Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137372e3230302e3132382e302f32322d3234203d3e20323632343137.roa
File:                     3137372e3230302e3132382e302f32322d3234203d3e20323632343137.roa (raw, json)
Hash identifier:          PqTvr9Gppw96g+m9wwrQH8VG5dMfQZh6ZoS1FdttzZI=
Subject key identifier:   14:7F:6A:F0:71:BE:82:9F:B6:A9:96:3B:58:E2:29:39:30:42:E3:D2
Certificate issuer:       /CN=09621261D73082600F4F44D6CE2A087E16F5D31C
Certificate serial:       4679E671F51234374D2E15330868BC1BFAF14C5D
Authority key identifier: 09:62:12:61:D7:30:82:60:0F:4F:44:D6:CE:2A:08:7E:16:F5:D3:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09621261D73082600F4F44D6CE2A087E16F5D31C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137372e3230302e3132382e302f32322d3234203d3e20323632343137.roa
Signing time:             Tue 21 Apr 2026 21:53:05 +0000
ROA not before:           Tue 21 Apr 2026 21:48:05 +0000
ROA not after:            Tue 20 Apr 2027 21:53:05 +0000
asID:                     262417
IP address blocks:        177.200.128.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:79:e6:71:f5:12:34:37:4d:2e:15:33:08:68:bc:1b:fa:f1:4c:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09621261D73082600F4F44D6CE2A087E16F5D31C
        Validity
            Not Before: Apr 21 21:48:05 2026 GMT
            Not After : Apr 20 21:53:05 2027 GMT
        Subject: CN=147F6AF071BE829FB6A9963B58E229393042E3D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:40:12:51:ba:b2:1f:48:19:73:c0:4a:8c:36:
                    ba:45:9a:9a:a3:c7:47:36:d8:b8:b3:ec:f5:b5:19:
                    a5:e3:ee:b5:54:7c:98:be:85:a8:98:ca:2e:f4:91:
                    03:fc:7e:7a:60:95:e0:9f:74:00:9c:d4:26:8b:8e:
                    2f:86:c4:e2:a4:e8:ef:c6:67:62:0c:31:db:36:3b:
                    99:f0:05:6f:13:5c:7b:1f:6a:6e:30:5d:68:cf:23:
                    23:1a:43:29:49:f8:73:46:8e:d5:59:04:11:ee:56:
                    0d:d4:8e:10:04:d6:17:c4:2c:09:55:b7:a1:43:1f:
                    9c:bf:8d:a5:a4:13:9e:03:a1:b9:4d:d6:7a:ce:eb:
                    c0:b5:43:e7:8d:b0:64:cb:64:5a:4c:2b:9a:ab:36:
                    19:30:c5:e1:a4:e2:cf:de:ec:61:ff:ea:7d:23:44:
                    33:88:7b:09:73:09:2c:42:70:0d:69:69:63:2a:28:
                    f2:95:dc:cf:39:fa:32:e4:83:c2:e1:1a:89:e2:e0:
                    f5:9b:f0:87:95:09:cd:e5:6d:15:3d:5b:35:42:0a:
                    67:3a:a3:4d:6e:a9:13:ac:37:da:0d:04:a4:8d:13:
                    93:fa:c8:09:21:1e:68:fa:bc:ef:ca:f9:41:fd:b3:
                    d1:4a:36:87:e7:ae:ea:c0:12:01:8e:ae:c6:08:f5:
                    f8:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:7F:6A:F0:71:BE:82:9F:B6:A9:96:3B:58:E2:29:39:30:42:E3:D2
            X509v3 Authority Key Identifier:
                keyid:09:62:12:61:D7:30:82:60:0F:4F:44:D6:CE:2A:08:7E:16:F5:D3:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/09621261D73082600F4F44D6CE2A087E16F5D31C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09621261D73082600F4F44D6CE2A087E16F5D31C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137372e3230302e3132382e302f32322d3234203d3e20323632343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.200.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         44:cd:38:d2:8a:2e:a3:61:c7:ea:0a:57:80:a0:55:a3:d6:a1:
         65:e4:e9:f1:93:92:8a:8a:3d:ee:60:97:70:93:44:fb:98:5f:
         12:e7:d5:5c:c3:95:96:5c:6f:15:b7:44:18:83:99:06:8e:83:
         0a:d9:b3:10:c1:1f:7a:59:3e:29:c8:bb:7e:05:ac:4b:fd:4d:
         29:1e:fe:b5:ec:48:bc:5e:53:a6:df:f4:d7:6b:29:a3:70:b0:
         8a:07:13:66:c5:0d:3a:c6:0d:e9:40:2d:23:62:e8:19:d6:de:
         0d:71:c0:0b:46:5c:42:5c:31:43:5f:27:5e:1e:27:55:a0:d3:
         e7:41:4e:dd:74:1a:d1:23:f3:8f:10:8e:fa:9d:0b:b0:45:d6:
         60:6d:76:35:de:ee:4d:c6:50:80:c7:07:2d:7a:04:24:fa:d6:
         8b:4d:e4:9f:80:2f:a4:21:6a:fb:77:8c:9c:31:b7:42:48:98:
         3a:11:25:4b:85:76:aa:b0:f0:c2:6b:d3:40:a4:5e:49:9e:55:
         10:20:0c:98:33:e8:85:fb:69:2c:ad:a8:d6:6c:d2:8c:42:32:
         20:08:9c:3c:50:ac:dc:ec:00:c7:f0:dd:8e:96:b4:a1:1d:84:
         31:bb:88:3c:0f:62:f7:bb:f9:80:bd:76:83:07:7c:2a:af:c0:
         6e:6a:21:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:56:39 2026 by rpki-client