Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/3136342e3136332e3232322e302f32342d3234203d3e20323637343535.roa
File:                     3136342e3136332e3232322e302f32342d3234203d3e20323637343535.roa (raw, json)
Hash identifier:          aPv133KDYVihAsfTYJirqxWZEPJw8NagPCzH7sKWgo8=
Subject key identifier:   B8:0B:02:BE:B0:1D:9B:61:3C:69:88:EE:3E:17:2D:6A:3E:C3:13:F9
Certificate issuer:       /CN=DF1D3ECDE0155405528EE1ECA39CE318FD143A1A
Certificate serial:       56619311C29FF745781259C6A1D16F1D1C38E7CE
Authority key identifier: DF:1D:3E:CD:E0:15:54:05:52:8E:E1:EC:A3:9C:E3:18:FD:14:3A:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF1D3ECDE0155405528EE1ECA39CE318FD143A1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/3136342e3136332e3232322e302f32342d3234203d3e20323637343535.roa
Signing time:             Tue 13 Oct 2026 19:19:49 +0000
ROA not before:           Tue 13 Oct 2026 19:14:49 +0000
ROA not after:            Tue 12 Oct 2027 19:19:49 +0000
asID:                     267455
IP address blocks:        164.163.222.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:61:93:11:c2:9f:f7:45:78:12:59:c6:a1:d1:6f:1d:1c:38:e7:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF1D3ECDE0155405528EE1ECA39CE318FD143A1A
        Validity
            Not Before: Oct 13 19:14:49 2026 GMT
            Not After : Oct 12 19:19:49 2027 GMT
        Subject: CN=B80B02BEB01D9B613C6988EE3E172D6A3EC313F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:9d:d2:ec:2b:2e:3a:e0:6d:bd:f3:03:a2:f4:
                    8b:cc:d8:7c:9f:22:41:fa:68:e7:ad:e5:7e:e9:b3:
                    54:77:16:e9:66:5e:f6:3c:82:21:b0:c0:f8:2a:e0:
                    c7:a1:48:7b:46:e7:cb:c2:e7:b6:b6:66:c2:85:18:
                    2a:58:d0:6d:c5:f0:36:d2:5b:94:24:d0:04:d5:bf:
                    95:0f:22:3a:f9:d6:8d:b9:34:24:9b:1e:a4:82:4b:
                    d7:23:bd:0e:25:4a:8c:fd:fd:ec:5a:79:f8:58:5d:
                    8a:5b:bc:b5:0f:46:77:9c:04:78:2c:0d:d6:9d:67:
                    c6:6e:d1:21:fb:f7:94:14:b0:ce:8f:1f:27:f5:fd:
                    e6:00:9f:fc:9a:81:3a:38:d8:4f:44:4f:63:3b:81:
                    6f:5c:cf:a7:73:60:2c:71:6d:4b:3a:04:d5:48:92:
                    03:ea:5d:b5:25:a0:c0:d4:37:b2:5b:a3:0a:a2:b8:
                    c1:0f:91:a5:84:1c:51:ef:ab:61:c2:b0:47:7d:0b:
                    2a:e8:9d:45:71:85:d4:7c:ad:17:84:dc:71:2c:08:
                    79:70:02:01:3e:20:30:b0:56:ac:f9:d5:fa:c1:a5:
                    e6:91:d9:ce:33:8d:bc:f3:9c:bb:1d:e1:0f:36:ed:
                    2f:5f:a2:ce:be:4d:b2:fa:64:af:c9:b1:0c:91:10:
                    63:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:0B:02:BE:B0:1D:9B:61:3C:69:88:EE:3E:17:2D:6A:3E:C3:13:F9
            X509v3 Authority Key Identifier:
                keyid:DF:1D:3E:CD:E0:15:54:05:52:8E:E1:EC:A3:9C:E3:18:FD:14:3A:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/DF1D3ECDE0155405528EE1ECA39CE318FD143A1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF1D3ECDE0155405528EE1ECA39CE318FD143A1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/3136342e3136332e3232322e302f32342d3234203d3e20323637343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:ef:b1:db:ec:65:07:3a:e0:89:95:c1:cd:82:57:11:99:93:
         ea:1b:96:e0:05:8c:4b:b1:83:c3:d8:d1:ce:f1:2e:c9:97:95:
         29:40:0e:09:04:ed:b3:cf:db:09:6c:39:a1:99:ea:3f:db:98:
         39:95:e0:94:db:8a:79:3b:78:d6:db:f0:cf:f4:1e:1d:fc:23:
         14:c2:bd:cb:ac:e4:4c:a5:d7:70:d2:f8:db:cf:a7:48:e2:fd:
         3a:76:97:b1:cd:5c:7e:75:7b:17:52:b3:e9:de:a0:e8:f6:07:
         05:0c:98:29:49:11:69:cd:17:84:ef:10:2b:95:88:71:95:74:
         49:45:74:a9:13:20:1f:79:33:68:bd:83:1b:f9:cf:e7:46:50:
         43:6a:0f:0a:e6:c9:28:14:7a:60:17:50:a8:ac:b5:fa:3e:64:
         d1:f2:c3:b5:da:6f:45:60:c3:5b:26:b6:52:2b:33:8b:32:1c:
         54:31:56:d0:50:7e:8e:4f:3d:70:c1:0b:b9:19:aa:d7:6f:96:
         37:06:48:10:87:38:65:0a:92:05:f0:4e:e8:43:80:b1:08:3f:
         9b:63:50:9e:a7:83:49:a9:6b:4f:4e:0a:3c:03:22:ad:c8:bd:
         bf:8d:0d:01:7b:66:2a:91:6e:fe:99:19:d9:da:72:96:ef:05:
         5d:1b:df:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----