Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7NtsbuNVLC34VsJihSmvZ6QSpYJ2xF1RiCzAdzWQtvr6/0/3138372e38342e3136302e302f32302d3232203d3e203238323835.roa
File:                     3138372e38342e3136302e302f32302d3232203d3e203238323835.roa (raw, json)
Hash identifier:          BDdyjuN8wcIEDdj30gLpbbpmYTV1SHTqdN+GppVeY6Q=
Subject key identifier:   36:BE:7F:E2:F4:03:EE:EA:FB:A4:0E:9D:7A:7E:42:1C:69:E8:48:1B
Certificate issuer:       /CN=18304E37E7B30DCE85765ECFC90E798EBF358498
Certificate serial:       55C8AE95025B116A4DC3768B94EF30C0C60BAF38
Authority key identifier: 18:30:4E:37:E7:B3:0D:CE:85:76:5E:CF:C9:0E:79:8E:BF:35:84:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18304E37E7B30DCE85765ECFC90E798EBF358498.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NtsbuNVLC34VsJihSmvZ6QSpYJ2xF1RiCzAdzWQtvr6/0/3138372e38342e3136302e302f32302d3232203d3e203238323835.roa
Signing time:             Fri 04 Sep 2026 11:12:34 +0000
ROA not before:           Fri 04 Sep 2026 11:07:34 +0000
ROA not after:            Fri 03 Sep 2027 11:12:34 +0000
asID:                     28285
IP address blocks:        187.84.160.0/20 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:c8:ae:95:02:5b:11:6a:4d:c3:76:8b:94:ef:30:c0:c6:0b:af:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18304E37E7B30DCE85765ECFC90E798EBF358498
        Validity
            Not Before: Sep  4 11:07:34 2026 GMT
            Not After : Sep  3 11:12:34 2027 GMT
        Subject: CN=36BE7FE2F403EEEAFBA40E9D7A7E421C69E8481B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e5:81:83:50:8f:ca:32:d0:f9:e2:30:b0:7c:
                    b0:15:a9:4e:6a:e9:8c:2b:f0:33:db:35:e0:8a:8e:
                    c0:64:6e:9c:e8:df:56:8c:43:58:a4:c3:89:4c:0c:
                    66:3c:df:76:97:e7:bf:74:6c:ec:04:ea:47:d3:ad:
                    64:6e:6e:dc:02:ba:1d:ee:cc:c6:66:ba:18:65:02:
                    fa:00:10:10:4e:75:2e:5c:31:97:3a:5d:b0:8e:79:
                    7e:02:a0:3b:2e:11:20:59:6d:96:6f:18:a8:28:9e:
                    b9:2f:ed:f9:fa:ea:27:d3:61:3c:e0:cd:bf:0c:56:
                    91:7a:11:05:ea:d5:ad:df:67:bf:f4:a9:1d:a3:0e:
                    75:57:5a:13:2c:ea:af:15:07:07:bd:a1:80:7b:fe:
                    17:6a:71:44:7d:9a:b9:6a:22:26:13:31:ae:8b:79:
                    49:e0:f4:30:18:8b:c2:31:37:f3:db:85:8b:23:7a:
                    56:58:8e:65:63:41:3a:8a:21:29:07:37:e0:d0:93:
                    c3:1d:01:ea:03:ac:f2:c6:98:5e:75:2c:7d:b5:a7:
                    a8:75:3b:ca:f7:fd:02:2c:0b:33:55:d2:50:99:dd:
                    43:dc:f9:59:63:bd:b1:ed:c2:10:cc:10:82:a0:e1:
                    27:07:2c:f1:5d:13:21:be:d1:d9:f4:98:fd:35:67:
                    92:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:BE:7F:E2:F4:03:EE:EA:FB:A4:0E:9D:7A:7E:42:1C:69:E8:48:1B
            X509v3 Authority Key Identifier:
                keyid:18:30:4E:37:E7:B3:0D:CE:85:76:5E:CF:C9:0E:79:8E:BF:35:84:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NtsbuNVLC34VsJihSmvZ6QSpYJ2xF1RiCzAdzWQtvr6/0/18304E37E7B30DCE85765ECFC90E798EBF358498.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18304E37E7B30DCE85765ECFC90E798EBF358498.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NtsbuNVLC34VsJihSmvZ6QSpYJ2xF1RiCzAdzWQtvr6/0/3138372e38342e3136302e302f32302d3232203d3e203238323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         06:4b:0d:5e:35:c3:fa:a3:c5:35:67:8d:29:10:2b:58:ba:42:
         18:96:f6:d8:b4:f4:2d:55:86:39:df:4f:a5:ed:6c:7c:a8:61:
         12:d6:b9:f4:ba:d2:84:1f:83:2a:a0:33:c0:fa:bb:6f:e5:20:
         b7:1a:d1:84:73:15:0a:df:80:d1:48:f9:2a:6c:f3:c5:dc:08:
         c1:d0:68:23:04:da:86:75:3f:ea:54:1c:66:58:70:ef:58:3a:
         13:18:52:83:8e:45:d3:7c:13:95:69:d2:cf:e1:f0:18:c4:51:
         15:d1:d5:ac:75:aa:62:af:5a:14:5b:68:4d:08:01:62:42:fb:
         18:2c:8c:9c:9f:6a:9a:d4:ef:e8:ac:da:d8:82:bf:c8:4d:de:
         6c:9f:72:89:a8:31:49:85:50:a9:ae:6e:b6:38:07:f3:cb:7c:
         5d:95:c7:ac:7c:b9:2f:c4:39:05:22:e9:b2:aa:43:93:04:25:
         aa:d1:58:8c:04:a2:8e:40:4a:09:16:46:d4:67:e0:d6:3a:ed:
         aa:16:32:3a:6b:ec:bd:70:f9:ff:89:c4:17:f9:a9:6f:5d:ac:
         26:af:bb:3b:8f:cc:7c:f6:d7:1b:7d:85:95:a8:97:26:15:79:
         b0:c1:67:63:83:9f:c0:91:31:16:96:4b:69:5a:be:12:6f:f7:
         b1:3a:90:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----