Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/3/3138362e3231312e39362e302f32302d3234203d3e203533303632.roa
File:                     3138362e3231312e39362e302f32302d3234203d3e203533303632.roa (raw, json)
Hash identifier:          Zav9oOeFGQsLvkyB98xbWiyU9mI5tNRfRjhrWryVo80=
Subject key identifier:   95:A4:82:37:2D:D4:CD:50:33:BD:8C:01:C4:6D:BE:88:0F:8B:2B:17
Certificate issuer:       /CN=8B01CB8245E03ABF597867F21C1F5766BE6B6ED0
Certificate serial:       6843EC4B7DCB67D304C9B92AD373E51BAB2DEBFC
Authority key identifier: 8B:01:CB:82:45:E0:3A:BF:59:78:67:F2:1C:1F:57:66:BE:6B:6E:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B01CB8245E03ABF597867F21C1F5766BE6B6ED0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/3/3138362e3231312e39362e302f32302d3234203d3e203533303632.roa
Signing time:             Fri 16 Jan 2026 17:23:57 +0000
ROA not before:           Fri 16 Jan 2026 17:18:57 +0000
ROA not after:            Fri 15 Jan 2027 17:23:57 +0000
asID:                     53062
IP address blocks:        186.211.96.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:43:ec:4b:7d:cb:67:d3:04:c9:b9:2a:d3:73:e5:1b:ab:2d:eb:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B01CB8245E03ABF597867F21C1F5766BE6B6ED0
        Validity
            Not Before: Jan 16 17:18:57 2026 GMT
            Not After : Jan 15 17:23:57 2027 GMT
        Subject: CN=95A482372DD4CD5033BD8C01C46DBE880F8B2B17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c1:9e:a3:c2:d2:d8:68:d3:8d:bb:28:45:12:
                    45:a4:0e:75:5d:69:20:c1:91:6b:59:99:4b:fb:56:
                    97:b1:22:28:58:61:80:d0:0f:0d:b5:37:af:23:ae:
                    f0:60:79:ca:9b:4b:ea:0b:88:45:1e:82:2c:fc:a0:
                    4a:7c:03:83:9e:49:52:a2:d5:92:5d:b1:be:05:b5:
                    75:3d:24:48:12:d5:9b:2d:e1:8f:e8:fb:34:d9:cf:
                    e0:72:0a:6b:1d:0b:43:32:25:04:66:e8:d6:7f:72:
                    49:96:66:e4:b9:8b:09:2c:27:ed:8b:4c:09:14:59:
                    48:07:c6:68:4c:5e:e9:03:6d:db:24:0b:0f:8f:53:
                    54:b7:d3:7e:5f:ec:4d:3c:84:3f:7a:ed:0a:af:b7:
                    7a:60:c6:90:20:c1:c4:1c:de:81:df:ce:4a:b4:40:
                    0a:76:50:11:fb:bb:dd:a1:34:30:16:ad:eb:ea:63:
                    2a:1b:e8:d4:e2:62:7a:98:95:41:38:fe:bf:84:36:
                    3b:16:6e:6a:c5:ed:92:42:93:98:df:ef:d6:a9:27:
                    f5:c2:bc:67:8a:f7:c1:00:8f:6f:84:26:5f:8f:60:
                    5f:f1:c5:30:5d:f3:94:6b:db:a9:36:ee:b8:b9:c4:
                    f6:2c:04:9a:d0:a3:f6:1a:9e:7e:e1:80:ca:d0:bc:
                    ab:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A4:82:37:2D:D4:CD:50:33:BD:8C:01:C4:6D:BE:88:0F:8B:2B:17
            X509v3 Authority Key Identifier:
