Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137392e34332e342e302f32322d3234203d3e20323632343137.roa
File:                     3137392e34332e342e302f32322d3234203d3e20323632343137.roa (raw, json)
Hash identifier:          6BlSD+vy/+QpEW1b8KwfsBwt5TdqifiEofiHRjWlshs=
Subject key identifier:   A1:D7:EE:01:FF:9E:DD:69:FD:3A:97:F5:C9:66:09:A2:AF:00:E7:CF
Certificate issuer:       /CN=09621261D73082600F4F44D6CE2A087E16F5D31C
Certificate serial:       08A27F43DF7C235706C470DAD6FB4AC13ACF8BC0
Authority key identifier: 09:62:12:61:D7:30:82:60:0F:4F:44:D6:CE:2A:08:7E:16:F5:D3:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09621261D73082600F4F44D6CE2A087E16F5D31C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137392e34332e342e302f32322d3234203d3e20323632343137.roa
Signing time:             Tue 21 Apr 2026 21:51:06 +0000
ROA not before:           Tue 21 Apr 2026 21:46:06 +0000
ROA not after:            Tue 20 Apr 2027 21:51:06 +0000
asID:                     262417
IP address blocks:        179.43.4.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:a2:7f:43:df:7c:23:57:06:c4:70:da:d6:fb:4a:c1:3a:cf:8b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09621261D73082600F4F44D6CE2A087E16F5D31C
        Validity
            Not Before: Apr 21 21:46:06 2026 GMT
            Not After : Apr 20 21:51:06 2027 GMT
        Subject: CN=A1D7EE01FF9EDD69FD3A97F5C96609A2AF00E7CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:12:a2:3d:c8:42:75:e0:d8:a6:df:57:44:33:
                    2d:79:ed:74:77:f8:a8:53:d9:20:46:3f:26:fa:17:
                    5e:36:6f:97:e1:dc:fa:46:c7:55:1c:7a:f1:a9:88:
                    4a:36:18:6d:ba:ee:e8:b5:31:d4:35:28:e5:d4:42:
                    1b:98:ce:11:31:cd:82:8a:2d:96:c3:09:a8:bc:4a:
                    92:5e:0b:79:5b:fe:ea:55:d4:24:33:db:83:d7:d3:
                    95:ff:b9:4a:d4:4b:6c:32:47:ef:cc:99:3d:32:e5:
                    50:ae:bc:c4:bf:25:0f:e3:fe:8c:fb:b2:93:73:2e:
                    f3:32:a1:7a:89:60:e2:28:af:8a:19:05:c0:7d:7d:
                    fb:fc:e7:f9:bb:36:04:5b:68:50:b9:e2:47:b2:1e:
                    0d:e2:e3:77:dd:34:56:dc:2a:a1:a3:09:7b:41:e4:
                    fc:9d:b1:c3:d1:48:8c:df:fe:f8:1b:a3:dd:48:23:
                    78:de:d3:22:47:e5:a8:8a:27:79:b0:6a:88:e6:39:
                    85:1f:6f:3c:17:23:b0:8f:af:4f:80:23:34:d1:18:
                    f7:ad:7f:23:d0:8c:a6:d8:8b:6c:2b:10:e1:46:65:
                    63:5f:9f:66:e1:4f:98:b7:ee:d7:0d:43:73:c6:f3:
                    b0:28:69:08:20:e9:5a:d1:1c:bc:c5:30:5a:52:f2:
                    f4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:D7:EE:01:FF:9E:DD:69:FD:3A:97:F5:C9:66:09:A2:AF:00:E7:CF
            X509v3 Authority Key Identifier:
                keyid:09:62:12:61:D7:30:82:60:0F:4F:44:D6:CE:2A:08:7E:16:F5:D3:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/09621261D73082600F4F44D6CE2A087E16F5D31C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09621261D73082600F4F44D6CE2A087E16F5D31C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3137392e34332e342e302f32322d3234203d3e20323632343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         78:0a:3b:3e:61:d8:39:a4:3c:e4:ff:8f:15:75:32:4f:28:49:
         5c:ff:1b:72:f8:89:94:7c:fb:db:96:da:01:59:56:cc:3c:23:
         61:18:84:7f:d9:7a:48:8e:86:e2:0d:a2:77:81:cc:25:c1:3f:
         cd:f0:71:2d:bb:84:7f:0f:0b:15:a1:ce:3a:fd:06:6b:7d:ea:
         da:19:5b:d6:76:3b:ea:8f:90:20:09:b1:bc:24:05:18:b2:1b:
         07:8a:51:a8:ea:be:cd:4d:42:2b:9c:0b:57:f9:c5:a7:33:6b:
         a0:e2:65:fe:32:f6:03:fa:58:14:01:52:b1:db:fe:c0:96:c8:
         6f:72:81:d0:ec:39:0e:8c:03:fd:5a:6c:c4:38:35:f8:18:ae:
         b1:80:c8:58:1a:52:54:79:1a:29:04:71:fb:08:95:8c:f0:ff:
         93:ee:90:e3:c8:8c:2f:29:45:cd:80:f8:35:af:30:c5:91:98:
         14:ad:b2:78:5e:3a:fb:3b:0d:a1:2b:01:1b:69:b9:1f:8f:0b:
         98:a5:91:5a:29:44:e3:fd:2b:9f:7d:80:d5:21:64:1e:ff:e3:
         f4:33:1f:4e:8a:71:55:42:99:7a:9a:b1:f8:88:8d:5f:06:b4:
         2e:be:3b:ee:c4:24:c6:11:28:44:9e:85:8b:cb:90:4a:18:c9:
         5f:5e:71:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:48:22 2026 by rpki-client