Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7NtsbuNVLC34VsJihSmvZ6QSpYJ2xF1RiCzAdzWQtvr6/0/3230312e33332e3232342e302f32302d3232203d3e203238323835.roa
File:                     3230312e33332e3232342e302f32302d3232203d3e203238323835.roa (raw, json)
Hash identifier:          GXU0oGx71R4msP79PqnsmWsk3DIFJPtLNRLlEJ6r5GQ=
Subject key identifier:   E3:1B:73:4C:CF:29:0D:C7:85:FE:60:F8:49:5E:B8:BF:6F:1C:74:F5
Certificate issuer:       /CN=18304E37E7B30DCE85765ECFC90E798EBF358498
Certificate serial:       68548B464B0F354218D2C19252581241032FB6F0
Authority key identifier: 18:30:4E:37:E7:B3:0D:CE:85:76:5E:CF:C9:0E:79:8E:BF:35:84:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18304E37E7B30DCE85765ECFC90E798EBF358498.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NtsbuNVLC34VsJihSmvZ6QSpYJ2xF1RiCzAdzWQtvr6/0/3230312e33332e3232342e302f32302d3232203d3e203238323835.roa
Signing time:             Fri 04 Sep 2026 12:02:34 +0000
ROA not before:           Fri 04 Sep 2026 11:57:34 +0000
ROA not after:            Fri 03 Sep 2027 12:02:34 +0000
asID:                     28285
IP address blocks:        201.33.224.0/20 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:54:8b:46:4b:0f:35:42:18:d2:c1:92:52:58:12:41:03:2f:b6:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=18304E37E7B30DCE85765ECFC90E798EBF358498
        Validity
            Not Before: Sep  4 11:57:34 2026 GMT
            Not After : Sep  3 12:02:34 2027 GMT
        Subject: CN=E31B734CCF290DC785FE60F8495EB8BF6F1C74F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:f4:87:b1:d9:ef:f9:f3:7d:f9:b0:8f:cb:23:
                    cc:c1:d0:f6:d7:90:4d:29:36:47:10:a6:bd:b9:43:
                    a6:39:ad:20:f8:16:12:b3:4d:68:82:94:41:7a:d7:
                    14:5d:8f:4f:d5:83:6d:3b:e3:a5:f6:44:23:e3:d8:
                    00:07:ed:d7:9a:f4:b8:82:86:2d:1e:71:b9:2a:14:
                    52:17:b8:7c:9d:56:9f:09:6f:8c:30:40:48:3b:c1:
                    c9:ea:62:f4:1c:b5:f0:54:51:c0:3a:46:7d:b4:26:
                    f8:60:f4:66:7b:3b:90:50:f7:48:73:58:2b:d8:7d:
                    cd:b7:1b:73:a8:18:13:15:22:64:58:24:f6:8d:99:
                    02:6c:0a:a3:a3:d4:57:7c:cf:1f:ef:11:6f:7f:33:
                    5f:8f:86:ec:d3:94:3d:9e:ee:5e:27:19:09:70:ea:
                    b6:44:9a:36:ac:d1:06:84:8b:5c:73:ae:09:9e:be:
                    dc:cd:19:3c:09:08:66:f3:ea:08:af:53:af:71:b9:
                    5d:23:a5:e1:c2:7f:1a:84:71:e6:fa:83:e4:3e:2f:
                    32:c4:85:ff:74:b4:e5:b6:c1:92:94:3b:e3:e8:f1:
                    6c:fc:65:39:6f:9a:c4:0b:2d:1b:66:54:d4:47:7b:
                    ba:67:9f:54:c6:8c:a1:7b:4b:76:e2:cb:5c:b0:9c:
                    53:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:1B:73:4C:CF:29:0D:C7:85:FE:60:F8:49:5E:B8:BF:6F:1C:74:F5
            X509v3 Authority Key Identifier:
