Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/1/3138372e3130322e34332e302f32342d3234203d3e20323632363938.roa
File:                     3138372e3130322e34332e302f32342d3234203d3e20323632363938.roa (raw, json)
Hash identifier:          8KwdbVS4GmxP7vRSWnjg5isluknPVDeWQyDLPH/Dnjs=
Subject key identifier:   37:CC:3F:9D:CE:BE:77:7E:46:91:F0:42:0A:EB:70:F9:1C:F7:56:48
Certificate issuer:       /CN=D1A818815F22CCC2C8738F04211BBC89F84CFAF2
Certificate serial:       465C367EEF446025550B3E1BBE71E95495DE7465
Authority key identifier: D1:A8:18:81:5F:22:CC:C2:C8:73:8F:04:21:1B:BC:89:F8:4C:FA:F2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1A818815F22CCC2C8738F04211BBC89F84CFAF2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/1/3138372e3130322e34332e302f32342d3234203d3e20323632363938.roa
Signing time:             Fri 04 Sep 2026 12:46:41 +0000
ROA not before:           Fri 04 Sep 2026 12:41:41 +0000
ROA not after:            Fri 03 Sep 2027 12:46:41 +0000
asID:                     262698
IP address blocks:        187.102.43.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:5c:36:7e:ef:44:60:25:55:0b:3e:1b:be:71:e9:54:95:de:74:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1A818815F22CCC2C8738F04211BBC89F84CFAF2
        Validity
            Not Before: Sep  4 12:41:41 2026 GMT
            Not After : Sep  3 12:46:41 2027 GMT
        Subject: CN=37CC3F9DCEBE777E4691F0420AEB70F91CF75648
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5d:f9:dd:a1:3c:fe:9b:3d:ca:51:05:ae:a9:
                    d8:3d:e2:18:55:a1:69:af:7b:de:d3:e4:46:d2:43:
                    4a:7b:98:d7:29:00:cb:f5:ef:ab:0a:ac:9a:e8:fa:
                    08:33:ab:dc:d0:2a:82:0b:a0:bd:ca:06:57:ea:29:
                    1f:09:59:ff:3a:9c:3e:34:73:bf:8e:ff:bc:d4:22:
                    31:c4:e3:7f:f3:ce:4a:13:45:ba:cd:69:9e:c9:b5:
                    74:af:99:d6:09:1d:4e:3a:35:b0:66:af:43:7f:61:
                    ce:6f:a7:99:1b:06:f3:68:8c:cb:50:19:c1:e1:a0:
                    8f:15:6f:bc:ba:37:59:4e:c5:1d:86:df:60:23:4d:
                    54:86:5b:99:ec:12:c8:8d:0e:ee:41:72:fb:c0:cd:
                    1c:8a:2f:f6:63:b5:4f:5e:75:94:d4:69:a6:f5:4e:
                    c9:48:6d:20:ec:d3:34:81:1d:a0:6d:d7:e0:bc:00:
                    3b:0a:70:cd:f5:75:8c:7c:9e:93:ab:16:2d:03:69:
                    ad:e2:21:db:33:c7:c1:7b:39:f9:94:73:94:7c:f7:
                    35:46:3d:e3:88:76:d6:46:b1:19:09:e1:e8:bf:db:
                    31:d3:7a:8e:fe:20:fc:07:dc:28:60:87:e7:8d:ee:
                    be:02:2c:6a:ff:54:bf:63:06:75:a8:ec:ac:8f:fb:
                    13:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:CC:3F:9D:CE:BE:77:7E:46:91:F0:42:0A:EB:70:F9:1C:F7:56:48
            X509v3 Authority Key Identifier:
