Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3139302e3130392e3130312e302f32342d3234203d3e20323732373130.roa
File:                     3139302e3130392e3130312e302f32342d3234203d3e20323732373130.roa (raw, json)
Hash identifier:          IzcoduQpkku2Rho588qxHZhAZ50FsEjCPlvNKkVaQz4=
Subject key identifier:   22:DA:A2:F8:EA:2B:9E:8C:DE:CB:42:84:DD:1E:DC:CA:CB:EE:31:06
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       682EAA80ECA76C091E27C59BE52DF9186EEE44E1
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3139302e3130392e3130312e302f32342d3234203d3e20323732373130.roa
Signing time:             Tue 25 Aug 2026 15:44:30 +0000
ROA not before:           Tue 25 Aug 2026 15:39:30 +0000
ROA not after:            Tue 24 Aug 2027 15:44:30 +0000
asID:                     272710
IP address blocks:        190.109.101.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:2e:aa:80:ec:a7:6c:09:1e:27:c5:9b:e5:2d:f9:18:6e:ee:44:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Aug 25 15:39:30 2026 GMT
            Not After : Aug 24 15:44:30 2027 GMT
        Subject: CN=22DAA2F8EA2B9E8CDECB4284DD1EDCCACBEE3106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:d7:cc:dd:fc:22:12:2f:7c:62:28:c5:e7:41:
                    0c:15:57:9d:26:22:d4:5e:0f:26:24:d2:19:a5:07:
                    39:9a:22:d3:81:bb:36:55:d9:2a:e5:0b:00:da:be:
                    15:f2:95:74:79:a3:89:4c:48:e2:29:83:e7:1d:eb:
                    aa:84:03:05:61:f8:ad:82:0d:17:2a:6d:d3:6c:f3:
                    c6:f1:af:3f:a0:5b:da:6a:e8:64:9d:aa:11:71:9a:
                    cc:45:9c:30:1d:42:5b:bf:0e:69:47:15:03:96:6f:
                    77:e9:de:47:9b:bc:eb:bb:59:07:0c:52:30:5e:46:
                    81:31:22:0d:37:c2:23:76:a3:43:4f:bb:96:fa:4d:
                    26:32:39:eb:04:8d:bf:f5:35:c5:c8:ad:05:87:a6:
                    41:a7:44:e9:0c:62:fa:e4:43:ba:b0:57:9e:b7:ba:
                    b5:bc:7b:bb:4d:40:cc:b3:14:ae:f5:51:cd:69:0a:
                    c8:4e:d4:5e:4d:08:38:3b:bd:ac:f3:98:c7:c6:6b:
                    9e:55:fe:a6:4b:1c:44:6c:3c:eb:b2:e5:d0:4e:f2:
                    9f:df:5a:dc:76:44:81:18:03:65:96:27:46:7e:f6:
                    e0:fe:22:58:6f:92:78:85:b8:22:ba:49:c6:ca:8a:
                    c2:68:5c:e1:d0:20:8f:39:6f:fe:c8:b8:01:2a:a9:
                    62:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:DA:A2:F8:EA:2B:9E:8C:DE:CB:42:84:DD:1E:DC:CA:CB:EE:31:06
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/3139302e3130392e3130312e302f32342d3234203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.109.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:95:45:5d:0f:54:e0:3b:44:31:3c:9c:c7:10:97:5b:c5:15:
         cb:b3:5b:9e:df:d2:44:02:c1:75:a5:09:df:a9:a6:87:a3:2f:
         84:aa:e4:95:55:44:f1:73:05:2c:c6:ba:0d:3e:d5:32:89:01:
         9d:54:28:26:9f:17:18:e2:48:80:96:bf:27:93:4b:6f:43:78:
         46:42:01:4e:21:a4:b3:2a:15:38:c3:f3:53:d0:71:9f:80:8e:
         c4:29:ae:38:55:43:04:50:ec:d2:1e:02:3b:af:32:da:fd:37:
         17:3a:89:82:94:1d:ae:b1:8b:62:45:5b:29:4a:92:9c:79:09:
         83:e9:87:d1:14:78:c9:42:10:df:86:6f:23:5d:2c:68:fd:49:
         b5:30:bc:54:b2:13:59:84:30:f0:01:8b:1c:1b:e0:d4:2a:ba:
         d0:ea:e6:ac:2b:5f:45:97:c6:32:82:97:c0:76:44:ed:0c:0f:
         81:9f:7a:f2:4c:92:ac:5e:dc:c5:ca:fa:28:c5:ca:d0:18:62:
         6e:1f:67:7f:7a:4d:18:7a:7b:51:82:fb:56:22:95:52:21:e0:
         f1:2c:11:57:08:fb:d9:ae:04:8c:a8:ae:35:ed:ae:72:bc:de:
         fd:96:a1:dd:ec:ba:ef:4d:38:7f:c8:cf:49:18:d2:dd:27:56:
         ce:7b:eb:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----