Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/3133382e3138352e3132342e302f32322d3232203d3e20323633383430.roa
File:                     3133382e3138352e3132342e302f32322d3232203d3e20323633383430.roa (raw, json)
Hash identifier:          2vEW1HgyvBF6yG9+sRnF30iWfrCH5mx5QK6KdSusjqo=
Subject key identifier:   A6:48:82:97:D8:3D:72:FB:0A:CD:E2:E5:A8:C7:EA:F7:CF:3C:DF:EC
Certificate issuer:       /CN=8BD0AE50AE9C7458A7B24238D7C6703D707DA35D
Certificate serial:       1DDC4A96D18F6726B2DBF707AC2EA0D7C96B245D
Authority key identifier: 8B:D0:AE:50:AE:9C:74:58:A7:B2:42:38:D7:C6:70:3D:70:7D:A3:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BD0AE50AE9C7458A7B24238D7C6703D707DA35D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/3133382e3138352e3132342e302f32322d3232203d3e20323633383430.roa
Signing time:             Thu 01 Oct 2026 21:00:34 +0000
ROA not before:           Thu 01 Oct 2026 20:55:34 +0000
ROA not after:            Thu 30 Sep 2027 21:00:34 +0000
asID:                     263840
IP address blocks:        138.185.124.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:dc:4a:96:d1:8f:67:26:b2:db:f7:07:ac:2e:a0:d7:c9:6b:24:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BD0AE50AE9C7458A7B24238D7C6703D707DA35D
        Validity
            Not Before: Oct  1 20:55:34 2026 GMT
            Not After : Sep 30 21:00:34 2027 GMT
        Subject: CN=A6488297D83D72FB0ACDE2E5A8C7EAF7CF3CDFEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:51:b9:01:ac:45:87:77:74:9d:6e:74:90:2f:
                    50:08:0e:4d:27:51:da:a5:c8:bc:67:99:5b:d2:0f:
                    76:c2:c1:ee:b9:b4:33:64:9a:72:79:f8:92:e6:4e:
                    c3:5d:35:a0:97:0b:82:ed:26:45:da:77:05:8d:dd:
                    f9:5b:a7:52:62:35:f7:2b:6a:ab:8c:c5:69:18:97:
                    f3:23:30:da:17:13:96:23:ef:7d:97:31:b2:fb:ab:
                    14:6d:f9:50:76:d4:4f:8c:6f:73:d8:38:91:1e:fc:
                    0e:82:c9:bf:87:e1:e3:6a:6c:ca:15:fb:e4:e3:d0:
                    08:49:ae:af:ad:62:a0:ff:16:ff:02:30:4b:30:50:
                    0c:9e:2c:4e:30:32:0c:4c:55:e4:b9:41:dd:0a:7b:
                    8f:93:9c:d6:25:6f:2c:1c:60:a8:ce:60:08:45:ff:
                    b9:9e:83:77:71:59:0b:a0:a5:a3:fe:17:96:73:7e:
                    42:f6:45:d9:b6:f6:70:39:0e:9e:0b:fd:f0:cf:63:
                    c0:41:9b:9f:e5:31:37:b1:6e:e6:4d:64:b1:96:ae:
                    67:98:55:32:6c:62:ca:5a:bb:55:99:aa:a8:1f:46:
                    62:d0:fb:ae:45:46:aa:e4:a7:d9:98:34:81:ce:ff:
                    31:48:b8:f1:8e:f6:87:7a:89:dc:00:08:8c:35:c4:
                    d7:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:48:82:97:D8:3D:72:FB:0A:CD:E2:E5:A8:C7:EA:F7:CF:3C:DF:EC
            X509v3 Authority Key Identifier:
                keyid:8B:D0:AE:50:AE:9C:74:58:A7:B2:42:38:D7:C6:70:3D:70:7D:A3:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/8BD0AE50AE9C7458A7B24238D7C6703D707DA35D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BD0AE50AE9C7458A7B24238D7C6703D707DA35D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/3133382e3138352e3132342e302f32322d3232203d3e20323633383430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b6:87:a2:56:20:2d:05:72:6d:39:54:d1:6b:20:70:38:4a:7e:
         e3:53:3b:48:43:5d:ad:0e:5d:65:8b:28:c3:87:6e:4f:ae:ed:
         85:f9:b9:bf:a0:6f:9c:ea:f9:2f:d0:af:93:23:cd:17:53:0e:
         e9:d9:bc:e2:24:89:4d:5d:24:50:a0:6d:60:49:1d:6c:61:00:
         03:e1:d1:06:08:94:a5:a4:91:de:f9:01:ce:a1:74:e6:3f:98:
         56:33:4a:9c:71:9d:50:c5:2a:6a:94:00:35:65:75:d0:d4:38:
         e7:d1:a7:10:33:d9:09:aa:30:43:0e:15:04:e6:40:2e:58:4a:
         16:fc:86:53:a8:72:76:8d:03:fb:67:8f:b3:fb:00:37:71:1e:
         d4:d5:7f:ef:67:f6:28:1c:41:99:92:21:00:86:e3:b7:a8:7b:
         d2:63:16:4f:09:b1:8f:43:73:00:4a:7b:54:e8:4e:e1:26:9f:
         3b:08:1a:73:ad:28:be:b0:cc:4e:e6:37:17:78:69:1e:66:5f:
         75:5b:3c:b9:94:74:01:ea:94:e3:18:38:8b:09:55:d6:d0:fa:
         33:04:8e:82:f9:7f:2a:36:8e:ff:2f:7b:89:2c:8a:f3:79:4f:
         47:ea:67:51:d9:87:52:bb:18:54:47:13:49:4e:39:0f:6c:56:
         3c:54:54:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----