Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6cLarKxNwfvpJfU1uEsYuFBuumgoQQe81LJVW31xKea8/2/3138362e36352e39352e302f32342d3234203d3e20323730363634.roa
File:                     3138362e36352e39352e302f32342d3234203d3e20323730363634.roa (raw, json)
Hash identifier:          VJoYywPTWWXZiX4FE5yglEWAzNRB59X0oieS26P6NFA=
Subject key identifier:   92:F8:DF:3F:85:C0:B2:81:54:07:D6:96:87:C2:40:20:44:4B:48:3F
Certificate issuer:       /CN=DBCF56AB055BE9E72AC73599B36098BD418CD9DF
Certificate serial:       179DE44C4BB79FFC8BB9EED74FBE6A3EE93EBEAA
Authority key identifier: DB:CF:56:AB:05:5B:E9:E7:2A:C7:35:99:B3:60:98:BD:41:8C:D9:DF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBCF56AB055BE9E72AC73599B36098BD418CD9DF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6cLarKxNwfvpJfU1uEsYuFBuumgoQQe81LJVW31xKea8/2/3138362e36352e39352e302f32342d3234203d3e20323730363634.roa
Signing time:             Wed 27 Aug 2025 16:20:22 +0000
ROA not before:           Wed 27 Aug 2025 16:15:22 +0000
ROA not after:            Wed 26 Aug 2026 16:20:22 +0000
asID:                     270664
IP address blocks:        186.65.95.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:9d:e4:4c:4b:b7:9f:fc:8b:b9:ee:d7:4f:be:6a:3e:e9:3e:be:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBCF56AB055BE9E72AC73599B36098BD418CD9DF
        Validity
            Not Before: Aug 27 16:15:22 2025 GMT
            Not After : Aug 26 16:20:22 2026 GMT
        Subject: CN=92F8DF3F85C0B2815407D69687C24020444B483F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a3:c1:29:92:9a:e1:06:d3:51:7e:d6:a3:40:
                    bc:24:5d:fe:95:6d:32:fd:d7:88:49:54:8c:f1:16:
                    8a:21:2c:f7:5e:ef:43:07:68:e1:2d:5e:bd:d5:53:
                    d3:ff:c4:02:f6:37:36:61:6b:1d:4e:5e:46:13:7c:
                    dc:2f:04:5e:eb:cf:ab:4b:50:9d:c6:8c:d6:3c:63:
                    87:c8:21:de:aa:c2:db:38:2a:b3:90:12:35:a9:41:
                    16:be:02:e9:a3:80:72:d7:e4:c9:69:5b:cd:6e:bf:
                    63:47:d6:ee:15:ed:1f:eb:b3:07:68:2c:14:d6:55:
                    68:26:33:33:42:ec:d0:f2:e7:46:57:4e:37:7e:1e:
                    0a:e5:c3:64:ba:89:b4:23:8d:a3:f7:fd:32:9f:e9:
                    47:a0:6d:fa:3e:0c:33:4b:0a:f8:3e:8c:e2:0c:16:
                    0c:00:50:de:eb:3c:ad:e5:8a:7d:35:c9:44:d4:95:
                    d6:46:95:d7:b8:03:8f:45:ea:40:a2:52:85:0c:9a:
                    f1:a4:7b:dd:bc:03:ae:4d:54:84:66:b8:38:5c:84:
                    ca:cf:68:6d:3d:bb:5e:64:6d:38:71:0b:4e:e3:bf:
                    31:18:a3:1f:01:2d:44:a7:8c:d9:f5:01:b2:bf:ef:
                    c1:e8:37:8f:bc:bc:7d:ee:27:1f:8b:33:82:84:8c:
                    25:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F8:DF:3F:85:C0:B2:81:54:07:D6:96:87:C2:40:20:44:4B:48:3F
            X509v3 Authority Key Identifier:
                keyid:DB:CF:56:AB:05:5B:E9:E7:2A:C7:35:99:B3:60:98:BD:41:8C:D9:DF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6cLarKxNwfvpJfU1uEsYuFBuumgoQQe81LJVW31xKea8/2/DBCF56AB055BE9E72AC73599B36098BD418CD9DF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DBCF56AB055BE9E72AC73599B36098BD418CD9DF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6cLarKxNwfvpJfU1uEsYuFBuumgoQQe81LJVW31xKea8/2/3138362e36352e39352e302f32342d3234203d3e20323730363634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.65.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:9b:8d:ac:2d:69:16:2f:75:c2:fd:1f:4b:88:c1:51:b2:c8:
         53:49:83:f5:ef:17:78:95:c6:fb:78:6f:85:89:7a:e3:a2:2b:
         97:80:22:42:6c:1f:a4:00:ab:11:e1:58:17:78:13:d8:14:6d:
         ab:fb:05:e7:c5:f6:41:91:53:1a:f6:50:42:31:5d:87:06:40:
         c2:b2:40:74:84:38:50:01:ee:2e:43:7f:e9:d2:44:44:51:94:
         45:8b:c0:ad:c9:f2:15:39:47:2d:9b:c4:d4:8d:52:4d:93:be:
         7f:46:a5:73:20:5a:e4:a4:b8:2f:bf:b3:33:e0:77:17:b2:5f:
         d4:1c:8c:85:8d:be:49:bb:67:68:2d:a1:12:00:fc:dc:a1:72:
         08:22:9e:5b:04:47:44:2c:02:bc:46:22:a8:57:36:18:82:2d:
         66:55:09:93:0f:e3:ad:e7:c9:7b:58:db:04:11:63:f0:70:74:
         0c:a6:07:ff:bb:20:a5:12:16:f0:1e:94:29:66:dd:9b:46:63:
         2e:c2:ce:8a:ba:e2:93:bd:ef:c2:f2:81:02:fc:d9:fd:e0:68:
         08:1e:1d:ff:2d:f1:62:27:45:54:39:9a:b5:c7:68:51:06:dc:
         df:10:b9:46:6b:0e:11:41:2b:aa:44:45:2d:e8:df:b8:56:11:
         e9:c2:fe:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 21:42:43 2025 by rpki-client