234203d3e20323633323530.roa
File:                     3137372e3233342e3136302e302f31392d3234203d3e20323633323530.roa (raw, json)
Hash identifier:          xchBUGJGFSjJPalTXX1AXTY+JPwWfbHhVDIrUrnZJew=
Subject key identifier:   8D:0C:3A:6A:2E:25:2F:02:86:C7:19:BE:F6:4C:26:EB:02:6E:12:7F
Certificate issuer:       /CN=A1E6749C09E9E32D11C15678D45C1B936D525291
Certificate serial:       2E42824DA7CF90856324388753530C143DECE8AA
Authority key identifier: A1:E6:74:9C:09:E9:E3:2D:11:C1:56:78:D4:5C:1B:93:6D:52:52:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E6749C09E9E32D11C15678D45C1B936D525291.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/3137372e3233342e3136302e302f31392d3234203d3e20323633323530.roa
Signing time:             Thu 05 Mar 2026 19:33:45 +0000
ROA not before:           Thu 05 Mar 2026 19:28:45 +0000
ROA not after:            Thu 04 Mar 2027 19:33:45 +0000
asID:                     263250
IP address blocks:        177.234.160.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:42:82:4d:a7:cf:90:85:63:24:38:87:53:53:0c:14:3d:ec:e8:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1E6749C09E9E32D11C15678D45C1B936D525291
        Validity
            Not Before: Mar  5 19:28:45 2026 GMT
            Not After : Mar  4 19:33:45 2027 GMT
        Subject: CN=8D0C3A6A2E252F0286C719BEF64C26EB026E127F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:38:f0:43:9b:a2:5a:8b:f0:8a:20:02:ba:98:
                    40:e9:4d:38:a1:ee:96:5e:e7:f1:8b:e7:ce:e1:98:
                    ef:bf:9e:b2:6d:b5:23:c4:2b:f5:c2:d5:16:7d:72:
                    9a:64:8c:ea:e9:10:6d:a3:95:68:90:3f:3a:a8:ae:
                    fc:8e:ad:ba:29:81:56:b7:44:e2:b4:98:ec:39:51:
                    0c:f9:a9:8b:4d:ab:8e:43:68:d3:0b:68:2d:29:1c:
                    f5:cd:97:d4:c4:ca:c3:29:be:33:8a:9e:f2:1c:46:
                    76:f1:b3:da:e7:ef:bc:6e:65:ca:70:9d:87:6b:bb:
                    32:90:88:68:ae:6d:cb:0c:2c:37:3a:f8:a9:98:e4:
                    16:fb:da:ce:2e:51:3d:13:e8:93:9c:4d:8f:e8:bd:
                    3e:fc:18:7d:5d:0e:fa:70:a7:07:8b:55:3f:4b:34:
                    06:08:84:ad:83:96:89:b8:2e:03:b9:29:35:53:e9:
                    90:b8:15:f5:24:ff:07:87:31:82:a6:37:ce:de:e7:
                    94:53:b9:26:69:32:8a:77:49:2d:fa:99:88:64:2c:
                    ad:31:31:11:e7:9a:02:de:c0:ac:a1:9f:b5:f9:5c:
                    de:9a:5e:2c:2b:f2:1d:d7:5f:66:50:2d:36:e2:0a:
                    0f:c5:2d:f9:bf:4c:3c:f6:84:2f:26:1f:b5:e4:e3:
                    f7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:0C:3A:6A:2E:25:2F:02:86:C7:19:BE:F6:4C:26:EB:02:6E:12:7F
            X509v3 Authority Key Identifier:
                keyid:A1:E6:74:9C:09:E9:E3:2D:11:C1:56:78:D4:5C:1B:93:6D:52:52:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E6749C09E9E32D11C15678D45C1B936D525291.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/3137372e3233342e3136302e302f31392d3234203d3e20323633323530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.234.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         55:ab:25:78:10:90:7c:9c:f6:c1:27:14:77:68:d8:05:a1:2c:
