Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/0/323830343a373263633a3a2f33322d3332203d3e20323730383736.roa
File:                     323830343a373263633a3a2f33322d3332203d3e20323730383736.roa (raw, json)
Hash identifier:          awKKT5ZhkNnidyuPx4dEzyRrhNbQVbT72vM96juPJao=
Subject key identifier:   AE:03:91:E8:21:13:B1:6F:5A:95:C5:58:96:D8:2C:53:1D:D1:1E:70
Certificate issuer:       /CN=215EFBF4ED052171AF3D905A95BF8D33E800A9FE
Certificate serial:       2486CE688478FA9D0E49C9914DD8EABF5CBF944A
Authority key identifier: 21:5E:FB:F4:ED:05:21:71:AF:3D:90:5A:95:BF:8D:33:E8:00:A9:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/215EFBF4ED052171AF3D905A95BF8D33E800A9FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/0/323830343a373263633a3a2f33322d3332203d3e20323730383736.roa
Signing time:             Thu 09 Jul 2026 20:11:38 +0000
ROA not before:           Thu 09 Jul 2026 20:06:38 +0000
ROA not after:            Thu 08 Jul 2027 20:11:38 +0000
asID:                     270876
IP address blocks:        2804:72cc::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:86:ce:68:84:78:fa:9d:0e:49:c9:91:4d:d8:ea:bf:5c:bf:94:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=215EFBF4ED052171AF3D905A95BF8D33E800A9FE
        Validity
            Not Before: Jul  9 20:06:38 2026 GMT
            Not After : Jul  8 20:11:38 2027 GMT
        Subject: CN=AE0391E82113B16F5A95C55896D82C531DD11E70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8c:90:03:65:b3:60:57:bd:0e:62:df:72:57:
                    d6:07:39:e6:b9:79:cc:bc:48:5a:2b:a5:8b:b2:88:
                    a0:84:99:8e:51:1e:8f:69:7a:37:8f:bd:7b:ac:40:
                    80:4a:6d:13:a4:f4:b3:a0:78:b9:57:d3:74:99:17:
                    da:16:c9:53:31:35:7e:02:83:f0:fd:00:0c:84:20:
                    ed:6f:12:62:89:6d:eb:ef:3f:cb:57:8b:cb:9f:6a:
                    e5:a7:1c:2c:a5:a9:73:2e:87:cf:e6:c6:77:39:cd:
                    a1:0b:42:18:a4:0c:e2:19:7b:fb:4e:c6:d0:d6:d8:
                    23:a7:0b:8b:5e:e7:87:6a:87:e7:b4:95:90:6b:ae:
                    99:b4:d6:86:2b:ff:9b:f0:84:3b:be:7f:18:af:c4:
                    a6:94:00:37:2b:23:53:37:66:ef:fa:ba:99:22:a7:
                    88:c7:94:27:08:40:fc:bc:d6:87:5e:d7:e0:80:0c:
                    7c:7a:22:5a:17:5c:43:32:94:86:d4:94:58:b8:07:
                    89:5d:0c:1d:15:20:a7:a2:c1:cf:5e:49:f1:5f:49:
                    b6:8b:2c:5e:38:11:88:58:e2:57:57:69:4a:83:f0:
                    b7:2c:a3:3c:bd:15:9d:8b:54:b8:f7:f0:d0:0b:25:
                    92:d6:b3:64:84:6a:b4:38:b8:1e:5e:22:a2:31:ec:
                    a8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:03:91:E8:21:13:B1:6F:5A:95:C5:58:96:D8:2C:53:1D:D1:1E:70
            X509v3 Authority Key Identifier:
                keyid:21:5E:FB:F4:ED:05:21:71:AF:3D:90:5A:95:BF:8D:33:E8:00:A9:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/0/215EFBF4ED052171AF3D905A95BF8D33E800A9FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/215EFBF4ED052171AF3D905A95BF8D33E800A9FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2P7yCmniNCyWZ9ZYoFVnHsvV6wWrGLZ1mocBpUEWZRCQ/0/323830343a373263633a3a2f33322d3332203d3e20323730383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:72cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:64:56:bf:ef:3c:56:e8:9f:e1:85:6f:80:88:1c:86:36:2f:
         a2:bd:e4:80:b6:04:0e:19:67:3f:66:ea:9a:25:a8:be:aa:d8:
         c1:47:5c:c2:7c:36:f1:4e:43:a1:96:b1:9e:91:fc:13:93:c8:
         e8:24:8b:6b:4e:04:22:67:22:01:b0:4d:be:9b:c4:ef:9f:65:
         02:6b:b4:7a:d6:05:7d:97:14:45:01:4f:49:80:fe:62:0e:0b:
         c6:03:a5:62:1b:e6:d5:21:de:a2:f6:fe:a1:b0:28:ac:e4:78:
         41:c9:e4:df:05:8c:4c:56:93:bc:72:9f:f2:3a:68:bc:40:2f:
         5d:99:fc:92:44:14:b0:18:20:d0:27:15:78:a9:07:ec:f0:d2:
         10:4f:bd:ee:93:ff:25:a2:0b:be:4e:d2:61:4c:f5:4f:00:5c:
         10:6c:27:d3:71:8e:ad:c9:9a:26:6a:93:35:79:a4:df:ff:92:
         3b:65:90:ea:d0:67:2b:d8:08:ae:35:89:a8:35:92:f9:7c:ba:
         11:ea:44:ae:c8:9e:25:86:07:11:65:16:07:f1:67:57:a6:51:
         39:c5:9f:69:13:da:b6:62:d1:eb:2e:64:b9:91:47:72:4b:4b:
         6f:b3:45:63:c8:c2:1c:d6:42:96:cf:d6:fc:e2:a9:cd:19:8f:
         48:21:18:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----