                keyid:D1:A8:18:81:5F:22:CC:C2:C8:73:8F:04:21:1B:BC:89:F8:4C:FA:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/1/D1A818815F22CCC2C8738F04211BBC89F84CFAF2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1A818815F22CCC2C8738F04211BBC89F84CFAF2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fhon42j2ynmvKW7DCGXqSQNWiX7SG8CHgQ8yhLbrenWj/1/3138372e3130322e34332e302f32342d3234203d3e20323632363938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.102.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:d7:f7:47:73:c2:83:62:39:b1:3a:de:e2:8c:d9:fc:38:fc:
         66:79:32:f8:fe:c0:16:33:b2:00:b6:bb:0d:74:ed:df:fc:68:
         92:54:2f:e3:b6:e2:8f:9b:13:93:1d:53:40:c4:c1:d1:c4:55:
         fb:6f:42:16:48:4c:7e:18:59:69:75:0b:c6:0f:9c:53:d5:16:
         89:36:f9:de:6c:24:26:d7:b8:dd:b5:59:75:27:64:a4:a2:95:
         77:14:3c:80:80:eb:64:13:f1:18:f5:7f:ed:f0:e8:68:55:0b:
         9b:a2:9d:97:7e:f7:97:90:2f:ad:6b:2e:7b:41:18:1e:f9:d4:
         ba:fd:8d:64:2b:4d:db:96:e8:5c:5e:6b:10:9d:cf:68:91:cf:
         d8:f0:0e:7c:6a:7b:34:89:75:ba:a1:46:88:13:24:5d:b9:22:
         be:f3:e3:cb:51:c9:b5:35:d2:95:b6:2d:85:02:e1:3d:6a:bd:
         9c:e3:74:4c:d1:48:08:73:3a:24:94:47:75:ea:94:fd:08:5a:
         b8:f0:bd:b9:e3:2d:87:d9:e4:fa:96:96:62:2b:24:7d:0f:08:
         2a:39:73:29:31:a3:31:e5:ef:85:4c:eb:15:80:e0:fd:da:f2:
         bf:ee:54:9d:e1:38:d7:04:65:25:61:50:01:87:f6:a6:04:ad:
         57:cb:53:8f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIURlw2fu9EYCVVCz4bvnHpVJXedGUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDFBODE4ODE1RjIyQ0NDMkM4NzM4RjA0MjExQkJDODlG
ODRDRkFGMjAeFw0yNjA5MDQxMjQxNDFaFw0yNzA5MDMxMjQ2NDFaMDMxMTAvBgNV
BAMTKDM3Q0MzRjlEQ0VCRTc3N0U0NjkxRjA0MjBBRUI3MEY5MUNGNzU2NDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTXfndoTz+mz3KUQWuqdg94hhV
oWmve97T5EbSQ0p7mNcpAMv176sKrJro+ggzq9zQKoILoL3KBlfqKR8JWf86nD40
c7+O/7zUIjHE43/zzkoTRbrNaZ7JtXSvmdYJHU46NbBmr0N/Yc5vp5kbBvNojMtQ
GcHhoI8Vb7y6N1lOxR2G32AjTVSGW5nsEsiNDu5BcvvAzRyKL/ZjtU9edZTUaab1
TslIbSDs0zSBHaBt1+C8ADsKcM31dYx8npOrFi0Daa3iIdszx8F7OfmUc5R89zVG
PeOIdtZGsRkJ4ei/2zHTeo7+IPwH3Chgh+eN7r4CLGr/VL9jBnWo7KyP+xOFAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUN8w/nc6+d35GkfBCCutw+Rz3VkgwHwYDVR0j
BBgwFoAU0agYgV8izMLIc48EIRu8ifhM+vIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRmhvbjQyajJ5bm12S1c3RENHWHFTUU5XaVg3U0c4Q0hnUTh5aExicmVu
V2ovMS9EMUE4MTg4MTVGMjJDQ0MyQzg3MzhGMDQyMTFCQkM4OUY4NENGQUYyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0QxQTgxODgxNUYyMkNDQzJD
ODczOEYwNDIxMUJCQzg5Rjg0Q0ZBRjIuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Zob240MmoyeW5tdktXN0RDR1hxU1FOV2lYN1NHOENIZ1E4eWhMYnJlbldqLzEv
MzEzODM3MmUzMTMwMzIyZTM0MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzIzNjM5Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC7ZiswDQYJKoZIhvcNAQELBQADggEBAEDX90dz
woNiObE63uKM2fw4/GZ5Mvj+wBYzsgC2uw107d/8aJJUL+O24o+bE5MdU0DEwdHE
VftvQhZITH4YWWl1C8YPnFPVFok2+d5sJCbXuN21WXUnZKSilXcUPICA62QT8Rj1
f+3w6GhVC5uinZd+95eQL61rLntBGB751Lr9jWQrTduW6FxeaxCdz2iRz9jwDnxq
ezSJdbqhRogTJF25Ir7z48tRybU10pW2LYUC4T1qvZzjdEzRSAhzOiSUR3XqlP0I
WrjwvbnjLYfZ5PqWlmIrJH0PCCo5cykxozHl74VM6xWA4P3a8r/uVJ3hONcEZSVh
UAGH9qYErVfLU48=
-----END CERTIFICATE-----