Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/3/3138372e38352e3134342e302f32302d3234203d3e203533303632.roa
File:                     3138372e38352e3134342e302f32302d3234203d3e203533303632.roa (raw, json)
Hash identifier:          Hn5UlUFMXNgfGKJCDn6bMA7H9Gr1R0P3s199/A9cmqQ=
Subject key identifier:   D3:64:F3:16:F3:1C:90:6D:62:C8:8F:A1:EE:15:2D:73:A0:B0:ED:85
Certificate issuer:       /CN=8B01CB8245E03ABF597867F21C1F5766BE6B6ED0
Certificate serial:       03398C672BF54B62129D0FB0C21759AD64410F47
Authority key identifier: 8B:01:CB:82:45:E0:3A:BF:59:78:67:F2:1C:1F:57:66:BE:6B:6E:D0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B01CB8245E03ABF597867F21C1F5766BE6B6ED0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/3/3138372e38352e3134342e302f32302d3234203d3e203533303632.roa
Signing time:             Fri 16 Jan 2026 17:23:57 +0000
ROA not before:           Fri 16 Jan 2026 17:18:57 +0000
ROA not after:            Fri 15 Jan 2027 17:23:57 +0000
asID:                     53062
IP address blocks:        187.85.144.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:39:8c:67:2b:f5:4b:62:12:9d:0f:b0:c2:17:59:ad:64:41:0f:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B01CB8245E03ABF597867F21C1F5766BE6B6ED0
        Validity
            Not Before: Jan 16 17:18:57 2026 GMT
            Not After : Jan 15 17:23:57 2027 GMT
        Subject: CN=D364F316F31C906D62C88FA1EE152D73A0B0ED85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:5f:f5:9f:7c:3b:9f:95:67:48:f6:e2:9d:ef:
                    01:9c:aa:8c:78:f2:39:0f:38:4b:2e:8b:ce:7d:52:
                    2f:2b:07:6d:08:1e:21:3e:30:fe:c1:97:bb:e6:58:
                    0a:b6:0d:da:d2:77:fa:00:1a:58:4e:43:b8:6d:bd:
                    1a:21:80:f0:5d:64:f4:46:e7:a4:81:89:66:fb:ae:
                    d5:32:c1:f8:32:e4:b9:75:92:51:ae:11:71:e1:6b:
                    85:08:d6:cb:a4:10:bb:c5:2a:3e:1c:db:8f:f0:55:
                    ea:e2:ba:f3:52:4b:68:10:83:46:28:e4:8b:f2:74:
                    83:91:9c:58:3d:b8:6a:69:fb:7f:d8:7a:fe:cb:bb:
                    b9:0d:28:01:c0:26:5d:a5:da:a8:d7:df:15:da:17:
                    6c:ad:f6:bd:ee:10:b9:0e:98:ad:15:b0:24:c4:c3:
                    f4:0a:08:73:ed:6c:4e:d1:33:02:61:79:c8:fd:6e:
                    f4:d8:8c:83:0c:f9:0b:6d:cb:bf:a4:a3:76:d7:ac:
                    ba:71:09:14:03:36:f7:07:9d:e3:fa:2a:4e:20:d2:
                    88:cc:8d:08:cd:5e:5e:d7:8a:5e:d8:70:97:1d:e9:
                    ff:88:82:ed:30:7d:8e:c8:b8:70:c5:df:68:20:af:
                    1b:67:a2:51:ba:91:e7:10:9b:e7:26:99:bf:4b:04:
                    86:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:64:F3:16:F3:1C:90:6D:62:C8:8F:A1:EE:15:2D:73:A0:B0:ED:85
            X509v3 Authority Key Identifier:
                keyid:8B:01:CB:82:45:E0:3A:BF:59:78:67:F2:1C:1F:57:66:BE:6B:6E:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/3/8B01CB8245E03ABF597867F21C1F5766BE6B6ED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8B01CB8245E03ABF597867F21C1F5766BE6B6ED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EhgDWAAZ74jYh19LU6v7ARqSxNV4jvdEiDFW929wuvp/3/3138372e38352e3134342e302f32302d3234203d3e203533303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.85.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         74:e9:15:83:14:18:30:e3:fe:1a:74:82:80:fe:97:6d:d5:36:
         55:47:d6:eb:b2:15:61:98:59:3f:05:ba:91:64:54:2d:42:2e:
         65:2f:bc:06:3b:54:46:cf:74:3a:b3:4a:e8:dd:22:2e:19:e4:
         c9:41:9a:7e:8c:e5:2f:e9:1f:4e:44:aa:5a:6f:9e:7d:0c:9b:
         d7:7a:30:2e:9d:ab:9e:f8:9d:c8:41:d3:7a:b3:ac:20:33:48:
         b5:19:d6:f7:3d:f8:2b:16:e2:56:b9:bf:30:ae:b1:4a:9f:39:
         c0:42:27:86:76:fc:75:ff:6d:1f:be:53:f7:84:9b:28:8d:e1:
         42:16:91:3b:91:7e:d1:ff:47:bf:12:cf:cc:78:7e:92:22:63:
         94:c0:c5:c1:99:d8:70:98:e8:6f:0a:b6:3f:4a:f7:f1:82:aa:
         43:bd:68:01:45:d8:c0:44:3a:d2:83:cf:d4:ec:ba:79:4f:3d:
         e7:e6:bc:44:4e:47:00:45:4a:64:ac:84:60:fd:15:16:c9:c3:
         54:57:09:dd:94:e1:9c:9c:bb:ef:39:1b:52:42:09:46:11:1d:
         4a:fe:42:63:71:67:5b:fc:81:72:49:4c:a1:22:98:a3:74:6d:
         d5:09:56:58:8a:7d:c6:de:70:56:a7:22:ba:02:4f:37:27:35:
         7c:e9:78:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 14:23:18 2026 by rpki-client