Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7NtsbuNVLC34VsJihSmvZ6QSpYJ2xF1RiCzAdzWQtvr6/0/3138372e31372e31362e302f32302d3232203d3e203238323835.roa
File:                     3138372e31372e31362e302f32302d3232203d3e203238323835.roa (raw, json)
Hash identifier:          CTb7uYoAYlBUa5qCvQrSCFsNnTrrXLog7fQg98f+tkg=
Subject key identifier:   9F:23:E6:5F:EC:47:A6:79:7D:1D:D0:23:5C:D6:5E:83:69:D8:CA:FE
Certificate issuer:       /CN=18304E37E7B30DCE85765ECFC90E798EBF358498
Certificate serial:       1E0BF823A92291663C262C049C0F3DF8B7403448
Authority key identifier: 18:30:4E:37:E7:B3:0D:CE:85:76:5E:CF:C9:0E:79:8E:BF:35:84:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18304E37E7B30DCE85765ECFC90E798EBF358498.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NtsbuNVLC34VsJihSmvZ6QSpYJ2xF1RiCzAdzWQtvr6/0/3138372e31372e31362e302f32302d3232203d3e203238323835.roa
Signing time:             Fri 04 Sep 2026 11:42:11 +0000
ROA not before:           Fri 04 Sep 2026 11:37:11 +0000
ROA not after:            Fri 03 Sep 2027 11:42:11 +0000
asID:                     28285
IP address blocks:        187.17.16.0/20 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:0b:f8:23:a9:22:91:66:3c:26:2c:04:9c:0f:3d:f8:b7:40:34:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18304E37E7B30DCE85765ECFC90E798EBF358498
        Validity
            Not Before: Sep  4 11:37:11 2026 GMT
            Not After : Sep  3 11:42:11 2027 GMT
        Subject: CN=9F23E65FEC47A6797D1DD0235CD65E8369D8CAFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9c:e2:c3:0a:e1:80:1f:3b:66:b6:49:69:2a:
                    da:3d:b2:20:7b:ea:ce:5a:72:dd:0c:87:f0:1b:91:
                    d4:5d:ee:65:20:e4:7a:02:17:27:ca:3e:19:c7:27:
                    b6:68:c6:b5:f1:9a:78:f8:15:27:81:e3:c7:b0:f5:
                    25:cf:52:30:6e:df:e0:fc:11:4c:67:f9:95:3b:86:
                    72:5e:40:db:e1:dd:48:7e:cc:e4:fa:d0:41:e5:af:
                    63:2f:0f:5f:ce:f0:09:bd:b6:c9:80:36:4d:4c:b5:
                    b8:49:59:3a:e5:c0:8f:71:0a:3e:19:9f:67:08:6f:
                    38:e5:5c:7e:a8:1a:89:a8:1b:6f:56:ae:bb:58:00:
                    02:e5:4e:71:a6:80:07:b0:2c:ba:99:1a:9b:ed:b9:
                    e4:59:6c:9f:da:6d:65:c8:a5:f2:c5:67:6a:c9:32:
                    f1:33:99:06:ce:bd:fc:0c:4d:aa:eb:50:19:73:7c:
                    28:1e:20:54:2b:34:8c:e8:b1:6b:ef:b7:4b:3d:82:
                    46:6a:c1:fa:c2:bc:21:4a:e1:93:ce:e9:e5:4c:b7:
                    83:50:66:c7:60:88:b2:14:ea:4b:03:33:c8:22:a5:
                    af:f6:55:85:9c:78:a9:8f:7b:a5:82:2c:3f:b5:ff:
                    ed:b8:e9:b2:59:36:a2:00:f2:3a:4a:f7:6b:60:a7:
                    99:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:23:E6:5F:EC:47:A6:79:7D:1D:D0:23:5C:D6:5E:83:69:D8:CA:FE
            X509v3 Authority Key Identifier:
                keyid:18:30:4E:37:E7:B3:0D:CE:85:76:5E:CF:C9:0E:79:8E:BF:35:84:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NtsbuNVLC34VsJihSmvZ6QSpYJ2xF1RiCzAdzWQtvr6/0/18304E37E7B30DCE85765ECFC90E798EBF358498.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18304E37E7B30DCE85765ECFC90E798EBF358498.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NtsbuNVLC34VsJihSmvZ6QSpYJ2xF1RiCzAdzWQtvr6/0/3138372e31372e31362e302f32302d3232203d3e203238323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.17.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a7:61:9f:de:ea:2e:ea:cc:cf:de:b4:9b:6d:12:97:4c:32:e6:
         d4:ce:73:72:2e:5d:e1:17:f1:51:86:61:82:0d:a6:64:1f:ce:
         de:8c:92:9e:9b:19:01:02:33:8b:63:a6:2f:d1:a3:e4:b4:e5:
         09:86:3f:99:ed:e6:3b:c4:bd:10:d3:af:64:bf:f9:4b:26:65:
         be:c8:25:7d:fd:2a:b9:bb:db:a1:ac:22:a9:98:c1:b9:f3:71:
         6b:d3:8d:29:53:b0:47:fe:03:f5:60:12:a6:b2:d9:c2:6a:3b:
         99:48:28:45:93:33:02:e7:0a:0b:0c:26:92:8a:3e:92:e3:6c:
         1b:a9:50:fb:f3:86:80:d8:66:ae:c9:55:64:b7:67:3c:f6:b7:
         0d:c1:6b:7d:92:5e:98:7c:c2:f4:91:bd:d3:86:e4:3e:dc:95:
         bb:ea:86:7f:57:7d:73:af:da:cd:2f:2a:f1:91:0f:b8:0e:21:
         dd:96:7e:05:c6:4a:1e:5b:b7:4f:4f:61:52:01:ec:5c:f8:41:
         3d:1f:5d:64:e1:ff:5c:c7:74:4e:a1:a6:e4:e2:67:94:cb:56:
         b9:0c:a0:b2:36:83:b4:74:8b:c3:5c:9c:84:cf:58:49:42:db:
         c9:b5:5c:ea:0f:46:c3:bc:51:b4:ba:c4:b8:73:2a:4b:e5:dc:
         ee:c0:60:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----