Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/3138392e3132362e38372e302f32342d3234203d3e20323730353739.roa
File:                     3138392e3132362e38372e302f32342d3234203d3e20323730353739.roa (raw, json)
Hash identifier:          SKEOcERgDcrka0avT2KbrwJAtydqwWPG6RJ9tOcr3fk=
Subject key identifier:   46:C1:52:10:E9:BB:73:2F:C0:78:5A:9F:76:7A:45:74:6C:94:C6:68
Certificate issuer:       /CN=BF3B3B3C1A369FD0DDF2CE2059CBE4C98CB46092
Certificate serial:       1B700B3A260836653D1B2BA7884CD1EEBAF32A71
Authority key identifier: BF:3B:3B:3C:1A:36:9F:D0:DD:F2:CE:20:59:CB:E4:C9:8C:B4:60:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF3B3B3C1A369FD0DDF2CE2059CBE4C98CB46092.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/3138392e3132362e38372e302f32342d3234203d3e20323730353739.roa
Signing time:             Wed 01 Oct 2025 22:53:53 +0000
ROA not before:           Wed 01 Oct 2025 22:48:53 +0000
ROA not after:            Wed 30 Sep 2026 22:53:53 +0000
asID:                     270579
IP address blocks:        189.126.87.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:70:0b:3a:26:08:36:65:3d:1b:2b:a7:88:4c:d1:ee:ba:f3:2a:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF3B3B3C1A369FD0DDF2CE2059CBE4C98CB46092
        Validity
            Not Before: Oct  1 22:48:53 2025 GMT
            Not After : Sep 30 22:53:53 2026 GMT
        Subject: CN=46C15210E9BB732FC0785A9F767A45746C94C668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:ef:ef:e1:95:01:fe:36:1a:2d:f6:65:c8:cd:
                    82:c7:41:2d:10:48:39:38:cb:dc:c3:56:25:86:1d:
                    82:f7:e2:97:fa:06:35:1b:78:be:dd:9c:0d:ef:c3:
                    29:06:1d:00:8e:0f:38:f5:b1:41:a4:9a:f6:63:cf:
                    1e:be:73:1e:bb:c9:ec:1d:79:ac:ed:b0:d5:cd:17:
                    69:33:2d:66:93:b9:aa:98:5b:11:fe:fe:1e:58:e7:
                    98:f3:f0:81:3f:c8:aa:5d:06:d5:2e:a1:5d:94:c0:
                    33:ae:d4:ba:1b:6f:31:89:3f:5b:20:56:b1:f2:d5:
                    ae:dc:db:e7:60:64:d3:15:4b:0b:57:e6:ef:9a:02:
                    ca:24:c8:0e:92:f3:5e:45:b7:bd:81:b4:ab:76:dd:
                    9a:53:77:3f:be:21:62:cb:b5:c9:77:ab:b6:89:b2:
                    27:bf:06:1e:ea:b8:25:8f:9c:ca:4b:26:38:46:37:
                    8c:8f:18:33:ad:bb:4b:9d:d3:4c:d0:21:9f:61:29:
                    34:ee:63:e7:37:86:0c:bd:91:3b:66:4c:fe:c9:17:
                    31:1f:d2:ae:c9:6d:cb:99:5b:74:43:3b:d1:9a:06:
                    e2:bf:c1:02:6d:c5:84:d7:ba:e0:e4:8d:f8:a8:ac:
                    61:6f:04:8a:e4:fa:01:1e:3a:b6:ca:ca:3e:93:02:
                    eb:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:C1:52:10:E9:BB:73:2F:C0:78:5A:9F:76:7A:45:74:6C:94:C6:68
            X509v3 Authority Key Identifier:
                keyid:BF:3B:3B:3C:1A:36:9F:D0:DD:F2:CE:20:59:CB:E4:C9:8C:B4:60:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/BF3B3B3C1A369FD0DDF2CE2059CBE4C98CB46092.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF3B3B3C1A369FD0DDF2CE2059CBE4C98CB46092.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KyhStDUELmgmeEdfL97nv3dikuQxfC8pMAM5v4kVfVA/0/3138392e3132362e38372e302f32342d3234203d3e20323730353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:e6:e0:78:44:78:6f:ee:e0:31:fd:75:13:2c:06:50:b7:0a:
         8a:03:57:12:cf:63:4f:76:0e:e0:01:cf:83:c6:f3:66:e3:4e:
         ce:b8:25:92:99:58:47:45:04:77:9e:99:ce:5c:60:0a:47:df:
         3e:bb:3d:18:73:9f:9e:6d:e2:64:5d:de:6e:ce:f9:37:bc:a6:
         8d:73:c2:6e:6c:63:8b:36:1a:d3:c6:5f:a1:78:92:82:dd:14:
         4c:74:4c:5b:3d:91:be:93:9e:5b:4b:09:e4:20:60:96:36:c2:
         68:48:ad:87:61:e2:aa:03:cb:9d:96:b2:9a:c2:af:4a:0b:40:
         9d:bc:71:28:7f:d7:63:0d:3c:5f:13:20:d9:f4:ef:de:10:a3:
         76:85:4e:a8:3c:b0:7a:08:29:0f:55:d5:ed:07:1d:a6:63:46:
         d4:46:d5:88:a7:2d:b2:d3:7d:aa:9a:0d:9d:1e:94:46:ca:c5:
         37:5a:44:74:09:94:e3:5b:47:43:d3:5f:71:cf:d8:49:8e:c1:
         c9:9d:8e:62:62:f0:98:2c:99:6c:2b:69:a5:b5:d7:3f:a0:39:
         bb:84:f9:1c:44:23:70:9e:b0:7f:14:e3:d8:0c:0d:d2:18:7c:
         d3:e2:e6:98:a3:8e:c3:21:63:11:7d:75:17:4a:a1:31:2d:03:
         ca:c2:4a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 05:10:03 2025 by rpki-client