Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/3138362e322e3234382e302f32332d3234203d3e20323636313633.roa
File:                     3138362e322e3234382e302f32332d3234203d3e20323636313633.roa (raw, json)
Hash identifier:          +2ayEDMRcgqz7e5INPTh7GWCA0g2u5JTGiIbyBsamW4=
Subject key identifier:   A2:77:99:94:42:FB:06:1C:48:CF:98:30:CE:5E:47:70:DB:96:5E:53
Certificate issuer:       /CN=041B44A9F96A2E80EA192819BE9533FF7CE1F401
Certificate serial:       096290590EEEA3FCA4A04662ECF4022F813FDB8A
Authority key identifier: 04:1B:44:A9:F9:6A:2E:80:EA:19:28:19:BE:95:33:FF:7C:E1:F4:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041B44A9F96A2E80EA192819BE9533FF7CE1F401.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/3138362e322e3234382e302f32332d3234203d3e20323636313633.roa
Signing time:             Mon 16 Mar 2026 21:13:07 +0000
ROA not before:           Mon 16 Mar 2026 21:08:07 +0000
ROA not after:            Mon 15 Mar 2027 21:13:07 +0000
asID:                     266163
IP address blocks:        186.2.248.0/23 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:62:90:59:0e:ee:a3:fc:a4:a0:46:62:ec:f4:02:2f:81:3f:db:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=041B44A9F96A2E80EA192819BE9533FF7CE1F401
        Validity
            Not Before: Mar 16 21:08:07 2026 GMT
            Not After : Mar 15 21:13:07 2027 GMT
        Subject: CN=A277999442FB061C48CF9830CE5E4770DB965E53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0e:59:f1:9b:f9:7d:e5:67:33:f7:e9:27:37:
                    54:2f:a9:32:35:9e:14:f2:7f:0d:de:35:91:70:a3:
                    5a:a7:03:f9:83:97:a8:3f:74:18:bb:eb:35:34:cb:
                    f1:5e:20:4d:ed:e6:2e:74:5d:6a:7d:b4:b7:a5:b0:
                    1f:72:de:b7:aa:88:f4:06:9a:b5:94:82:77:19:6c:
                    f3:5a:81:66:be:b9:23:73:64:68:08:c1:5a:1a:00:
                    5a:35:cb:ce:f6:4f:ad:df:09:13:67:2a:c9:12:5e:
                    bf:d5:6c:5d:47:e3:cb:9f:fe:55:5a:cb:aa:2a:e8:
                    ea:24:e1:b2:52:7f:eb:c2:6f:a1:be:61:4a:50:00:
                    f7:0b:b9:c3:cd:d2:5d:7b:d7:d5:06:06:c8:d7:9d:
                    78:29:69:ce:3d:47:1f:a3:9f:06:2e:90:30:3c:b7:
                    43:05:fe:cc:3f:76:fe:70:79:3f:9e:af:2b:88:30:
                    52:1f:13:27:28:0d:9f:b8:8e:81:40:30:54:f8:75:
                    05:ac:a9:66:6b:a0:62:52:50:58:04:a1:9a:07:60:
                    e8:9d:2c:fe:73:35:18:d8:05:a1:b7:b6:4c:60:c6:
                    78:63:0c:d8:d6:86:da:ce:8f:fa:bd:af:2d:6b:11:
                    d6:5e:21:37:2d:a6:92:de:52:0f:10:33:03:6f:f2:
                    c8:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:77:99:94:42:FB:06:1C:48:CF:98:30:CE:5E:47:70:DB:96:5E:53
            X509v3 Authority Key Identifier:
                keyid:04:1B:44:A9:F9:6A:2E:80:EA:19:28:19:BE:95:33:FF:7C:E1:F4:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/041B44A9F96A2E80EA192819BE9533FF7CE1F401.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041B44A9F96A2E80EA192819BE9533FF7CE1F401.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/3138362e322e3234382e302f32332d3234203d3e20323636313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.2.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bf:44:e9:7c:1a:fc:9f:5b:e2:e8:dd:f1:20:fe:7b:c4:b4:a9:
         3e:01:88:f5:93:72:b3:d7:a5:86:d0:19:3e:90:6f:18:15:70:
         43:d6:e0:ab:c0:79:b2:cf:6a:27:3a:79:3f:00:c5:e9:a1:55:
         a6:4e:3f:7b:ae:62:78:f6:30:24:8d:88:6f:07:2f:ac:d8:b2:
         a4:d8:36:26:17:58:69:b1:33:a1:60:38:13:a4:be:28:5b:ef:
         b2:47:9c:55:a7:22:c2:fb:65:88:8f:92:31:f6:3c:72:2e:7b:
         92:1f:7f:ba:4d:71:67:ac:6d:5d:c5:a3:91:a3:27:2b:15:fa:
         14:4e:67:18:dd:2e:50:3b:bf:70:16:4e:ed:ff:66:65:8e:92:
         c4:f6:fc:cf:a8:a5:74:d8:5c:c2:6f:e8:da:e4:6b:11:e7:65:
         55:72:95:17:fb:e2:5f:2e:70:08:65:b0:34:6f:e7:ef:0f:6c:
         91:e7:0b:c9:91:dd:6b:1c:2f:a0:b4:01:97:09:c5:78:4d:13:
         9d:dc:e6:77:71:51:07:f3:cc:0e:9b:4e:ab:06:88:cc:7a:e9:
         d5:8d:86:88:b3:9a:27:70:81:9d:57:8a:4c:dc:49:bb:9a:89:
         18:65:42:ab:5b:8d:a1:44:78:99:a3:81:09:47:b1:6d:02:5f:
         b6:d3:7b:ef
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUCWKQWQ7uo/ykoEZi7PQCL4E/24owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDQxQjQ0QTlGOTZBMkU4MEVBMTkyODE5QkU5NTMzRkY3
Q0UxRjQwMTAeFw0yNjAzMTYyMTA4MDdaFw0yNzAzMTUyMTEzMDdaMDMxMTAvBgNV
BAMTKEEyNzc5OTk0NDJGQjA2MUM0OENGOTgzMENFNUU0NzcwREI5NjVFNTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHDlnxm/l95Wcz9+knN1QvqTI1
nhTyfw3eNZFwo1qnA/mDl6g/dBi76zU0y/FeIE3t5i50XWp9tLelsB9y3reqiPQG
mrWUgncZbPNagWa+uSNzZGgIwVoaAFo1y872T63fCRNnKskSXr/VbF1H48uf/lVa
y6oq6Ook4bJSf+vCb6G+YUpQAPcLucPN0l1719UGBsjXnXgpac49Rx+jnwYukDA8
t0MF/sw/dv5weT+eryuIMFIfEycoDZ+4joFAMFT4dQWsqWZroGJSUFgEoZoHYOid
LP5zNRjYBaG3tkxgxnhjDNjWhtrOj/q9ry1rEdZeITctppLeUg8QMwNv8siTAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUoneZlEL7BhxIz5gwzl5HcNuWXlMwHwYDVR0j
BBgwFoAUBBtEqflqLoDqGSgZvpUz/3zh9AEwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQUpLUHNUYzV2V2JDMmtoRmpFeWsyQnU1QkJtM3p0cjVzMXRuZ0R3VHR1
a2IvMC8wNDFCNDRBOUY5NkEyRTgwRUExOTI4MTlCRTk1MzNGRjdDRTFGNDAxLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzA0MUI0NEE5Rjk2QTJFODBF
QTE5MjgxOUJFOTUzM0ZGN0NFMUY0MDEuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0FKS1BzVGM1dldiQzJraEZqRXlrMkJ1NUJCbTN6dHI1czF0bmdEd1R0dWtiLzAv
MzEzODM2MmUzMjJlMzIzNDM4MmUzMDJmMzIzMzJkMzIzNDIwM2QzZTIwMzIzNjM2
MzEzNjMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQBugL4MA0GCSqGSIb3DQEBCwUAA4IBAQC/ROl8Gvyf
W+Lo3fEg/nvEtKk+AYj1k3Kz16WG0Bk+kG8YFXBD1uCrwHmyz2onOnk/AMXpoVWm
Tj97rmJ49jAkjYhvBy+s2LKk2DYmF1hpsTOhYDgTpL4oW++yR5xVpyLC+2WIj5Ix
9jxyLnuSH3+6TXFnrG1dxaORoycrFfoUTmcY3S5QO79wFk7t/2ZljpLE9vzPqKV0
2FzCb+ja5GsR52VVcpUX++JfLnAIZbA0b+fvD2yR5wvJkd1rHC+gtAGXCcV4TROd
3OZ3cVEH88wOm06rBojMeunVjYaIs5oncIGdV4pM3Em7mokYZUKrW42hRHiZo4EJ
R7FtAl+203vv
-----END CERTIFICATE-----
Generated at Fri Mar 27 00:52:38 2026 by rpki-client