Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/323830343a3931383a3a2f33322d3438203d3e203238353834.roa
File:                     323830343a3931383a3a2f33322d3438203d3e203238353834.roa (raw, json)
Hash identifier:          ZfWZQweInD6YoBD1nhYlcoxGIbbZ05ldfhvETtUdvhU=
Subject key identifier:   46:94:4F:DD:44:A8:CA:C4:E8:1F:6D:17:3B:E6:50:CE:28:11:C8:C1
Certificate issuer:       /CN=B3EC7F5F7D6B690F3B724BC2B063C17F2D5419B9
Certificate serial:       08CEE1757609673E274527A557F5C8D3846EC2CA
Authority key identifier: B3:EC:7F:5F:7D:6B:69:0F:3B:72:4B:C2:B0:63:C1:7F:2D:54:19:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3EC7F5F7D6B690F3B724BC2B063C17F2D5419B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/323830343a3931383a3a2f33322d3438203d3e203238353834.roa
Signing time:             Sat 04 Apr 2026 17:26:27 +0000
ROA not before:           Sat 04 Apr 2026 17:21:27 +0000
ROA not after:            Sat 03 Apr 2027 17:26:27 +0000
asID:                     28584
IP address blocks:        2804:918::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:ce:e1:75:76:09:67:3e:27:45:27:a5:57:f5:c8:d3:84:6e:c2:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3EC7F5F7D6B690F3B724BC2B063C17F2D5419B9
        Validity
            Not Before: Apr  4 17:21:27 2026 GMT
            Not After : Apr  3 17:26:27 2027 GMT
        Subject: CN=46944FDD44A8CAC4E81F6D173BE650CE2811C8C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c5:d0:6c:97:65:71:e7:95:0d:40:1a:fd:fa:
                    a1:65:f8:42:04:43:a1:c9:40:bb:61:8e:78:3b:77:
                    4c:82:ba:54:e2:51:ae:7a:68:40:02:5a:c1:f1:b3:
                    82:e7:4b:c2:d5:2f:dd:cc:39:1a:ca:be:70:9d:a3:
                    1a:a3:39:a8:54:7d:c6:bb:cd:cb:e8:c6:89:6c:04:
                    55:25:34:b7:c7:58:7a:2f:f4:d7:a1:d1:97:3e:a9:
                    11:76:83:db:90:46:42:43:9d:d3:0d:86:23:50:6e:
                    fd:55:24:a3:1a:2d:b7:97:b0:5c:2a:82:3b:0b:1a:
                    ed:95:df:83:bd:16:f4:1a:52:43:b3:58:e4:4f:cb:
                    6b:4e:45:7a:0c:5e:04:47:f2:0e:a5:67:20:bd:5c:
                    f5:5b:9e:80:dd:82:70:b7:84:4e:a1:fa:3b:11:40:
                    6b:6c:62:8c:56:21:5b:95:08:3f:db:80:0d:85:c9:
                    95:8a:92:45:ff:78:2f:31:86:d1:28:08:ac:d7:d6:
                    32:64:ea:eb:25:fa:de:9b:7f:81:fc:de:cb:74:94:
                    fc:ec:54:c3:31:e5:c1:74:e8:d8:a0:28:cc:26:c4:
                    cc:28:7f:f9:7e:63:32:54:2d:8c:c3:be:04:4f:32:
                    c8:f1:8f:d7:fa:81:fc:e3:cc:e4:b3:f9:55:0f:53:
                    e0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:94:4F:DD:44:A8:CA:C4:E8:1F:6D:17:3B:E6:50:CE:28:11:C8:C1
            X509v3 Authority Key Identifier:
                keyid:B3:EC:7F:5F:7D:6B:69:0F:3B:72:4B:C2:B0:63:C1:7F:2D:54:19:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/B3EC7F5F7D6B690F3B724BC2B063C17F2D5419B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3EC7F5F7D6B690F3B724BC2B063C17F2D5419B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2AmUc2rt8EUSnDQoRrYggQRM4LVmnd3gfNtUsgp1XQkP/0/323830343a3931383a3a2f33322d3438203d3e203238353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:918::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:2c:50:c2:1c:0f:d7:86:76:3d:07:fe:44:a5:5b:28:8e:5b:
         6c:a4:9d:35:1c:16:16:59:73:bc:aa:f5:41:15:16:32:dd:8c:
         ea:f8:d9:45:be:d3:95:1e:33:d4:c7:ab:2f:a8:4b:d8:93:20:
         39:fc:26:ae:b2:e7:5b:67:38:1c:36:f1:70:fe:15:81:f3:4f:
         09:4f:f0:da:a5:4a:0d:e2:e5:2e:17:8b:d3:96:04:11:96:23:
         54:44:97:b0:52:d5:28:d0:de:7f:2a:c2:1b:52:ad:75:6f:3d:
         db:56:ea:99:bd:b7:db:36:55:cf:a8:78:a8:53:ad:69:c4:33:
         f3:14:55:93:25:26:17:e7:ee:90:af:46:b9:07:32:4a:ab:49:
         94:cf:a8:23:d7:71:8e:d5:da:44:eb:89:e7:b2:23:9a:96:0a:
         4b:36:7b:66:0d:70:36:0b:ba:dc:39:b2:72:00:80:6a:38:7e:
         77:24:0c:56:50:de:e4:35:e8:29:14:ae:ce:6f:04:db:63:ba:
         5a:f2:aa:0d:80:da:26:82:a7:9b:96:f9:40:e1:e8:63:68:3e:
         da:32:dd:37:5d:fa:62:23:18:0b:b9:c2:82:c4:a3:1c:47:8f:
         14:9a:35:9c:eb:ce:45:1c:43:0d:1e:5e:0b:61:81:06:5d:85:
         79:76:0b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 19:30:26 2026 by rpki-client