Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/3136342e3136332e3232302e302f32332d3233203d3e20323637343535.roa
File:                     3136342e3136332e3232302e302f32332d3233203d3e20323637343535.roa (raw, json)
Hash identifier:          ZDLB9CRRDZddQL16K9uEsKLKSPl2cahB1Uvd4s3WuL0=
Subject key identifier:   C2:97:7E:26:A9:A5:16:56:90:C6:FF:6B:2E:CA:79:E5:27:A7:1A:13
Certificate issuer:       /CN=DF1D3ECDE0155405528EE1ECA39CE318FD143A1A
Certificate serial:       38EFCABE45545933D42B55A77E87750C8D832E98
Authority key identifier: DF:1D:3E:CD:E0:15:54:05:52:8E:E1:EC:A3:9C:E3:18:FD:14:3A:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF1D3ECDE0155405528EE1ECA39CE318FD143A1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/3136342e3136332e3232302e302f32332d3233203d3e20323637343535.roa
Signing time:             Tue 13 Oct 2026 19:19:50 +0000
ROA not before:           Tue 13 Oct 2026 19:14:50 +0000
ROA not after:            Tue 12 Oct 2027 19:19:50 +0000
asID:                     267455
IP address blocks:        164.163.220.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:ef:ca:be:45:54:59:33:d4:2b:55:a7:7e:87:75:0c:8d:83:2e:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF1D3ECDE0155405528EE1ECA39CE318FD143A1A
        Validity
            Not Before: Oct 13 19:14:50 2026 GMT
            Not After : Oct 12 19:19:50 2027 GMT
        Subject: CN=C2977E26A9A5165690C6FF6B2ECA79E527A71A13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:1b:85:3e:a0:c9:44:49:18:e7:6c:d1:64:ba:
                    50:64:ab:bd:d6:12:cf:71:85:d9:21:e2:3f:aa:4a:
                    2f:03:e0:5e:24:8a:61:e6:3c:44:f4:ae:71:e6:d5:
                    07:f4:a8:18:79:a1:c7:83:dd:35:40:4c:a3:9c:8d:
                    3f:34:59:15:e7:8a:37:b8:08:87:f7:94:32:42:ab:
                    bd:43:d4:88:34:f5:76:eb:61:70:d9:b2:ab:98:44:
                    74:de:66:69:a9:c8:27:e1:4e:d6:4e:af:54:9f:ca:
                    75:70:cc:d4:97:78:15:8b:7b:95:fe:36:27:60:e7:
                    6b:58:d6:89:2a:00:63:d3:17:94:57:14:63:d7:b2:
                    85:b9:4e:74:37:46:cd:fa:16:e9:e5:aa:9b:0c:4b:
                    4d:58:68:f2:6b:1a:d2:e9:02:24:08:00:3c:23:5b:
                    90:fa:96:da:cc:e5:bb:03:f1:6e:8f:d9:1e:a2:85:
                    ce:7b:73:5d:70:e7:4e:ea:ea:71:8a:bf:d4:ab:5b:
                    36:52:d4:3f:3d:9d:d0:31:93:5b:65:83:4c:33:35:
                    05:bf:75:6c:11:b4:16:cd:68:6e:d0:df:94:8a:9f:
                    8c:8a:15:e9:5b:bf:96:97:3e:c4:3a:b6:6a:a4:3c:
                    53:6d:f0:13:b3:78:61:a6:8d:f3:28:b5:93:7f:f4:
                    7e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:97:7E:26:A9:A5:16:56:90:C6:FF:6B:2E:CA:79:E5:27:A7:1A:13
            X509v3 Authority Key Identifier:
                keyid:DF:1D:3E:CD:E0:15:54:05:52:8E:E1:EC:A3:9C:E3:18:FD:14:3A:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/DF1D3ECDE0155405528EE1ECA39CE318FD143A1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF1D3ECDE0155405528EE1ECA39CE318FD143A1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/3136342e3136332e3232302e302f32332d3233203d3e20323637343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:99:13:0f:79:c7:41:3d:c0:c7:f0:ac:48:e1:51:56:b1:4f:
         2e:ee:62:d7:b7:f5:47:7c:40:b5:91:06:a7:a0:65:4d:6f:17:
         91:25:b0:31:9a:40:6a:c2:90:75:ba:78:0e:03:25:ef:cb:b1:
         8f:4d:ef:17:24:ba:cb:ee:18:f3:f6:3b:cc:56:4e:7e:cb:4b:
         ea:46:7b:47:43:20:f7:6c:74:b9:26:03:f0:bd:e8:9d:ae:20:
         41:d0:98:54:a4:d6:6a:3b:62:93:4c:9f:aa:de:93:32:43:c8:
         d3:5f:37:b0:52:6e:17:61:34:b9:5e:77:5c:9a:78:23:25:81:
         42:bd:bf:39:ae:d1:cc:b4:44:32:ff:b4:b4:ee:d2:94:46:96:
         b3:78:75:f3:45:b1:c5:15:83:6d:b3:2c:cc:d6:e7:44:3c:84:
         dc:90:fb:26:c5:6d:1b:32:e7:c2:66:d3:fa:a6:06:52:88:30:
         dd:46:2b:57:32:24:a5:31:0f:7a:60:69:c5:ae:99:e1:4a:5e:
         fd:f0:51:0c:32:65:ec:f8:9a:23:47:a8:e4:ff:3d:44:b5:0d:
         63:cd:0d:14:eb:eb:87:9f:05:88:07:c2:bb:1e:f9:34:50:62:
         77:ea:c3:a2:be:fb:f8:c4:0f:21:02:fc:38:8c:33:8e:c4:a3:
         24:03:33:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----