Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/3136342e3136332e3232302e302f32342d3234203d3e20323637343535.roa
File:                     3136342e3136332e3232302e302f32342d3234203d3e20323637343535.roa (raw, json)
Hash identifier:          FvhxkRcnnaZkTKnZzYJaLc5cF3BSpfg0MRG2pmgu6hI=
Subject key identifier:   CC:87:C8:7D:25:69:BA:2C:66:7E:3C:EF:E2:C1:30:A0:10:C4:47:56
Certificate issuer:       /CN=DF1D3ECDE0155405528EE1ECA39CE318FD143A1A
Certificate serial:       6D0768C2375C531043EDC8C3F2B79816A69DFE39
Authority key identifier: DF:1D:3E:CD:E0:15:54:05:52:8E:E1:EC:A3:9C:E3:18:FD:14:3A:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF1D3ECDE0155405528EE1ECA39CE318FD143A1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/3136342e3136332e3232302e302f32342d3234203d3e20323637343535.roa
Signing time:             Tue 13 Oct 2026 19:19:48 +0000
ROA not before:           Tue 13 Oct 2026 19:14:48 +0000
ROA not after:            Tue 12 Oct 2027 19:19:48 +0000
asID:                     267455
IP address blocks:        164.163.220.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:07:68:c2:37:5c:53:10:43:ed:c8:c3:f2:b7:98:16:a6:9d:fe:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF1D3ECDE0155405528EE1ECA39CE318FD143A1A
        Validity
            Not Before: Oct 13 19:14:48 2026 GMT
            Not After : Oct 12 19:19:48 2027 GMT
        Subject: CN=CC87C87D2569BA2C667E3CEFE2C130A010C44756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:30:b2:9d:e4:13:f0:05:a4:c0:b7:d0:65:69:
                    ea:ef:f6:a6:59:78:03:e5:94:59:9f:c6:ca:a7:30:
                    13:ed:12:99:17:96:67:fe:08:7e:4e:ee:7a:2d:18:
                    6d:46:0b:d8:0d:35:71:1f:81:3c:2a:89:66:19:df:
                    9b:85:42:1a:79:cb:30:5b:de:a7:e8:10:fe:64:bb:
                    d7:00:2a:05:a4:4b:c6:88:46:87:06:0f:7a:5e:d2:
                    5f:99:8e:88:fa:f7:0a:d1:a6:c3:f5:d5:f1:27:07:
                    e2:8f:ec:98:08:30:bb:61:2d:62:b8:95:c9:cd:b0:
                    3e:0c:53:65:74:bb:9c:71:36:73:db:79:90:05:31:
                    dc:f4:c5:b6:0c:10:e2:40:50:a6:fb:bc:82:b5:68:
                    e4:71:92:b9:da:5c:70:70:15:fe:4c:d3:a5:05:85:
                    81:5c:8b:18:86:c8:ca:4e:3e:b3:d5:73:ba:24:d4:
                    89:f0:e8:c1:d7:83:09:30:68:a5:1b:f8:28:92:87:
                    ae:05:75:72:7a:91:6f:d3:2e:32:a4:47:af:f3:d2:
                    69:3a:56:3c:3a:e5:1f:23:e4:5d:9b:ec:4e:4d:ef:
                    2d:1d:9b:af:53:42:c8:fa:4c:31:3e:5a:b1:f5:6f:
                    3a:27:b8:61:de:e6:ae:47:74:17:87:4d:1b:e6:9b:
                    d7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:87:C8:7D:25:69:BA:2C:66:7E:3C:EF:E2:C1:30:A0:10:C4:47:56
            X509v3 Authority Key Identifier:
