Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/0/323830343a323761383a3a2f33322d3332203d3e20323633393135.roa
File:                     323830343a323761383a3a2f33322d3332203d3e20323633393135.roa (raw, json)
Hash identifier:          KoKZ0ScYBw1rjqvI3C/g35o+oNpcAt3vMA7SH1CL+cg=
Subject key identifier:   E7:8A:E1:9C:20:85:DE:E5:0D:BF:9D:B4:9C:C6:7A:B5:A1:07:DA:54
Certificate issuer:       /CN=DCF2B01B127E8147448A26DC2DD6E136430B7F01
Certificate serial:       0B5527B0282AED317F7F9B38465F000B64410541
Authority key identifier: DC:F2:B0:1B:12:7E:81:47:44:8A:26:DC:2D:D6:E1:36:43:0B:7F:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCF2B01B127E8147448A26DC2DD6E136430B7F01.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/0/323830343a323761383a3a2f33322d3332203d3e20323633393135.roa
Signing time:             Thu 09 Apr 2026 13:12:07 +0000
ROA not before:           Thu 09 Apr 2026 13:07:07 +0000
ROA not after:            Thu 08 Apr 2027 13:12:07 +0000
asID:                     263915
IP address blocks:        2804:27a8::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:55:27:b0:28:2a:ed:31:7f:7f:9b:38:46:5f:00:0b:64:41:05:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCF2B01B127E8147448A26DC2DD6E136430B7F01
        Validity
            Not Before: Apr  9 13:07:07 2026 GMT
            Not After : Apr  8 13:12:07 2027 GMT
        Subject: CN=E78AE19C2085DEE50DBF9DB49CC67AB5A107DA54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d1:cd:3f:d9:74:9d:85:4e:d8:96:13:5c:13:
                    04:38:65:3f:4b:28:1a:95:6d:43:b6:27:76:e6:d7:
                    42:c4:64:fd:ac:bc:75:38:bc:09:5c:92:e1:b4:bb:
                    c4:bd:51:6b:02:e0:f4:a7:97:8c:d4:c1:ff:0d:24:
                    8d:33:5a:c4:92:c6:ab:42:d2:56:36:7d:1e:d7:f7:
                    32:c1:d2:f7:93:cd:81:30:41:7e:21:0a:d5:08:00:
                    d2:bc:e9:10:00:18:09:73:65:e4:46:96:42:30:fc:
                    9d:55:fa:4e:01:03:55:3d:cc:b9:78:89:c8:86:24:
                    f3:65:36:36:39:09:6f:df:9a:b7:3f:da:85:3b:44:
                    26:c2:2a:6a:94:4e:2f:04:bb:4a:b1:df:7c:51:fb:
                    14:73:bc:6c:62:a1:aa:6d:e1:bc:c8:26:89:f1:6b:
                    91:8f:1c:64:66:38:07:73:9f:ee:1a:6c:1b:2d:a7:
                    67:ad:8f:80:22:b8:dc:40:12:ce:f4:86:52:d1:b3:
                    9c:65:7f:af:55:33:e1:b7:f0:bf:60:07:92:f9:68:
                    d2:87:6b:15:10:32:61:82:6c:e4:79:1e:8d:7f:a8:
                    e3:d1:bf:5e:f2:e7:72:7a:2c:3f:6c:58:fd:8d:c0:
                    16:cc:fb:9d:ee:9f:b6:cd:53:a6:b7:82:1e:dc:b8:
                    b6:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:8A:E1:9C:20:85:DE:E5:0D:BF:9D:B4:9C:C6:7A:B5:A1:07:DA:54
            X509v3 Authority Key Identifier:
                keyid:DC:F2:B0:1B:12:7E:81:47:44:8A:26:DC:2D:D6:E1:36:43:0B:7F:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/0/DCF2B01B127E8147448A26DC2DD6E136430B7F01.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DCF2B01B127E8147448A26DC2DD6E136430B7F01.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3btiwFZcamx8zrAmyqUeph6xdDVZuHXsxe68uQLfxEGx/0/323830343a323761383a3a2f33322d3332203d3e20323633393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:ea:42:f4:b8:40:10:db:ba:71:cf:9c:f4:5c:43:15:e7:c6:
         1b:10:42:33:14:03:77:45:33:46:ce:dd:e1:90:57:5d:cd:df:
         61:46:1d:2c:d9:37:17:3c:03:a6:da:87:a2:88:bd:0d:85:c7:
         fb:16:79:cb:8a:de:35:78:31:19:82:d3:14:55:c3:42:41:d8:
         5d:3e:ba:b7:88:17:80:ef:bb:d4:b3:72:71:94:d0:99:36:26:
         b1:c0:9b:7a:66:8c:0d:9d:12:ea:10:be:39:ed:a9:14:54:69:
         9c:25:4b:8e:83:15:ec:ff:c1:c6:09:8b:63:ab:32:b2:2d:f6:
         ba:9c:7e:a9:22:5c:b7:e0:48:dd:98:67:b4:d9:22:3f:04:d9:
         80:b8:c9:e5:74:a0:f0:a4:63:03:66:67:86:f1:21:82:b4:fd:
         97:5f:75:c4:0f:19:f2:8b:a9:6f:ba:20:be:af:4f:8b:10:a1:
         2a:3c:ba:76:7e:3e:00:24:70:cf:2b:94:5b:fd:d6:e5:f9:ed:
         f1:f8:7d:40:76:f2:f3:24:4b:ab:0c:14:88:20:03:17:f1:f8:
         83:0d:d4:14:ba:fd:67:16:93:7b:4f:c3:1b:0b:23:d5:6c:da:
         1d:41:b5:0e:1f:1c:f6:d9:06:b5:de:73:82:37:1b:64:bd:33:
         b5:d5:a9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----