Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3138362e3230392e3234342e302f32322d3234203d3e20323632343137.roa
File:                     3138362e3230392e3234342e302f32322d3234203d3e20323632343137.roa (raw, json)
Hash identifier:          tE+59CI0sOLFV/vlBJeSwRxvHTVvXBBbsMHUTblfUPk=
Subject key identifier:   2D:0A:58:75:08:FA:C6:6F:06:4C:D0:4D:65:86:0D:1D:D9:D6:39:B3
Certificate issuer:       /CN=09621261D73082600F4F44D6CE2A087E16F5D31C
Certificate serial:       25F681B939BF6DE2FC1B156415290477F3A4036D
Authority key identifier: 09:62:12:61:D7:30:82:60:0F:4F:44:D6:CE:2A:08:7E:16:F5:D3:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09621261D73082600F4F44D6CE2A087E16F5D31C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3138362e3230392e3234342e302f32322d3234203d3e20323632343137.roa
Signing time:             Tue 21 Apr 2026 21:56:20 +0000
ROA not before:           Tue 21 Apr 2026 21:51:20 +0000
ROA not after:            Tue 20 Apr 2027 21:56:20 +0000
asID:                     262417
IP address blocks:        186.209.244.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:f6:81:b9:39:bf:6d:e2:fc:1b:15:64:15:29:04:77:f3:a4:03:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09621261D73082600F4F44D6CE2A087E16F5D31C
        Validity
            Not Before: Apr 21 21:51:20 2026 GMT
            Not After : Apr 20 21:56:20 2027 GMT
        Subject: CN=2D0A587508FAC66F064CD04D65860D1DD9D639B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:36:9e:a5:b7:3a:c8:e2:43:6c:53:81:e2:4b:
                    2e:1b:3a:55:22:d2:b0:a1:94:f7:5c:73:e7:8a:01:
                    94:aa:0a:99:eb:68:b2:84:27:7c:2c:92:7c:3b:6b:
                    09:48:23:9c:70:12:a4:02:6b:73:94:47:b2:ce:fd:
                    8f:1c:0b:c5:b9:f7:7c:bf:24:25:62:63:60:7f:1f:
                    7d:28:9d:71:4a:0f:0d:5d:b9:c2:89:01:a9:d0:da:
                    94:c6:03:76:23:4b:ce:64:55:be:67:cb:2a:4a:11:
                    60:cf:f2:8e:e0:27:16:ca:dd:af:d0:89:61:bd:73:
                    64:83:d6:4c:06:08:78:a0:97:2b:ea:27:62:79:90:
                    32:df:81:29:a5:dc:93:2d:b9:df:24:f3:ab:bc:a3:
                    ad:ef:77:f5:61:d6:2d:54:d1:d3:0c:69:a3:51:89:
                    f2:aa:bf:55:87:0c:07:73:6e:d1:9c:4c:de:89:94:
                    d9:92:91:27:71:18:89:12:3d:c8:88:0e:c2:c1:93:
                    b5:0f:ab:31:85:98:d2:9d:aa:29:b3:1a:af:7e:90:
                    31:df:d3:0d:60:e6:50:0a:63:22:3c:d8:33:8b:8b:
                    10:9f:9c:da:2d:c3:aa:ad:a3:b4:bc:7b:30:e4:59:
                    c7:e1:82:78:cf:d4:47:02:f4:7f:22:a9:38:e4:d7:
                    4d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:0A:58:75:08:FA:C6:6F:06:4C:D0:4D:65:86:0D:1D:D9:D6:39:B3
            X509v3 Authority Key Identifier:
                keyid:09:62:12:61:D7:30:82:60:0F:4F:44:D6:CE:2A:08:7E:16:F5:D3:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/09621261D73082600F4F44D6CE2A087E16F5D31C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09621261D73082600F4F44D6CE2A087E16F5D31C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/3138362e3230392e3234342e302f32322d3234203d3e20323632343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.209.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:a6:4f:d1:d0:f7:b1:13:73:6a:a2:bc:e8:13:9e:d7:24:59:
         b7:03:80:d2:e4:6f:cb:fb:98:3d:33:fe:02:89:21:64:9e:46:
         6a:9a:aa:64:49:c2:b8:58:b6:ef:c4:f6:f9:09:7f:b4:0e:03:
         cf:2f:86:3b:ed:14:c1:ef:c3:7c:3e:bf:67:d3:34:bb:18:7e:
         56:61:11:07:ac:15:0f:e8:45:e4:35:73:0d:81:5f:63:bc:5a:
         62:e0:ec:86:a7:22:62:c8:7b:b2:d7:2c:4b:ce:0f:59:bb:9a:
         5f:78:04:cb:24:84:79:9a:ee:bc:cb:20:8f:2e:82:ad:ca:b4:
         cc:1d:01:c9:a2:ef:39:b2:cd:55:3c:22:a2:19:83:18:4a:fd:
         46:a5:69:5f:76:6e:f7:05:e3:56:bb:9d:5f:23:5c:64:dc:1b:
         78:a7:5a:6a:22:a7:3c:f1:4b:84:16:d9:c0:f6:78:94:be:03:
         bd:1b:19:ce:79:9d:59:1c:75:ab:96:29:5b:b6:61:d1:ad:9c:
         38:40:e9:b0:3e:69:90:9f:47:23:a5:01:23:e2:bd:27:46:a1:
         ec:16:7c:13:e9:81:91:d0:4a:2c:29:30:3f:ed:04:43:22:89:
         ec:ba:ac:fc:73:9d:6c:c1:aa:0c:cb:f4:21:8d:c2:31:14:18:
         14:06:40:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:49:09 2026 by rpki-client