Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3136382e39302e32382e302f32322d3234203d3e20323632343137.roa
File:                     3136382e39302e32382e302f32322d3234203d3e20323632343137.roa (raw, json)
Hash identifier:          MHhKuJTErLQ7giRvQOdudw+4AXxCLJxUbjVsL+yU0Zs=
Subject key identifier:   D2:DC:93:D3:72:95:9F:29:88:6A:E5:F0:A3:EA:4B:C8:FC:12:F9:AD
Certificate issuer:       /CN=09621261D73082600F4F44D6CE2A087E16F5D31C
Certificate serial:       740CBDDC931446FA6527DDE31E2839DDB7064A46
Authority key identifier: 09:62:12:61:D7:30:82:60:0F:4F:44:D6:CE:2A:08:7E:16:F5:D3:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09621261D73082600F4F44D6CE2A087E16F5D31C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3136382e39302e32382e302f32322d3234203d3e20323632343137.roa
Signing time:             Tue 21 Apr 2026 21:51:53 +0000
ROA not before:           Tue 21 Apr 2026 21:46:53 +0000
ROA not after:            Tue 20 Apr 2027 21:51:53 +0000
asID:                     262417
IP address blocks:        168.90.28.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:0c:bd:dc:93:14:46:fa:65:27:dd:e3:1e:28:39:dd:b7:06:4a:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09621261D73082600F4F44D6CE2A087E16F5D31C
        Validity
            Not Before: Apr 21 21:46:53 2026 GMT
            Not After : Apr 20 21:51:53 2027 GMT
        Subject: CN=D2DC93D372959F29886AE5F0A3EA4BC8FC12F9AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a1:14:78:ac:1d:a5:30:c2:e4:ad:f9:8f:d8:
                    6c:aa:21:00:cc:1c:7b:78:a0:96:0f:6f:6d:d2:64:
                    5c:37:d7:59:fb:41:b3:74:bb:7d:60:26:fc:95:d1:
                    7e:20:31:93:30:4a:e2:68:21:05:12:74:7f:bc:8c:
                    88:19:d6:f1:f4:91:94:fc:44:89:12:fd:e0:db:ae:
                    a0:2e:8e:c9:bd:ac:17:cb:7c:cf:ef:25:22:bc:94:
                    89:b3:10:4f:e1:df:9d:0e:2c:bf:ee:73:6f:d4:74:
                    2c:d9:86:91:f8:9a:48:93:a5:c8:4b:e4:1b:c8:f7:
                    e8:35:a3:05:a4:d4:4a:bd:00:36:4a:0a:50:a5:f3:
                    c9:bf:d2:9a:3a:d9:60:a0:27:6c:1f:1c:2a:64:e1:
                    f6:da:8f:fd:a9:9e:35:16:9c:2e:cb:89:ed:7d:23:
                    7f:16:63:6b:5d:45:dd:66:10:c1:29:a9:f8:c5:2c:
                    d8:1d:0d:7e:9e:7d:22:3a:c1:04:e4:78:5e:6e:13:
                    55:35:2a:5f:f9:01:2a:44:d9:e5:52:3b:28:e7:67:
                    20:ac:d7:d4:5b:76:67:1e:a2:87:0a:7c:94:ca:31:
                    f4:c5:7b:0e:a0:b5:50:5d:fe:b3:b8:3d:03:81:aa:
                    43:ee:b0:f8:b4:d0:b6:ba:37:d0:3d:65:53:53:06:
                    65:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:DC:93:D3:72:95:9F:29:88:6A:E5:F0:A3:EA:4B:C8:FC:12:F9:AD
            X509v3 Authority Key Identifier:
                keyid:09:62:12:61:D7:30:82:60:0F:4F:44:D6:CE:2A:08:7E:16:F5:D3:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/09621261D73082600F4F44D6CE2A087E16F5D31C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09621261D73082600F4F44D6CE2A087E16F5D31C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3136382e39302e32382e302f32322d3234203d3e20323632343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8e:df:37:25:b0:30:25:6c:5d:05:b0:80:d9:12:33:25:96:d8:
         57:9f:d3:35:99:a2:e5:8e:2a:f5:62:95:45:90:86:66:38:e6:
         87:6d:2e:2c:ab:2d:f6:87:96:88:a6:ed:84:dc:99:4f:80:90:
         a1:79:13:1e:77:0c:1f:27:99:23:fd:79:1f:92:cc:c0:ca:36:
         f8:69:c4:82:98:6e:74:03:2e:9c:40:50:8d:a6:5c:65:4e:de:
         15:61:07:a7:53:0f:f9:63:f6:84:19:32:ab:98:d1:da:00:de:
         27:07:2a:37:4e:ae:65:9a:61:5c:80:09:f2:02:c9:01:a2:9b:
         24:e1:11:76:29:17:56:bd:60:b8:82:e1:d4:7a:98:9b:61:34:
         2d:5a:9b:89:ec:dd:b0:49:4e:ac:dc:07:56:fc:9f:17:0f:49:
         fa:f4:1e:5a:6c:b8:17:f2:2b:f5:e5:05:08:b2:3d:ef:63:42:
         77:9a:36:8e:36:1e:4d:c2:5e:c9:7d:49:23:38:f6:96:ba:c9:
         2d:19:3e:87:9a:df:04:ba:35:5d:a7:dd:67:57:1a:62:61:d0:
         e2:47:73:43:be:40:bf:42:d4:6e:38:5a:ed:e4:51:f0:6b:a7:
         40:7d:03:f2:56:be:96:c9:b3:e4:7f:9b:92:12:86:35:22:a5:
         18:09:4e:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:49:05 2026 by rpki-client