Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4vhmQF7hgAz14gTAsDJ46HQAUQjoPeveqCHrCiUcymp9/0/3136382e3232372e3136342e302f32322d3234203d3e20323634343737.roa
File:                     3136382e3232372e3136342e302f32322d3234203d3e20323634343737.roa (raw, json)
Hash identifier:          xMVuHy9P6QZuuXjQO8bRH3tBawHhe31hpdG+5kTU4O4=
Subject key identifier:   DA:17:7E:05:09:91:67:96:9C:48:3C:F8:2F:14:D6:85:D3:DC:2D:6D
Certificate issuer:       /CN=C88E57A266D4378ADF715ABA71E3866BBCD6B2E9
Certificate serial:       4A51CF5FD9645FC49D17908FC4095F94823AB1AE
Authority key identifier: C8:8E:57:A2:66:D4:37:8A:DF:71:5A:BA:71:E3:86:6B:BC:D6:B2:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C88E57A266D4378ADF715ABA71E3866BBCD6B2E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4vhmQF7hgAz14gTAsDJ46HQAUQjoPeveqCHrCiUcymp9/0/3136382e3232372e3136342e302f32322d3234203d3e20323634343737.roa
Signing time:             Mon 05 Oct 2026 22:18:27 +0000
ROA not before:           Mon 05 Oct 2026 22:13:27 +0000
ROA not after:            Mon 04 Oct 2027 22:18:27 +0000
asID:                     264477
IP address blocks:        168.227.164.0/22 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:51:cf:5f:d9:64:5f:c4:9d:17:90:8f:c4:09:5f:94:82:3a:b1:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C88E57A266D4378ADF715ABA71E3866BBCD6B2E9
        Validity
            Not Before: Oct  5 22:13:27 2026 GMT
            Not After : Oct  4 22:18:27 2027 GMT
        Subject: CN=DA177E05099167969C483CF82F14D685D3DC2D6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:91:67:ac:92:90:bd:e2:a7:c9:68:57:fa:cb:
                    22:74:80:b6:51:ce:9b:15:14:24:8f:ba:60:54:5f:
                    32:91:22:f7:90:02:31:cf:8c:1a:93:bc:75:1d:eb:
                    c3:fd:86:7c:62:22:e2:02:3e:cf:db:a4:5e:19:20:
                    f9:ee:25:3c:10:06:c7:e2:d7:a4:da:a1:1b:08:b5:
                    6b:c0:70:3c:43:e8:8d:db:b1:b6:67:51:89:af:d2:
                    73:5d:a6:e6:66:e7:03:36:b6:3b:45:c9:2a:21:6f:
                    ee:bf:fa:af:a5:10:bd:48:4c:1f:9a:09:73:75:36:
                    75:d9:5b:1b:bd:0d:65:84:72:d7:67:6f:c6:c3:e6:
                    0b:28:e2:6e:a9:d7:66:2c:b6:91:81:3a:70:0a:05:
                    32:be:a7:79:de:0b:4c:ea:30:20:f1:11:31:a4:be:
                    15:eb:f5:30:9f:32:67:0c:f2:1c:61:c1:29:7e:04:
                    77:cb:46:9b:07:37:35:cd:d5:02:81:8a:6c:11:20:
                    6c:4f:8a:84:55:ae:7c:79:35:55:6d:bd:2e:9b:a8:
                    f1:df:38:3a:5d:27:24:c0:5f:65:67:56:bd:48:9c:
                    38:d8:fa:20:7c:78:8d:91:b7:d3:0d:d9:c4:8a:9b:
                    63:84:6a:cb:39:c3:1c:2b:25:5e:88:76:e4:59:6d:
                    ce:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:17:7E:05:09:91:67:96:9C:48:3C:F8:2F:14:D6:85:D3:DC:2D:6D
            X509v3 Authority Key Identifier:
                keyid:C8:8E:57:A2:66:D4:37:8A:DF:71:5A:BA:71:E3:86:6B:BC:D6:B2:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4vhmQF7hgAz14gTAsDJ46HQAUQjoPeveqCHrCiUcymp9/0/C88E57A266D4378ADF715ABA71E3866BBCD6B2E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C88E57A266D4378ADF715ABA71E3866BBCD6B2E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4vhmQF7hgAz14gTAsDJ46HQAUQjoPeveqCHrCiUcymp9/0/3136382e3232372e3136342e302f32322d3234203d3e20323634343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         18:76:bd:08:70:c6:ae:38:b5:78:d8:3e:cb:ab:1e:1b:f8:0f:
         87:b0:23:67:e4:5d:ec:13:43:1d:5c:7a:a9:75:d7:e0:9c:bb:
         1d:d6:9d:18:44:27:ca:27:96:ff:8b:18:e7:d0:d5:b2:f1:6c:
         e6:5a:ff:36:36:33:75:4f:c8:b3:76:e2:86:4a:ee:3c:81:bc:
         9b:37:42:18:d8:17:b5:53:f7:11:e4:79:31:fe:b6:a8:5a:7d:
         4b:d8:f1:c5:73:dd:85:44:be:a8:e7:68:c7:9b:9d:f5:4f:79:
         13:06:a9:72:19:d1:f9:c7:ab:cf:c6:de:f8:6f:e4:22:37:4e:
         68:45:07:2f:91:6b:f5:04:b3:15:dc:85:00:3e:84:c6:86:80:
         90:c2:6b:50:14:54:5b:31:39:b9:74:b2:90:24:e1:fa:f6:ec:
         66:10:1b:c2:8d:3a:33:4b:c4:65:fa:0b:f8:a2:6b:51:24:01:
         fa:88:9c:a1:78:24:01:7b:16:06:d9:0e:fa:10:13:44:63:a0:
         82:11:eb:d4:bc:14:a7:2e:ba:ec:2f:6b:bb:db:cd:38:4f:42:
         4d:5d:ad:84:4c:8d:b1:e3:65:af:9e:19:9a:9d:38:03:ca:48:
         93:02:f7:21:77:42:47:fe:c2:18:2d:dc:f6:df:da:11:a5:6e:
         f1:5d:1e:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----