                keyid:8B:01:CB:82:45:E0:3A:BF:59:78:67:F2:1C:1F:57:66:BE:6B:6E:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/3/8B01CB8245E03ABF597867F21C1F5766BE6B6ED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B01CB8245E03ABF597867F21C1F5766BE6B6ED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/3/3138362e3231312e39362e302f32302d3234203d3e203533303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.211.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0f:19:ba:92:6b:23:ec:c1:5c:9a:19:8c:2d:a8:85:e3:20:87:
         02:59:0d:da:e1:a0:67:71:ef:1d:dd:38:7f:e7:c2:62:f6:db:
         bf:e0:62:2a:6c:d6:cf:88:20:c8:af:18:e4:ac:3a:37:cd:92:
         d8:bc:c0:1f:5b:3f:55:3e:84:ed:bc:6f:c2:7d:9b:2b:a3:6d:
         3f:43:e6:98:e7:fe:b9:c7:a4:bc:0e:a6:2b:04:41:8a:f1:f0:
         70:61:ad:db:e1:1a:07:b6:a5:d3:8c:7a:7d:77:07:88:16:a2:
         ac:05:67:1b:bd:44:12:c5:f7:f4:35:e2:a4:cc:cc:d4:d5:bc:
         b4:95:74:99:78:12:11:30:84:3c:c6:61:3b:50:17:dd:ef:e0:
         b9:74:18:47:54:e2:94:b6:8e:2e:b6:ab:5c:9a:fa:29:3b:43:
         4a:c9:fc:ef:45:51:8a:ab:eb:b6:4e:cb:d1:e2:29:4b:0e:ab:
         12:a7:9a:36:31:bb:5f:18:1d:a8:9f:ac:45:84:72:9a:ca:46:
         ef:1c:ed:dd:b0:e1:b9:fd:21:3c:de:78:e4:90:7a:66:1c:4a:
         e8:2c:3f:fc:7c:63:3e:c8:a1:30:8d:c0:a9:c3:d1:76:a6:ab:
         67:00:69:a5:78:8b:ca:47:d2:fd:4c:ed:73:b6:c1:91:24:42:
         d5:1b:24:27
-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIUaEPsS33LZ9MEybkq03PlG6st6/wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEIwMUNCODI0NUUwM0FCRjU5Nzg2N0YyMUMxRjU3NjZC
RTZCNkVEMDAeFw0yNjAxMTYxNzE4NTdaFw0yNzAxMTUxNzIzNTdaMDMxMTAvBgNV
BAMTKDk1QTQ4MjM3MkRENENENTAzM0JEOEMwMUM0NkRCRTg4MEY4QjJCMTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChwZ6jwtLYaNONuyhFEkWkDnVd
aSDBkWtZmUv7VpexIihYYYDQDw21N68jrvBgecqbS+oLiEUegiz8oEp8A4OeSVKi
1ZJdsb4FtXU9JEgS1Zst4Y/o+zTZz+ByCmsdC0MyJQRm6NZ/ckmWZuS5iwksJ+2L
TAkUWUgHxmhMXukDbdskCw+PU1S3035f7E08hD967Qqvt3pgxpAgwcQc3oHfzkq0
QAp2UBH7u92hNDAWrevqYyob6NTiYnqYlUE4/r+ENjsWbmrF7ZJCk5jf79apJ/XC
vGeK98EAj2+EJl+PYF/xxTBd85Rr26k27ri5xPYsBJrQo/Yann7hgMrQvKsFAgMB
AAGjggJMMIICSDAdBgNVHQ4EFgQUlaSCNy3UzVAzvYwBxG2+iA+LKxcwHwYDVR0j
BBgwFoAUiwHLgkXgOr9ZeGfyHB9XZr5rbtAwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9FaGdEV0FBWjc0alloMTlMVTZ2N0FScVN4TlY0anZkRWlERlc5Mjl3dXZw
LzMvOEIwMUNCODI0NUUwM0FCRjU5Nzg2N0YyMUMxRjU3NjZCRTZCNkVEMC5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS84QjAxQ0I4MjQ1RTAzQUJGNTk3
ODY3RjIxQzFGNTc2NkJFNkI2RUQwLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9F
aGdEV0FBWjc0alloMTlMVTZ2N0FScVN4TlY0anZkRWlERlc5Mjl3dXZwLzMvMzEz
ODM2MmUzMjMxMzEyZTM5MzYyZTMwMmYzMjMwMmQzMjM0MjAzZDNlMjAzNTMzMzAz
NjMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQEutNgMA0GCSqGSIb3DQEBCwUAA4IBAQAPGbqSayPswVya
GYwtqIXjIIcCWQ3a4aBnce8d3Th/58Ji9tu/4GIqbNbPiCDIrxjkrDo3zZLYvMAf
Wz9VPoTtvG/CfZsro20/Q+aY5/65x6S8DqYrBEGK8fBwYa3b4RoHtqXTjHp9dweI
FqKsBWcbvUQSxff0NeKkzMzU1by0lXSZeBIRMIQ8xmE7UBfd7+C5dBhHVOKUto4u
tqtcmvopO0NKyfzvRVGKq+u2TsvR4ilLDqsSp5o2MbtfGB2on6xFhHKaykbvHO3d
sOG5/SE83njkkHpmHEroLD/8fGM+yKEwjcCpw9F2pqtnAGmleIvKR9L9TO1ztsGR
JELVGyQn
-----END CERTIFICATE-----
Generated at Thu Feb 19 10:21:35 2026 by rpki-client