Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/0/323830343a363237343a3a2f33322d3438203d3e20323639323938.roa
File:                     323830343a363237343a3a2f33322d3438203d3e20323639323938.roa (raw, json)
Hash identifier:          Al8RQ4C+9BshSw1I1gfQu+WtUWtrm4GHlV33zoLaURQ=
Subject key identifier:   3D:86:06:AE:E8:92:F7:21:56:04:71:34:93:F8:D4:36:CB:62:6C:3C
Certificate issuer:       /CN=BDF780A1AD20031A92186F4B5C02F049FB8A7D26
Certificate serial:       55669B3B3A63BC72D8C4592183208A013C2FE13B
Authority key identifier: BD:F7:80:A1:AD:20:03:1A:92:18:6F:4B:5C:02:F0:49:FB:8A:7D:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDF780A1AD20031A92186F4B5C02F049FB8A7D26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/0/323830343a363237343a3a2f33322d3438203d3e20323639323938.roa
Signing time:             Mon 16 Mar 2026 20:33:51 +0000
ROA not before:           Mon 16 Mar 2026 20:28:51 +0000
ROA not after:            Mon 15 Mar 2027 20:33:51 +0000
asID:                     269298
IP address blocks:        2804:6274::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:66:9b:3b:3a:63:bc:72:d8:c4:59:21:83:20:8a:01:3c:2f:e1:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BDF780A1AD20031A92186F4B5C02F049FB8A7D26
        Validity
            Not Before: Mar 16 20:28:51 2026 GMT
            Not After : Mar 15 20:33:51 2027 GMT
        Subject: CN=3D8606AEE892F7215604713493F8D436CB626C3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:af:15:3c:e8:8e:8f:77:9f:be:6b:d2:b4:b2:
                    d8:9a:68:4a:aa:45:33:17:b2:8f:4b:b5:8f:3e:95:
                    01:e6:b0:77:a0:2f:ad:d3:fb:28:d8:03:58:74:aa:
                    d8:f3:ae:2a:74:cc:0f:95:ef:d8:01:62:99:1e:c4:
                    19:c8:44:64:bd:ef:a8:f2:fa:b2:77:fb:7b:fd:8a:
                    3b:1e:a3:e8:27:4b:80:f8:b3:da:02:4b:e2:57:18:
                    99:7c:e3:6c:a1:80:a3:0a:55:6c:73:95:25:94:e2:
                    2a:86:b7:e6:31:c0:40:0a:83:16:24:58:a4:51:f1:
                    0d:79:d4:f4:08:ed:cc:b4:2f:2d:be:87:53:7f:77:
                    e2:79:bf:33:5d:c9:9a:22:8f:f6:df:c6:d8:14:24:
                    74:e5:de:48:6e:4d:cc:64:0a:ea:42:1c:1a:73:02:
                    d1:2f:42:27:35:ff:fd:a8:06:70:87:67:ed:5c:a2:
                    0b:22:39:53:77:84:60:cc:18:a4:bc:28:23:8d:5e:
                    5e:c1:f7:df:2e:68:14:34:fa:33:f2:49:a8:a1:f0:
                    cf:fc:6a:8e:6a:75:c6:0c:40:3c:6b:d3:7b:d5:c8:
                    b0:63:5e:97:e6:8d:0c:31:36:07:0a:ab:2e:90:b1:
                    b4:0f:6f:5a:b5:20:10:7d:bf:48:f0:55:92:0b:70:
                    f5:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:86:06:AE:E8:92:F7:21:56:04:71:34:93:F8:D4:36:CB:62:6C:3C
            X509v3 Authority Key Identifier:
                keyid:BD:F7:80:A1:AD:20:03:1A:92:18:6F:4B:5C:02:F0:49:FB:8A:7D:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/0/BDF780A1AD20031A92186F4B5C02F049FB8A7D26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BDF780A1AD20031A92186F4B5C02F049FB8A7D26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FdYoCokgmpFtDToihFosFna8FCvdbCe8no8RQu6ieG8/0/323830343a363237343a3a2f33322d3438203d3e20323639323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6274::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:bf:13:05:ea:8c:c9:fd:43:ea:91:5f:84:05:98:2b:ad:0a:
         f3:f7:e7:31:72:90:3a:44:6b:10:28:df:e7:04:75:1a:cd:1c:
         41:ad:7b:53:89:19:9b:3a:b2:96:89:3b:48:f7:59:17:e5:b0:
         50:7b:5d:ea:0b:36:11:ca:fd:da:5e:48:e8:c4:36:81:ac:8b:
         18:53:60:9b:9c:84:35:c2:79:11:ff:b6:79:9f:eb:16:23:7f:
         11:a5:41:de:2e:f5:11:09:16:94:0d:e5:e2:5b:45:ab:9d:b3:
         30:16:b2:c7:52:59:b4:48:40:7d:06:ac:82:18:ac:52:77:64:
         82:41:e2:05:7b:68:b0:ed:ad:ed:8a:98:33:7a:58:66:02:6a:
         0d:76:98:73:5a:64:67:78:2e:67:2a:cc:98:2c:24:66:5a:5a:
         33:ca:3e:0c:2a:7e:19:22:fc:fe:36:f3:b1:c2:df:db:ca:78:
         f4:57:26:aa:3a:e8:79:bb:bc:99:9c:6b:54:89:74:fc:ce:49:
         27:fe:6e:c5:a1:13:70:12:17:fb:c0:35:12:7d:80:5e:5b:c3:
         b9:45:a3:37:0d:b4:97:1b:db:a7:d0:9c:bc:59:8d:3f:f4:85:
         5c:6c:59:55:b5:40:2e:0b:a0:38:8a:66:15:0b:e8:a1:0b:0f:
         44:08:28:d3
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUVWabOzpjvHLYxFkhgyCKATwv4TswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkRGNzgwQTFBRDIwMDMxQTkyMTg2RjRCNUMwMkYwNDlG
QjhBN0QyNjAeFw0yNjAzMTYyMDI4NTFaFw0yNzAzMTUyMDMzNTFaMDMxMTAvBgNV
BAMTKDNEODYwNkFFRTg5MkY3MjE1NjA0NzEzNDkzRjhENDM2Q0I2MjZDM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDArxU86I6Pd5++a9K0stiaaEqq
RTMXso9LtY8+lQHmsHegL63T+yjYA1h0qtjzrip0zA+V79gBYpkexBnIRGS976jy
+rJ3+3v9ijseo+gnS4D4s9oCS+JXGJl842yhgKMKVWxzlSWU4iqGt+YxwEAKgxYk
WKRR8Q151PQI7cy0Ly2+h1N/d+J5vzNdyZoij/bfxtgUJHTl3khuTcxkCupCHBpz
AtEvQic1//2oBnCHZ+1cogsiOVN3hGDMGKS8KCONXl7B998uaBQ0+jPySaih8M/8
ao5qdcYMQDxr03vVyLBjXpfmjQwxNgcKqy6QsbQPb1q1IBB9v0jwVZILcPU3AgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUPYYGruiS9yFWBHE0k/jUNstibDwwHwYDVR0j
BBgwFoAUvfeAoa0gAxqSGG9LXALwSfuKfSYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkZkWW9Db2tnbXBGdERUb2loRm9zRm5hOEZDdmRiQ2U4bm84UlF1Nmll
RzgvMC9CREY3ODBBMUFEMjAwMzFBOTIxODZGNEI1QzAyRjA0OUZCOEE3RDI2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0JERjc4MEExQUQyMDAzMUE5
MjE4NkY0QjVDMDJGMDQ5RkI4QTdEMjYuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJGZFlvQ29rZ21wRnREVG9paEZvc0ZuYThGQ3ZkYkNlOG5vOFJRdTZpZUc4LzAv
MzIzODMwMzQzYTM2MzIzNzM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM5
MzIzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARidDANBgkqhkiG9w0BAQsFAAOCAQEAYr8TBeqM
yf1D6pFfhAWYK60K8/fnMXKQOkRrECjf5wR1Gs0cQa17U4kZmzqylok7SPdZF+Ww
UHtd6gs2Ecr92l5I6MQ2gayLGFNgm5yENcJ5Ef+2eZ/rFiN/EaVB3i71EQkWlA3l
4ltFq52zMBayx1JZtEhAfQasghisUndkgkHiBXtosO2t7YqYM3pYZgJqDXaYc1pk
Z3guZyrMmCwkZlpaM8o+DCp+GSL8/jbzscLf28p49Fcmqjroebu8mZxrVIl0/M5J
J/5uxaETcBIX+8A1En2AXlvDuUWjNw20lxvbp9CcvFmNP/SFXGxZVbVALgugOIpm
FQvooQsPRAgo0w==
-----END CERTIFICATE-----
Generated at Wed Apr 8 11:07:55 2026 by rpki-client