Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/0/323830343a333337343a3a2f33322d3438203d3e20323635333937.roa
File:                     323830343a333337343a3a2f33322d3438203d3e20323635333937.roa (raw, json)
Hash identifier:          mrpRCQ8z1aBdmzCtta2NRuyURsHcEdSb7nHqlA/eQp0=
Subject key identifier:   09:CF:28:68:9B:33:4E:45:75:27:80:52:0F:33:E9:79:2A:29:82:CD
Certificate issuer:       /CN=B377B7482ED7F503357F5828A4FA2A53C077B23A
Certificate serial:       1AF8186B91BA2A93C0531AE609441382AE79F046
Authority key identifier: B3:77:B7:48:2E:D7:F5:03:35:7F:58:28:A4:FA:2A:53:C0:77:B2:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B377B7482ED7F503357F5828A4FA2A53C077B23A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/0/323830343a333337343a3a2f33322d3438203d3e20323635333937.roa
Signing time:             Mon 24 Aug 2026 21:11:09 +0000
ROA not before:           Mon 24 Aug 2026 21:06:09 +0000
ROA not after:            Mon 23 Aug 2027 21:11:09 +0000
asID:                     265397
IP address blocks:        2804:3374::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:f8:18:6b:91:ba:2a:93:c0:53:1a:e6:09:44:13:82:ae:79:f0:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B377B7482ED7F503357F5828A4FA2A53C077B23A
        Validity
            Not Before: Aug 24 21:06:09 2026 GMT
            Not After : Aug 23 21:11:09 2027 GMT
        Subject: CN=09CF28689B334E45752780520F33E9792A2982CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d7:ab:07:9c:d1:08:30:90:cf:da:44:a4:b0:
                    a7:ca:4f:cb:3b:fa:2f:bd:d6:6c:d6:d9:52:fe:9f:
                    b1:45:28:a9:41:63:00:09:03:86:77:94:04:af:04:
                    db:fa:a3:8a:1a:88:68:ba:21:04:b7:ba:01:b3:2c:
                    e0:a4:53:69:57:7d:47:71:33:26:3c:ff:f0:aa:dd:
                    96:97:90:91:d5:6a:8c:51:cf:b9:46:1a:a9:bb:c9:
                    db:60:0c:90:02:86:81:78:ff:e0:32:d5:96:06:5d:
                    db:e1:b4:b9:af:dd:f9:22:13:80:57:4c:ae:18:85:
                    ef:08:39:65:f8:67:6e:cc:95:ff:8e:90:5f:2a:48:
                    a0:4a:f9:72:43:8f:ae:71:97:00:4f:9b:24:98:4d:
                    20:0d:03:6b:16:7b:b2:4c:ca:29:35:33:ae:16:08:
                    47:c9:33:8e:cd:a7:46:14:50:98:4e:df:9f:6d:9f:
                    c7:55:12:16:f0:3d:ef:9a:0f:4e:76:ff:a9:82:27:
                    6c:b4:6b:95:8f:5f:e9:11:c1:70:78:92:12:e2:ac:
                    80:00:58:2b:f6:f6:62:6a:b2:5e:f6:45:2a:ce:f9:
                    72:b2:69:ed:0c:1d:a1:ea:fb:f0:b0:d2:1d:b3:9d:
                    f6:4c:72:a1:dc:84:52:24:37:ff:34:de:c8:01:1b:
                    2c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:CF:28:68:9B:33:4E:45:75:27:80:52:0F:33:E9:79:2A:29:82:CD
            X509v3 Authority Key Identifier:
                keyid:B3:77:B7:48:2E:D7:F5:03:35:7F:58:28:A4:FA:2A:53:C0:77:B2:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/0/B377B7482ED7F503357F5828A4FA2A53C077B23A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B377B7482ED7F503357F5828A4FA2A53C077B23A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dLRE4xNxAnwFpqpGa7y7GfAUysLtxEbbL4kpd3eWTUz/0/323830343a333337343a3a2f33322d3438203d3e20323635333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3374::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:fc:75:6d:3c:e0:de:3c:d8:17:2a:85:55:8e:34:44:60:22:
         f0:00:ad:33:c1:e0:b7:a9:04:b6:9f:2f:79:fa:01:0c:23:d1:
         ab:62:13:94:ea:63:f6:a8:7a:21:08:4b:46:cd:4a:d6:61:bf:
         8b:c4:48:84:c4:a6:df:2e:0c:63:c3:a6:ed:96:93:24:96:6e:
         aa:22:8c:b4:cd:20:a2:ba:c8:4a:8f:76:c0:64:20:ce:f6:b0:
         19:40:6e:9d:ef:aa:83:e6:40:2d:7f:22:40:a4:e5:2b:b5:b1:
         b7:09:e9:b1:23:c6:6a:3a:9f:f6:21:94:9d:63:ee:24:fe:34:
         d7:5c:40:ad:af:71:62:02:47:0d:b6:b9:bd:d7:05:80:0e:af:
         72:f5:82:e3:9d:b2:a7:63:ac:1e:6e:a0:24:c2:8c:8b:85:67:
         97:a1:aa:57:c1:9c:b6:e0:67:82:bf:6c:c2:30:8a:b4:4a:12:
         c9:ea:c1:cb:96:d4:b7:d0:bb:7c:3f:fa:8b:de:82:9c:94:ab:
         18:21:19:58:73:14:7f:f5:eb:96:f4:59:d3:60:9f:cf:38:ca:
         7b:f9:72:e7:2c:df:2b:fe:69:dd:e2:0a:0b:cc:67:98:34:8b:
         bd:e3:2c:a8:9a:1e:e0:da:60:a8:cd:3e:27:2c:bb:fc:04:d0:
         64:3f:dd:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----