Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/3138362e322e3235312e302f32342d3234203d3e20323636313633.roa
File:                     3138362e322e3235312e302f32342d3234203d3e20323636313633.roa (raw, json)
Hash identifier:          vV7MQSYrHOwBZVcnvFl+0Zh8+gbbbdSTY1kxYsX1OtE=
Subject key identifier:   BA:47:0A:1B:6A:E3:94:5C:AE:B3:56:E1:65:97:41:8F:03:E4:94:D8
Certificate issuer:       /CN=041B44A9F96A2E80EA192819BE9533FF7CE1F401
Certificate serial:       4EEE5EAAB0C3E3661C06B4BBCDBF3C0294A215A7
Authority key identifier: 04:1B:44:A9:F9:6A:2E:80:EA:19:28:19:BE:95:33:FF:7C:E1:F4:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041B44A9F96A2E80EA192819BE9533FF7CE1F401.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/3138362e322e3235312e302f32342d3234203d3e20323636313633.roa
Signing time:             Mon 16 Mar 2026 21:13:08 +0000
ROA not before:           Mon 16 Mar 2026 21:08:08 +0000
ROA not after:            Mon 15 Mar 2027 21:13:08 +0000
asID:                     266163
IP address blocks:        186.2.251.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:ee:5e:aa:b0:c3:e3:66:1c:06:b4:bb:cd:bf:3c:02:94:a2:15:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=041B44A9F96A2E80EA192819BE9533FF7CE1F401
        Validity
            Not Before: Mar 16 21:08:08 2026 GMT
            Not After : Mar 15 21:13:08 2027 GMT
        Subject: CN=BA470A1B6AE3945CAEB356E16597418F03E494D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:24:8d:a0:36:45:e0:67:5d:b4:f7:a0:e6:35:
                    fc:ae:26:0f:0b:6b:27:a4:95:a2:12:1a:f3:34:16:
                    95:a7:99:9c:7e:01:c3:78:16:82:98:82:38:6e:d6:
                    49:92:eb:7f:cc:e4:b4:1f:de:d6:59:ba:dd:1a:47:
                    4f:fb:90:a8:ae:46:64:a1:b9:29:30:68:1d:78:ed:
                    8a:e1:ee:d8:e0:a3:e6:26:ae:a6:ba:f2:47:ae:e8:
                    3b:61:70:b7:72:6e:6a:31:5c:04:7a:bf:57:a0:f7:
                    78:5e:fd:0c:29:ce:b5:27:e8:ea:b1:e1:c3:f8:7a:
                    cf:e5:8e:1a:b7:33:db:40:3f:21:fb:7a:b5:90:be:
                    ea:11:66:05:88:45:a8:30:6d:88:b5:36:c0:fd:e2:
                    3a:ff:36:f6:c8:c8:a7:ac:63:ef:1f:b8:50:64:16:
                    1f:7e:a3:ac:3d:61:50:0f:30:ff:23:ea:55:9a:af:
                    b4:82:49:1b:fc:7b:03:79:56:da:7c:fe:a5:2c:60:
                    2c:d0:fa:21:53:71:9e:53:68:e6:1d:36:0e:0c:f6:
                    da:ad:a3:c8:18:3b:1f:f6:c8:3e:e8:0e:e5:eb:00:
                    7e:8b:48:57:75:60:5d:fd:c8:83:a2:f9:fa:3a:01:
                    98:0d:5c:4e:62:57:bd:e3:e8:a5:d0:19:20:de:d5:
                    73:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:47:0A:1B:6A:E3:94:5C:AE:B3:56:E1:65:97:41:8F:03:E4:94:D8
            X509v3 Authority Key Identifier:
                keyid:04:1B:44:A9:F9:6A:2E:80:EA:19:28:19:BE:95:33:FF:7C:E1:F4:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/041B44A9F96A2E80EA192819BE9533FF7CE1F401.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041B44A9F96A2E80EA192819BE9533FF7CE1F401.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/3138362e322e3235312e302f32342d3234203d3e20323636313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.2.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:a0:e7:64:85:3b:64:fa:14:fc:78:90:5d:91:ae:c7:e4:1f:
         7f:9c:38:0f:12:dc:3b:03:13:ab:31:db:6a:34:cd:e3:da:1b:
         c4:76:9f:d2:95:e5:bf:42:11:0c:9e:e8:fe:6e:b2:d8:c2:82:
         19:58:8d:51:d2:5a:be:26:94:5c:e8:79:f2:5b:06:ac:ee:51:
         1f:fd:c8:74:aa:10:13:c9:4a:11:d9:a4:a1:1e:75:68:6b:59:
         e7:34:a3:62:16:e0:09:0d:bd:ba:6c:64:e7:2b:0b:9c:70:08:
         97:e2:73:55:ef:57:52:52:e1:7a:2f:50:be:69:8a:3d:a9:ca:
         a3:7e:44:cb:71:56:d0:6d:11:cc:e3:51:ad:b9:16:39:c9:7d:
         b0:04:1c:d6:68:45:49:6b:0b:61:8e:7b:12:f4:95:90:66:8d:
         ca:8c:0c:31:0d:ad:cd:76:f3:61:e9:d3:7a:ea:03:79:b9:ad:
         c9:00:31:6b:1f:41:55:af:4c:8e:78:71:4d:af:84:0c:72:c8:
         51:4f:5d:0b:1c:66:14:cc:7f:3f:dc:59:20:dd:d7:91:6e:7d:
         61:0b:e2:b9:62:b0:62:76:19:e1:b2:5f:fe:48:5f:b5:7e:54:
         ae:0a:bd:ae:d1:8b:35:48:a2:f1:1e:a2:50:34:cf:00:12:49:
         2a:36:89:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:58:37 2026 by rpki-client