Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0/323830343a336461383a3a2f33322d313238203d3e20323636353435.roa
File:                     323830343a336461383a3a2f33322d313238203d3e20323636353435.roa (raw, json)
Hash identifier:          Rp3uxgWvE3MRwSZN/sA04DeLD9Un8wQiBDcX9/uF+74=
Subject key identifier:   A2:67:C8:CB:B3:B6:A0:58:68:30:86:7D:BF:B1:49:B0:81:D0:13:96
Certificate issuer:       /CN=4BDF84FC21F1098668A6623C8310F7CB397FD86A
Certificate serial:       2D53A4CC6BE8B3B030BBA21A9CAE38D94626B9CA
Authority key identifier: 4B:DF:84:FC:21:F1:09:86:68:A6:62:3C:83:10:F7:CB:39:7F:D8:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BDF84FC21F1098668A6623C8310F7CB397FD86A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0/323830343a336461383a3a2f33322d313238203d3e20323636353435.roa
Signing time:             Fri 30 Jan 2026 23:32:49 +0000
ROA not before:           Fri 30 Jan 2026 23:27:49 +0000
ROA not after:            Fri 29 Jan 2027 23:32:49 +0000
asID:                     266545
IP address blocks:        2804:3da8::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:53:a4:cc:6b:e8:b3:b0:30:bb:a2:1a:9c:ae:38:d9:46:26:b9:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BDF84FC21F1098668A6623C8310F7CB397FD86A
        Validity
            Not Before: Jan 30 23:27:49 2026 GMT
            Not After : Jan 29 23:32:49 2027 GMT
        Subject: CN=A267C8CBB3B6A0586830867DBFB149B081D01396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:78:89:b4:67:9f:73:7d:00:91:73:91:ff:e6:
                    eb:f5:2e:64:4b:8e:80:2a:99:0e:a0:b9:b9:48:41:
                    30:b9:b3:90:7e:6d:e5:e6:c5:93:d9:c4:33:d2:4d:
                    44:b5:2a:ec:fa:e5:8a:90:df:95:52:df:bc:a8:66:
                    f6:88:28:93:22:94:15:41:3e:cb:cf:53:ee:e6:77:
                    23:b2:a6:c7:03:1f:b9:fe:87:56:ea:54:d3:a6:bc:
                    06:93:eb:55:86:a6:68:16:ce:19:36:c1:99:f3:d8:
                    c1:8d:e9:f4:ed:6b:c0:c2:9b:6b:77:b6:af:7c:20:
                    5a:87:42:f6:98:61:68:c6:5b:6b:13:ad:d3:20:39:
                    dd:91:e8:30:27:eb:bd:4c:ac:e1:38:14:82:a4:84:
                    e1:44:ce:8c:b1:89:5f:d6:6e:18:78:5c:2c:ab:50:
                    8e:25:0f:09:86:fa:c0:de:dc:e5:b1:55:c6:a0:64:
                    3d:67:95:96:10:36:6a:b3:c0:eb:48:e0:bd:83:e0:
                    3a:06:4e:74:e3:ef:cf:a6:31:d6:96:42:6b:34:2c:
                    a1:3e:24:44:3f:a4:4d:f7:08:cc:8b:71:5d:9d:76:
                    5d:65:86:78:04:b2:8a:38:e6:03:bc:b5:5e:8a:3b:
                    0e:72:ca:4b:63:9e:70:94:0c:2d:a0:8c:85:1a:34:
                    de:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:67:C8:CB:B3:B6:A0:58:68:30:86:7D:BF:B1:49:B0:81:D0:13:96
            X509v3 Authority Key Identifier:
                keyid:4B:DF:84:FC:21:F1:09:86:68:A6:62:3C:83:10:F7:CB:39:7F:D8:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0/4BDF84FC21F1098668A6623C8310F7CB397FD86A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4BDF84FC21F1098668A6623C8310F7CB397FD86A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4W23Nei5DvzXXbxwr55wwstVsS1teVmfJCtpHHRXBaM6/0/323830343a336461383a3a2f33322d313238203d3e20323636353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3da8::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:22:07:fe:3e:96:04:bf:50:e5:ca:59:10:57:84:fc:62:30:
         b3:da:0c:78:83:66:b3:b5:0a:ef:4d:a9:bb:92:16:8f:e6:e2:
         3b:1a:8c:59:29:d6:87:1d:d6:f8:ca:9d:4e:93:b8:a1:75:e2:
         1a:34:dd:ba:2e:9c:98:66:09:89:3d:27:9a:70:ad:df:69:cc:
         e8:0f:13:5b:7c:7a:23:8d:64:c3:26:65:0f:fc:8b:42:c2:16:
         12:a3:7f:02:ac:45:88:1e:3d:de:05:eb:7f:be:05:f2:aa:d1:
         27:b1:3b:4d:b7:4f:96:8d:28:88:6b:e9:63:b6:b7:4a:75:5c:
         c3:39:ea:2f:a1:17:02:9b:01:05:65:16:0c:15:21:cd:09:46:
         1d:db:27:1a:aa:61:79:8c:bf:fb:95:85:2c:b1:6f:d0:03:af:
         c7:a4:69:6a:81:a9:d4:86:5b:e0:8c:25:68:2f:92:a0:7a:32:
         d0:24:32:d8:02:97:70:72:1a:07:26:3c:ea:70:b6:96:a5:06:
         29:44:8d:ae:24:7e:9d:56:d6:e8:2e:2a:4c:82:9a:00:25:50:
         fb:00:5a:a5:b4:d9:d3:b0:53:37:a8:ae:0c:f9:38:52:ec:06:
         f2:c7:36:fb:6b:d3:42:3c:1d:fd:31:6f:d2:cd:eb:57:21:26:
         eb:01:c5:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 11:41:11 2026 by rpki-client