Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3136382e3139352e3232382e302f32322d3232203d3e20323632343137.roa
File:                     3136382e3139352e3232382e302f32322d3232203d3e20323632343137.roa (raw, json)
Hash identifier:          m4UVDx6gz0S66lJEJ33AbBNRyexQ7PZO4goJbaRkcKI=
Subject key identifier:   53:81:50:61:0F:97:CF:04:A0:90:12:DB:9A:2D:EA:EB:05:90:6C:2A
Certificate issuer:       /CN=09621261D73082600F4F44D6CE2A087E16F5D31C
Certificate serial:       2D49C8585E2BB7003CFDE0E68DB0352DA453AFF7
Authority key identifier: 09:62:12:61:D7:30:82:60:0F:4F:44:D6:CE:2A:08:7E:16:F5:D3:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09621261D73082600F4F44D6CE2A087E16F5D31C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3136382e3139352e3232382e302f32322d3232203d3e20323632343137.roa
Signing time:             Tue 21 Apr 2026 21:55:40 +0000
ROA not before:           Tue 21 Apr 2026 21:50:40 +0000
ROA not after:            Tue 20 Apr 2027 21:55:40 +0000
asID:                     262417
IP address blocks:        168.195.228.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:49:c8:58:5e:2b:b7:00:3c:fd:e0:e6:8d:b0:35:2d:a4:53:af:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09621261D73082600F4F44D6CE2A087E16F5D31C
        Validity
            Not Before: Apr 21 21:50:40 2026 GMT
            Not After : Apr 20 21:55:40 2027 GMT
        Subject: CN=538150610F97CF04A09012DB9A2DEAEB05906C2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:84:3d:b4:26:44:96:71:ed:c1:dd:86:70:5d:
                    e8:d7:e1:02:75:b9:f8:2f:b5:64:0c:69:81:f6:da:
                    71:4f:6a:3b:64:95:4d:11:cb:9e:a2:48:61:39:af:
                    f8:92:2e:ea:39:35:99:96:20:df:cb:d9:1d:78:01:
                    73:a6:64:15:e2:da:f1:93:10:f8:1c:53:b6:61:80:
                    6e:59:04:90:3e:59:11:2d:47:4b:6d:9d:6c:04:e8:
                    92:41:21:17:9c:f8:3d:f4:89:a5:c8:48:ea:4c:c4:
                    b7:36:1e:90:8d:60:79:d8:27:ec:b4:9c:f8:8d:1c:
                    4d:bc:8d:45:64:75:82:bd:dc:dc:76:b7:1c:9d:3e:
                    e8:d8:91:0d:c7:cf:1f:a5:47:dc:3a:94:65:4b:db:
                    66:2c:34:5c:44:3e:a4:f7:ce:5e:0d:69:47:2b:8c:
                    1d:77:ab:f7:01:8d:15:75:d8:92:01:f9:19:59:a4:
                    e1:3b:00:17:67:ad:ca:95:66:0a:4d:9a:c5:c2:0f:
                    94:06:39:ee:11:4d:30:d8:aa:13:1c:24:c9:a5:b9:
                    fa:2e:b1:af:14:14:54:2e:09:fc:70:52:7d:a6:3f:
                    2e:a3:c2:22:bd:c5:be:66:c2:69:07:65:f5:58:af:
                    5d:5f:d0:d0:66:d0:95:24:e2:6d:e6:01:78:6d:c2:
                    b8:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:81:50:61:0F:97:CF:04:A0:90:12:DB:9A:2D:EA:EB:05:90:6C:2A
            X509v3 Authority Key Identifier:
                keyid:09:62:12:61:D7:30:82:60:0F:4F:44:D6:CE:2A:08:7E:16:F5:D3:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/09621261D73082600F4F44D6CE2A087E16F5D31C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09621261D73082600F4F44D6CE2A087E16F5D31C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3136382e3139352e3232382e302f32322d3232203d3e20323632343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:57:ef:37:92:b3:ed:73:c9:b6:5c:61:cc:e2:5e:7f:c5:5a:
         b1:53:82:e0:31:c7:83:cc:a5:3e:7a:a9:8a:f4:7e:ce:3e:bb:
         99:e8:29:bd:50:7e:c9:ac:71:f6:7b:3b:45:4f:2c:70:38:d4:
         bb:64:9d:bc:17:d1:ff:03:57:34:ae:3f:bc:d3:7d:19:48:55:
         f1:52:ad:a1:17:81:bf:b1:67:40:3b:ab:a0:4c:a5:f7:7e:28:
         43:af:98:b5:59:53:f7:bd:76:f7:4f:96:d6:6e:78:70:e5:90:
         e9:3f:1d:f7:0d:65:72:13:66:a3:52:5f:4a:22:0a:57:51:d8:
         e9:ed:f5:6d:da:72:e0:04:c8:a5:a9:c9:b0:da:be:3c:f2:73:
         a6:6c:a7:9d:ca:27:76:65:50:56:22:69:f3:d0:a9:17:04:93:
         18:67:f5:ef:df:93:70:40:86:db:51:cf:63:53:55:3d:f5:fb:
         9f:2f:02:d7:fe:82:14:60:63:b0:03:25:38:4a:f5:ce:f2:53:
         8c:e3:92:10:d4:af:13:75:07:ce:d1:89:d8:3f:fd:41:da:74:
         f7:0a:66:84:a5:c5:0f:37:02:50:fd:cb:51:67:79:bc:5c:e3:
         2b:51:32:ed:fa:08:24:83:a6:e1:41:72:65:c6:b2:21:4f:d2:
         2f:1d:01:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:29:29 2026 by rpki-client