         09:97:c3:df:b4:1f:e5:b8:cb:ca:56:2c:e9:10:e0:e4:24:74:
         c1:b6:e1:8c:8d:aa:91:99:28:1a:82:6d:ac:e4:a0:e3:00:35:
         73:43:99:28:6c:fa:5b:c1:e1:39:0a:91:d9:b7:ba:2e:a8:64:
         26:02:ce:05:1d:e5:d4:c5:cc:52:c9:88:85:b2:9a:03:d9:7c:
         69:05:53:92:5f:d5:15:40:35:70:18:fe:6a:a8:f1:78:7e:84:
         54:d4:02:bc:da:60:60:16:54:d7:f6:1c:82:43:70:a4:fc:e0:
         ef:ad:b4:f5:00:27:b3:ed:85:f2:d2:df:b4:8f:7f:cd:a8:a9:
         c3:da:87:48:26:62:e4:7b:e2:ab:8c:9c:c6:bd:76:85:ce:67:
         81:72:23:6c:98:3e:6a:f5:98:f5:da:eb:ee:21:58:8b:36:f6:
         1c:78:ae:0b:6e:14:71:58:32:91:4a:37:f6:7d:94:55:1f:af:
         8c:ee:8b:5c:e7:3f:23:27:72:47:aa:51:21:3c:44:52:b6:52:
         55:63:1b:91:59:00:79:55:32:f5:a8:e7:b3:f0:f4:5b:da:49:
         49:bb:c4:23:63:70:98:09:65:96:5d:3b:53:19:ef:8d:65:8b:
         dc:6a:12:60
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIULkKCTafPkIVjJDiHU1MMFD3s6KowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTFFNjc0OUMwOUU5RTMyRDExQzE1Njc4RDQ1QzFCOTM2
RDUyNTI5MTAeFw0yNjAzMDUxOTI4NDVaFw0yNzAzMDQxOTMzNDVaMDMxMTAvBgNV
BAMTKDhEMEMzQTZBMkUyNTJGMDI4NkM3MTlCRUY2NEMyNkVCMDI2RTEyN0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7OPBDm6Jai/CKIAK6mEDpTTih
7pZe5/GL587hmO+/nrJttSPEK/XC1RZ9cppkjOrpEG2jlWiQPzqorvyOrbopgVa3
ROK0mOw5UQz5qYtNq45DaNMLaC0pHPXNl9TEysMpvjOKnvIcRnbxs9rn77xuZcpw
nYdruzKQiGiubcsMLDc6+KmY5Bb72s4uUT0T6JOcTY/ovT78GH1dDvpwpweLVT9L
NAYIhK2Dlom4LgO5KTVT6ZC4FfUk/weHMYKmN87e55RTuSZpMop3SS36mYhkLK0x
MRHnmgLewKyhn7X5XN6aXiwr8h3XX2ZQLTbiCg/FLfm/TDz2hC8mH7Xk4/f5AgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUjQw6ai4lLwKGxxm+9kwm6wJuEn8wHwYDVR0j
BBgwFoAUoeZ0nAnp4y0RwVZ41Fwbk21SUpEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRFlkMmlKOW5VMnRoU1ZRb2dwQ1o2ZkphZGFnRGpHOUFjczlZdFc4Y05B
UFgvMC9BMUU2NzQ5QzA5RTlFMzJEMTFDMTU2NzhENDVDMUI5MzZENTI1MjkxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0ExRTY3NDlDMDlFOUUzMkQx
MUMxNTY3OEQ0NUMxQjkzNkQ1MjUyOTEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0RZZDJpSjluVTJ0aFNWUW9ncENaNmZKYWRhZ0RqRzlBY3M5WXRXOGNOQVBYLzAv
MzEzNzM3MmUzMjMzMzQyZTMxMzYzMDJlMzAyZjMxMzkyZDMyMzQyMDNkM2UyMDMy
MzYzMzMyMzUzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEBbHqoDANBgkqhkiG9w0BAQsFAAOCAQEAVasl
eBCQfJz2wScUd2jYBaEsCZfD37Qf5bjLylYs6RDg5CR0wbbhjI2qkZkoGoJtrOSg
4wA1c0OZKGz6W8HhOQqR2be6LqhkJgLOBR3l1MXMUsmIhbKaA9l8aQVTkl/VFUA1
cBj+aqjxeH6EVNQCvNpgYBZU1/YcgkNwpPzg76209QAns+2F8tLftI9/zaipw9qH
SCZi5Hviq4ycxr12hc5ngXIjbJg+avWY9drr7iFYizb2HHiuC24UcVgykUo39n2U
VR+vjO6LXOc/IydyR6pRITxEUrZSVWMbkVkAeVUy9ajns/D0W9pJSbvEI2NwmAll
ll07UxnvjWWL3GoSYA==
-----END CERTIFICATE-----
Generated at Wed Apr 8 09:21:10 2026 by rpki-client