Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3133362e302f32342d3234203d3e20323633353834.roa
File:                     3137372e3132392e3133362e302f32342d3234203d3e20323633353834.roa (raw, json)
Hash identifier:          Jb6ntQFDRgIR12ToLBoJ06e+zbVbLi+ZYxAe7GbKDpA=
Subject key identifier:   E7:0B:36:06:BA:61:55:54:C1:4B:5D:18:08:1A:20:1D:2B:B0:A6:9B
Certificate issuer:       /CN=4B3A30BAE843BAF4B139185B582BA682798E126F
Certificate serial:       701D63AC89BE8C6D4BEDA4D7F111EF6551CDAB3E
Authority key identifier: 4B:3A:30:BA:E8:43:BA:F4:B1:39:18:5B:58:2B:A6:82:79:8E:12:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3A30BAE843BAF4B139185B582BA682798E126F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3133362e302f32342d3234203d3e20323633353834.roa
Signing time:             Sat 14 Mar 2026 22:28:24 +0000
ROA not before:           Sat 14 Mar 2026 22:23:24 +0000
ROA not after:            Sat 13 Mar 2027 22:28:24 +0000
asID:                     263584
IP address blocks:        177.129.136.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:1d:63:ac:89:be:8c:6d:4b:ed:a4:d7:f1:11:ef:65:51:cd:ab:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B3A30BAE843BAF4B139185B582BA682798E126F
        Validity
            Not Before: Mar 14 22:23:24 2026 GMT
            Not After : Mar 13 22:28:24 2027 GMT
        Subject: CN=E70B3606BA615554C14B5D18081A201D2BB0A69B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:dc:ae:ab:d4:83:55:0e:44:da:97:da:ba:3b:
                    02:e3:ab:1b:0b:79:08:53:89:a6:7a:26:4b:76:e8:
                    ab:6b:a6:c2:fc:56:fc:fd:b2:c0:aa:52:30:10:1f:
                    71:70:5d:7a:db:4c:2b:1e:ed:1c:fe:33:f0:d3:d1:
                    ae:d9:6c:f1:c8:09:95:27:36:48:9f:6e:20:d3:9d:
                    29:07:5d:eb:64:78:62:48:fa:45:34:b3:b0:80:85:
                    71:20:cf:e1:f6:9b:8f:d0:6f:59:fd:b4:65:d1:29:
                    b7:4b:51:91:c1:4c:36:a4:15:85:fd:b0:5c:02:9f:
                    34:e8:70:9c:f5:19:71:5d:75:7a:ef:f9:74:6a:c3:
                    56:3d:1a:4b:71:be:a5:2b:bd:68:fe:fd:92:bf:78:
                    bc:4b:54:f2:30:0a:29:f3:c9:23:f0:f7:36:02:f4:
                    57:f0:c8:5d:a2:f9:1f:56:8f:0c:f1:c6:90:90:ea:
                    26:51:29:a5:8f:dc:3f:09:1e:46:c7:0a:b0:a4:da:
                    9e:5d:bd:0a:33:7f:f7:92:64:7d:7b:77:6f:fd:0c:
                    a1:97:2c:40:29:13:7f:a9:18:9e:d1:96:ec:6c:68:
                    69:b2:b1:ee:89:c6:9c:05:8e:34:3c:2d:d8:9b:c7:
                    62:61:96:d5:92:55:85:41:4e:8a:9e:f5:fb:18:d7:
                    61:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:0B:36:06:BA:61:55:54:C1:4B:5D:18:08:1A:20:1D:2B:B0:A6:9B
            X509v3 Authority Key Identifier:
                keyid:4B:3A:30:BA:E8:43:BA:F4:B1:39:18:5B:58:2B:A6:82:79:8E:12:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/4B3A30BAE843BAF4B139185B582BA682798E126F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3A30BAE843BAF4B139185B582BA682798E126F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/3137372e3132392e3133362e302f32342d3234203d3e20323633353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:ce:76:c3:95:67:f8:00:6f:3d:e7:0d:16:1b:20:62:2a:2c:
         80:f2:fd:91:6f:3e:db:88:57:0c:a3:7c:10:15:33:ce:85:5f:
         e8:4e:70:be:2f:7e:df:d0:c8:b2:13:d4:52:c0:48:9a:c1:d9:
         0e:47:d9:a6:2d:21:f3:53:47:e7:8c:b0:6a:3c:d1:a1:ee:67:
         3c:93:ed:06:70:9c:d2:9b:51:39:3d:55:ac:a2:70:bf:d5:a5:
         8c:15:3c:9f:94:05:d3:c0:28:3e:0f:d3:b2:93:ee:48:c0:57:
         fd:63:6c:0c:d8:2d:1c:4a:a8:2c:22:c0:0b:7a:70:60:c1:b0:
         b2:ad:15:2d:ce:6a:15:98:8d:1b:5f:b7:46:39:8b:35:73:77:
         fe:cd:26:24:13:9f:b0:f8:a1:c4:e2:60:f0:38:76:ff:3f:53:
         da:af:11:32:70:71:af:ca:e7:17:a2:b9:c3:19:09:7a:18:4c:
         0a:b8:4f:af:99:5c:f9:bd:7e:67:eb:3e:a0:c7:77:8e:25:d1:
         43:0c:e7:18:b6:22:5d:47:1f:80:fd:e2:c7:4d:04:22:b4:3c:
         e1:a9:c1:c3:67:1b:1c:aa:60:a3:f8:a7:a3:12:a9:dd:47:ff:
         37:d5:b7:5b:f6:a9:b1:bc:8a:97:0e:20:28:d9:59:40:a6:bb:
         79:63:1c:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 10:42:14 2026 by rpki-client