                keyid:18:30:4E:37:E7:B3:0D:CE:85:76:5E:CF:C9:0E:79:8E:BF:35:84:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NtsbuNVLC34VsJihSmvZ6QSpYJ2xF1RiCzAdzWQtvr6/0/18304E37E7B30DCE85765ECFC90E798EBF358498.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/18304E37E7B30DCE85765ECFC90E798EBF358498.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NtsbuNVLC34VsJihSmvZ6QSpYJ2xF1RiCzAdzWQtvr6/0/3230312e33332e3232342e302f32302d3232203d3e203238323835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.33.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7a:1a:40:49:3a:ee:b8:83:18:1a:4b:6e:62:50:85:a3:82:7b:
         87:0d:d5:8c:7d:64:ee:e0:ea:1a:1a:cd:bd:3c:dd:be:b3:58:
         f0:fa:47:6b:8c:a0:5c:4f:7f:64:ad:0f:fb:52:9a:dc:9a:32:
         78:79:2b:5b:6d:c4:bd:a4:f6:25:f2:74:46:74:4f:37:1e:f4:
         be:1c:cb:15:fc:5b:2b:87:c5:0b:60:ca:7b:f7:d2:44:cc:4e:
         f7:8b:e7:5c:eb:66:21:3a:78:c5:07:b9:f2:12:b0:d8:40:06:
         b8:4c:41:9e:e7:b3:d5:a9:53:0d:3d:17:d2:b9:2e:76:4c:d0:
         e9:3d:69:8d:5e:a8:7b:f6:3d:fa:50:03:a8:24:b2:70:d6:91:
         9c:36:cd:33:ae:15:45:5c:b8:cc:99:51:41:12:99:66:c8:28:
         77:d1:25:b2:76:9c:ef:5f:26:f0:d2:4e:aa:e3:7a:df:54:20:
         a6:a3:7b:97:3b:33:87:44:d1:e9:fd:c4:92:02:3d:5d:7f:f3:
         b3:48:5d:6d:48:25:04:ce:1f:42:90:4f:cb:fe:87:8c:ff:5f:
         21:52:c0:c8:5b:a2:c3:f2:2c:6f:a7:f6:d8:6b:f6:85:fa:f1:
         7a:d2:3d:61:fd:11:08:10:89:1f:bd:93:11:9b:94:ea:2a:e0:
         36:dd:38:1b
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUaFSLRksPNUIY0sGSUlgSQQMvtvAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTgzMDRFMzdFN0IzMERDRTg1NzY1RUNGQzkwRTc5OEVC
RjM1ODQ5ODAeFw0yNjA5MDQxMTU3MzRaFw0yNzA5MDMxMjAyMzRaMDMxMTAvBgNV
BAMTKEUzMUI3MzRDQ0YyOTBEQzc4NUZFNjBGODQ5NUVCOEJGNkYxQzc0RjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx9Iex2e/58335sI/LI8zB0PbX
kE0pNkcQpr25Q6Y5rSD4FhKzTWiClEF61xRdj0/Vg20746X2RCPj2AAH7dea9LiC
hi0ecbkqFFIXuHydVp8Jb4wwQEg7wcnqYvQctfBUUcA6Rn20Jvhg9GZ7O5BQ90hz
WCvYfc23G3OoGBMVImRYJPaNmQJsCqOj1Fd8zx/vEW9/M1+PhuzTlD2e7l4nGQlw
6rZEmjas0QaEi1xzrgmevtzNGTwJCGbz6givU69xuV0jpeHCfxqEceb6g+Q+LzLE
hf90tOW2wZKUO+Po8Wz8ZTlvmsQLLRtmVNRHe7pnn1TGjKF7S3biy1ywnFOzAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU4xtzTM8pDceF/mD4SV64v28cdPUwHwYDVR0j
BBgwFoAUGDBON+ezDc6Fdl7PyQ55jr81hJgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN050c2J1TlZMQzM0VnNKaWhTbXZaNlFTcFlKMnhGMVJpQ3pBZHpXUXR2
cjYvMC8xODMwNEUzN0U3QjMwRENFODU3NjVFQ0ZDOTBFNzk4RUJGMzU4NDk4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzE4MzA0RTM3RTdCMzBEQ0U4
NTc2NUVDRkM5MEU3OThFQkYzNTg0OTguY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdOdHNidU5WTEMzNFZzSmloU212WjZRU3BZSjJ4RjFSaUN6QWR6V1F0dnI2LzAv
MzIzMDMxMmUzMzMzMmUzMjMyMzQyZTMwMmYzMjMwMmQzMjMyMjAzZDNlMjAzMjM4
MzIzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQEySHgMA0GCSqGSIb3DQEBCwUAA4IBAQB6GkBJOu64
gxgaS25iUIWjgnuHDdWMfWTu4OoaGs29PN2+s1jw+kdrjKBcT39krQ/7UprcmjJ4
eStbbcS9pPYl8nRGdE83HvS+HMsV/Fsrh8ULYMp799JEzE73i+dc62YhOnjFB7ny
ErDYQAa4TEGe57PVqVMNPRfSuS52TNDpPWmNXqh79j36UAOoJLJw1pGcNs0zrhVF
XLjMmVFBEplmyCh30SWydpzvXybw0k6q43rfVCCmo3uXOzOHRNHp/cSSAj1df/Oz
SF1tSCUEzh9CkE/L/oeM/18hUsDIW6LD8ixvp/bYa/aF+vF60j1h/REIEIkfvZMR
m5TqKuA23Tgb
-----END CERTIFICATE-----