Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3138372e3131302e3134342e302f32312d3234203d3e20323639303733.roa
File:                     3138372e3131302e3134342e302f32312d3234203d3e20323639303733.roa (raw, json)
Hash identifier:          6zEcXez9aAZHXnZRluT/Nkv/24nACBFgbD3wQ/ADVhY=
Subject key identifier:   77:88:5A:EB:67:97:EF:C2:39:8C:7F:18:8B:4C:85:F8:13:5C:6B:08
Certificate issuer:       /CN=3FF96820195E6A66E38F9102B4B56F0E4EB31831
Certificate serial:       69F78441B5F5FF81671EC02A9FBAC6B8BFC3CF5E
Authority key identifier: 3F:F9:68:20:19:5E:6A:66:E3:8F:91:02:B4:B5:6F:0E:4E:B3:18:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3138372e3131302e3134342e302f32312d3234203d3e20323639303733.roa
Signing time:             Wed 23 Sep 2026 14:32:55 +0000
ROA not before:           Wed 23 Sep 2026 14:27:55 +0000
ROA not after:            Wed 22 Sep 2027 14:32:55 +0000
asID:                     269073
IP address blocks:        187.110.144.0/21 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:f7:84:41:b5:f5:ff:81:67:1e:c0:2a:9f:ba:c6:b8:bf:c3:cf:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF96820195E6A66E38F9102B4B56F0E4EB31831
        Validity
            Not Before: Sep 23 14:27:55 2026 GMT
            Not After : Sep 22 14:32:55 2027 GMT
        Subject: CN=77885AEB6797EFC2398C7F188B4C85F8135C6B08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ba:9f:c6:c9:48:9f:22:69:f3:83:1a:d6:54:
                    19:5b:25:12:a8:53:73:9c:66:14:46:33:5c:ec:d6:
                    6b:fa:01:d1:3d:d9:63:62:93:53:6f:ff:58:97:de:
                    f7:8d:45:96:76:b9:2e:e4:86:14:47:ed:0a:be:87:
                    75:a8:5d:12:e2:f4:93:63:5f:89:71:a2:e3:99:52:
                    24:57:a4:4f:c2:97:84:fa:b6:69:c5:9a:6c:ba:2a:
                    a5:0a:b5:4a:b1:29:ec:d7:02:b4:17:a9:57:3f:db:
                    21:a1:91:2c:51:e3:6a:97:e0:17:a6:a6:54:ef:e0:
                    49:29:49:e3:53:ac:4a:ac:e0:32:38:46:2c:d3:ed:
                    f0:29:26:d6:30:4b:65:20:0b:31:0f:09:e7:48:a3:
                    cb:25:53:be:4b:cd:7a:9e:64:62:9f:37:e2:cd:84:
                    24:64:95:db:41:c4:87:c1:62:ff:43:77:0b:ce:c7:
                    71:62:87:31:65:14:11:a4:ce:17:a5:e2:46:36:f5:
                    2e:89:9b:3d:bc:67:04:2f:06:d8:85:7e:4c:77:04:
                    7c:8c:91:52:cc:49:ee:5f:10:0f:f0:26:ed:78:9d:
                    94:54:49:b4:eb:77:40:36:00:d1:a8:62:58:e3:49:
                    ee:a0:d9:ce:fa:8e:ef:4b:2d:9a:fe:d5:32:4b:67:
                    39:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:88:5A:EB:67:97:EF:C2:39:8C:7F:18:8B:4C:85:F8:13:5C:6B:08
            X509v3 Authority Key Identifier:
                keyid:3F:F9:68:20:19:5E:6A:66:E3:8F:91:02:B4:B5:6F:0E:4E:B3:18:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3FF96820195E6A66E38F9102B4B56F0E4EB31831.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3FF96820195E6A66E38F9102B4B56F0E4EB31831.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3138372e3131302e3134342e302f32312d3234203d3e20323639303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.110.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         75:4d:83:ed:8e:e8:d7:da:26:0a:d1:75:3d:83:dd:37:02:f9:
         54:e0:3a:a0:8d:7c:a6:48:0d:0b:dd:8e:7d:f9:ca:39:59:01:
         f4:63:1d:fd:93:e8:b6:ab:d4:a3:45:c3:e3:ea:b4:51:92:35:
         fc:70:25:1f:9f:b3:9c:c0:87:65:22:a2:1e:40:3d:89:67:b3:
         26:b1:17:57:6a:92:19:f6:78:3d:f2:5b:3e:b8:2e:d4:86:7d:
         29:b6:7b:36:54:06:e5:c7:e7:5b:7e:5d:79:06:2e:1a:61:2a:
         c2:ef:65:40:a4:c7:49:d8:c8:06:e2:60:a0:17:3e:17:dd:ea:
         5a:81:e2:70:09:da:d5:e2:a1:ec:a1:5c:fb:de:98:f3:4d:1b:
         58:87:a3:0c:81:2f:ec:52:0f:4c:5b:27:54:69:36:27:bb:0c:
         58:98:a2:7b:76:e9:17:f2:20:bb:22:92:ed:27:7c:7b:a7:c0:
         6a:c8:12:97:c8:10:38:d2:6a:05:f3:85:97:4e:b0:c9:65:cd:
         bd:e1:9a:61:7e:56:73:d0:5b:cf:a1:bb:3a:ef:a3:6b:a4:90:
         32:ae:02:23:e6:1c:52:5c:c7:8c:92:e4:71:9c:c0:71:65:3a:
         a9:73:8b:39:df:51:b7:f6:ca:a1:00:43:30:42:a8:55:e1:6a:
         21:22:f4:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----