Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/3134332e3230322e3132302e302f32322d3332203d3e20323633353433.roa
File:                     3134332e3230322e3132302e302f32322d3332203d3e20323633353433.roa (raw, json)
Hash identifier:          wVwz/3Bce58s5Hm2sPnmBSVljlklZVmFFgIc78AGdp4=
Subject key identifier:   8A:3A:21:82:E7:8E:DF:54:BF:0E:0D:DA:F7:84:DB:04:E1:08:C8:E6
Certificate issuer:       /CN=B3C0ECC43363690F72F949D611EE62DCF8942568
Certificate serial:       52CABDF38898AE37DF1263699C752BAEF10350CA
Authority key identifier: B3:C0:EC:C4:33:63:69:0F:72:F9:49:D6:11:EE:62:DC:F8:94:25:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C0ECC43363690F72F949D611EE62DCF8942568.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/3134332e3230322e3132302e302f32322d3332203d3e20323633353433.roa
Signing time:             Wed 02 Sep 2026 14:31:26 +0000
ROA not before:           Wed 02 Sep 2026 14:26:26 +0000
ROA not after:            Wed 01 Sep 2027 14:31:26 +0000
asID:                     263543
IP address blocks:        143.202.120.0/22 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ca:bd:f3:88:98:ae:37:df:12:63:69:9c:75:2b:ae:f1:03:50:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3C0ECC43363690F72F949D611EE62DCF8942568
        Validity
            Not Before: Sep  2 14:26:26 2026 GMT
            Not After : Sep  1 14:31:26 2027 GMT
        Subject: CN=8A3A2182E78EDF54BF0E0DDAF784DB04E108C8E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7e:ce:d5:17:2c:ec:d9:1b:e9:c6:f4:96:4f:
                    47:5d:32:98:b4:2d:93:03:69:2e:b7:4e:13:fd:d4:
                    70:7b:3e:3d:50:ee:42:a5:69:c9:a4:0c:4d:85:d7:
                    72:33:2d:9a:cf:e9:f4:a4:9f:fe:0c:e2:d0:80:83:
                    a2:31:dc:e2:89:2d:25:39:6c:45:51:d0:df:ef:19:
                    62:18:82:b9:4a:0e:28:50:7c:58:1c:6f:b3:0c:cf:
                    82:20:e5:66:a5:0e:49:62:f7:91:1c:34:11:ca:26:
                    02:48:a0:4e:2b:ae:e6:99:7b:9b:67:f0:13:aa:ab:
                    01:f8:6c:8b:ff:2c:ba:88:80:5f:8b:ce:5f:8f:32:
                    6a:a6:03:03:26:9c:42:c2:00:d2:98:dc:cc:85:4b:
                    97:ec:f1:5b:6c:c6:86:ef:9a:cc:91:d6:27:e7:50:
                    c5:c7:5b:9a:eb:20:14:e3:01:4e:50:e1:07:ef:7a:
                    6c:8d:b8:92:d6:26:f5:29:06:ce:56:b3:a8:39:f2:
                    f4:e6:1e:c4:9a:d6:7e:a4:f8:9e:10:78:fa:df:d0:
                    a6:c9:dc:d1:f4:a4:24:ae:78:51:77:00:39:58:ff:
                    3e:16:bd:02:8b:3f:00:ec:ef:93:41:6c:94:6e:26:
                    af:38:9f:8d:c2:6a:e4:75:78:ee:7f:be:dc:78:8c:
                    91:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:3A:21:82:E7:8E:DF:54:BF:0E:0D:DA:F7:84:DB:04:E1:08:C8:E6
            X509v3 Authority Key Identifier:
                keyid:B3:C0:EC:C4:33:63:69:0F:72:F9:49:D6:11:EE:62:DC:F8:94:25:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/B3C0ECC43363690F72F949D611EE62DCF8942568.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C0ECC43363690F72F949D611EE62DCF8942568.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/3134332e3230322e3132302e302f32322d3332203d3e20323633353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:44:62:1f:64:25:c3:27:9e:e8:28:bd:9e:d9:53:af:52:8c:
         ca:97:23:ce:b5:54:3a:de:8e:da:86:97:18:c2:08:37:3c:43:
         e8:4b:3b:b1:aa:f7:41:bc:ed:6f:e6:90:b7:13:38:7c:de:b2:
         dd:6f:73:8d:fc:00:d9:4c:db:e4:15:d8:7a:7d:51:3f:82:ba:
         88:8f:54:22:b8:e1:2f:95:39:26:34:fe:28:0b:1d:df:40:43:
         ad:8c:5b:b1:1c:0b:2e:7a:47:89:46:6b:e5:4c:6d:6b:fd:3e:
         30:3d:f9:d0:8b:1f:fa:f5:ce:38:ad:41:bc:b4:3d:a5:ba:5e:
         e7:b4:64:ec:52:8c:e9:39:f4:83:f4:3f:13:2d:58:0c:75:d7:
         e8:71:41:9e:dd:27:84:50:ec:f5:52:ab:7c:cb:35:9c:88:04:
         07:90:7e:1f:ce:90:e5:f3:c9:f7:6a:04:9a:5c:16:d1:fd:49:
         d6:4d:87:68:11:29:99:f0:9f:c6:b8:cc:2c:f6:ad:35:2b:4c:
         ea:0d:67:6d:39:56:ea:f7:2f:06:d9:54:3a:46:da:fa:37:c0:
         f6:df:13:bb:36:ea:ea:0f:1c:6b:92:ac:cf:c6:58:61:9e:fa:
         c7:47:78:9e:dd:e7:b8:35:a3:84:17:37:08:02:de:1e:f9:03:
         15:2a:ea:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----