Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/3136382e3139342e3234382e302f32322d3234203d3e20323639333539.roa
File:                     3136382e3139342e3234382e302f32322d3234203d3e20323639333539.roa (raw, json)
Hash identifier:          JL/HRruUBXF2kpArYos67M96pUIueygRPAl6L8DrZw8=
Subject key identifier:   BE:22:92:05:AD:40:F6:4D:CC:3A:E2:D6:78:CC:E1:57:00:D7:EF:F2
Certificate issuer:       /CN=838E2AA3E7CC12B77638528A70C2345F3ADD65D6
Certificate serial:       3F7A3FA1864681A8E6D2894AA5CB23EE187BE437
Authority key identifier: 83:8E:2A:A3:E7:CC:12:B7:76:38:52:8A:70:C2:34:5F:3A:DD:65:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/838E2AA3E7CC12B77638528A70C2345F3ADD65D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/3136382e3139342e3234382e302f32322d3234203d3e20323639333539.roa
Signing time:             Wed 05 Aug 2026 17:15:45 +0000
ROA not before:           Wed 05 Aug 2026 17:10:45 +0000
ROA not after:            Wed 04 Aug 2027 17:15:45 +0000
asID:                     269359
IP address blocks:        168.194.248.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:7a:3f:a1:86:46:81:a8:e6:d2:89:4a:a5:cb:23:ee:18:7b:e4:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=838E2AA3E7CC12B77638528A70C2345F3ADD65D6
        Validity
            Not Before: Aug  5 17:10:45 2026 GMT
            Not After : Aug  4 17:15:45 2027 GMT
        Subject: CN=BE229205AD40F64DCC3AE2D678CCE15700D7EFF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:75:97:69:10:44:2f:96:19:08:11:2a:c4:98:
                    8a:42:c1:d0:5e:9a:d5:30:3f:b8:79:7a:35:7c:80:
                    33:12:b2:c9:20:52:b0:a2:03:71:8e:9b:8d:d4:b4:
                    57:b9:47:9d:80:61:94:4a:e5:d0:22:58:bd:29:c0:
                    e5:37:07:6e:d3:5f:28:9c:c1:1c:e7:a7:2f:51:3a:
                    0e:60:b9:2c:18:49:b1:e4:92:4a:04:08:ae:ba:bf:
                    19:56:43:db:62:0d:97:df:a0:4e:fe:74:5c:47:3c:
                    b8:8b:d3:fe:e4:ec:6d:c1:4b:7a:39:4f:28:84:0d:
                    c0:88:08:11:8c:35:fd:26:40:0e:20:5a:46:59:29:
                    62:bf:50:cd:5a:30:e9:97:03:ad:e0:e5:6d:e2:4a:
                    e4:ba:26:10:d8:ae:6e:c1:cf:63:c6:23:ea:e7:c4:
                    05:63:4a:26:06:52:06:70:a7:47:59:a2:c0:14:d0:
                    c9:9e:22:27:57:35:69:a5:4a:9a:71:10:24:b0:8d:
                    99:52:e1:f2:da:6b:f9:8f:96:0f:70:81:c0:85:13:
                    ee:21:79:50:bf:c1:95:b0:04:89:b3:5e:16:2c:53:
                    90:9e:f6:14:10:39:37:24:73:39:80:21:f4:13:37:
                    2f:be:71:99:e4:78:68:33:72:ff:51:a4:32:71:27:
                    89:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:22:92:05:AD:40:F6:4D:CC:3A:E2:D6:78:CC:E1:57:00:D7:EF:F2
            X509v3 Authority Key Identifier:
                keyid:83:8E:2A:A3:E7:CC:12:B7:76:38:52:8A:70:C2:34:5F:3A:DD:65:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/838E2AA3E7CC12B77638528A70C2345F3ADD65D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/838E2AA3E7CC12B77638528A70C2345F3ADD65D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/3136382e3139342e3234382e302f32322d3234203d3e20323639333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.194.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         04:49:e5:8f:7e:e2:05:77:3c:d6:63:85:be:30:a2:ca:22:57:
         01:4b:95:10:70:4a:e3:2c:b4:8f:69:20:64:69:1c:c2:1d:4c:
         23:ef:11:29:cd:39:f4:27:8e:ec:32:85:f2:75:be:88:cf:00:
         84:0a:af:eb:7e:29:3b:ba:c3:b0:4a:c8:fa:2d:f4:d7:c5:5e:
         aa:d3:01:05:10:26:dc:3a:a9:5b:41:99:82:5c:23:51:37:d2:
         b8:f0:9e:8c:17:46:f9:70:78:5f:19:5e:f5:81:db:a6:79:9d:
         c5:79:b8:c1:8a:53:25:7e:26:92:28:0d:44:23:e9:b7:94:d2:
         09:9a:a7:f1:c5:7b:77:2c:ff:10:eb:12:b7:be:7f:81:51:b2:
         06:43:c4:20:bd:13:68:64:5e:16:9a:8c:f4:d8:c0:ea:ec:1a:
         55:47:24:60:d8:22:d5:de:f0:60:b5:53:56:64:3d:f5:53:fd:
         ac:ea:3e:85:4a:73:ef:78:d6:78:19:34:45:6e:6a:54:5c:59:
         d8:14:ec:90:20:be:bd:94:6f:c8:72:ed:bd:09:0e:e5:26:4c:
         ac:c6:bc:5b:dc:01:23:35:d4:7d:f3:f5:b1:d9:b2:f8:8e:46:
         ff:58:3c:35:5f:08:86:11:2f:7c:45:92:bb:b0:56:70:85:cd:
         f5:f4:6b:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----