                keyid:DF:1D:3E:CD:E0:15:54:05:52:8E:E1:EC:A3:9C:E3:18:FD:14:3A:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/DF1D3ECDE0155405528EE1ECA39CE318FD143A1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF1D3ECDE0155405528EE1ECA39CE318FD143A1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/3136342e3136332e3232302e302f32342d3234203d3e20323637343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b5:62:2c:82:92:89:60:0b:84:75:db:71:e3:bc:98:cf:00:04:
         5e:74:a9:9d:68:c5:a8:fe:43:43:46:1d:15:0f:fe:12:06:f9:
         89:67:f4:9f:52:5b:73:cc:61:93:1f:c4:22:97:2e:1b:9c:50:
         8d:aa:df:36:8a:f1:43:64:c0:0b:a9:7a:d9:af:b3:53:e9:32:
         83:ae:9b:58:2d:b9:ad:51:83:ff:ea:52:5c:f8:7c:40:92:f8:
         42:cc:10:e8:a1:f5:b3:19:d3:d1:f5:53:0b:29:11:59:70:1b:
         45:94:12:94:af:b7:01:45:ab:ef:4a:8c:c4:55:d7:30:66:85:
         18:ff:57:2b:5c:c1:0d:84:68:de:1f:80:3e:82:5e:ac:9e:35:
         1d:87:c5:31:a0:69:9e:f3:f7:17:2c:98:04:5d:26:b7:98:7d:
         df:a0:6a:9f:3b:ae:a4:b0:70:02:04:bf:33:0c:2b:92:62:c1:
         d8:9d:84:3e:eb:b0:6e:c0:32:15:d8:b9:85:54:04:c9:52:bf:
         d0:c9:0f:22:66:64:87:06:54:4f:82:c8:7e:b6:a8:4d:76:54:
         57:fa:ac:aa:0e:0e:05:81:4f:54:0c:35:7a:ec:35:c3:cb:51:
         0b:76:aa:12:a4:d7:01:d5:bf:86:7c:f0:a7:9f:17:c4:28:3b:
         ca:ca:b2:8a
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUbQdowjdcUxBD7cjD8reYFqad/jkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREYxRDNFQ0RFMDE1NTQwNTUyOEVFMUVDQTM5Q0UzMThG
RDE0M0ExQTAeFw0yNjEwMTMxOTE0NDhaFw0yNzEwMTIxOTE5NDhaMDMxMTAvBgNV
BAMTKENDODdDODdEMjU2OUJBMkM2NjdFM0NFRkUyQzEzMEEwMTBDNDQ3NTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKMLKd5BPwBaTAt9Blaerv9qZZ
eAPllFmfxsqnMBPtEpkXlmf+CH5O7notGG1GC9gNNXEfgTwqiWYZ35uFQhp5yzBb
3qfoEP5ku9cAKgWkS8aIRocGD3pe0l+Zjoj69wrRpsP11fEnB+KP7JgIMLthLWK4
lcnNsD4MU2V0u5xxNnPbeZAFMdz0xbYMEOJAUKb7vIK1aORxkrnaXHBwFf5M06UF
hYFcixiGyMpOPrPVc7ok1Inw6MHXgwkwaKUb+CiSh64FdXJ6kW/TLjKkR6/z0mk6
Vjw65R8j5F2b7E5N7y0dm69TQsj6TDE+WrH1bzonuGHe5q5HdBeHTRvmm9fTAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUzIfIfSVpuixmfjzv4sEwoBDER1YwHwYDVR0j
BBgwFoAU3x0+zeAVVAVSjuHso5zjGP0UOhowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNGVycUtVY0tnOUp2eE1zcFVndTlKamRrZkVyTmhwcTFLRE5nNjhQSnRI
ZzMvMC9ERjFEM0VDREUwMTU1NDA1NTI4RUUxRUNBMzlDRTMxOEZEMTQzQTFBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0RGMUQzRUNERTAxNTU0MDU1
MjhFRTFFQ0EzOUNFMzE4RkQxNDNBMUEuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRlcnFLVWNLZzlKdnhNc3BVZ3U5Smpka2ZFck5ocHExS0ROZzY4UEp0SGczLzAv
MzEzNjM0MmUzMTM2MzMyZTMyMzIzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzNzM0MzUzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKSj3DANBgkqhkiG9w0BAQsFAAOCAQEAtWIs
gpKJYAuEddtx47yYzwAEXnSpnWjFqP5DQ0YdFQ/+Egb5iWf0n1Jbc8xhkx/EIpcu
G5xQjarfNorxQ2TAC6l62a+zU+kyg66bWC25rVGD/+pSXPh8QJL4QswQ6KH1sxnT
0fVTCykRWXAbRZQSlK+3AUWr70qMxFXXMGaFGP9XK1zBDYRo3h+APoJerJ41HYfF
MaBpnvP3FyyYBF0mt5h936BqnzuupLBwAgS/MwwrkmLB2J2EPuuwbsAyFdi5hVQE
yVK/0MkPImZkhwZUT4LIfraoTXZUV/qsqg4OBYFPVAw1euw1w8tRC3aqEqTXAdW/
hnzwp58XxCg7ysqyig==
-----END CERTIFICATE-----