Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/0/323830343a343538633a3a2f33322d3332203d3e20323636393334.roa
File:                     323830343a343538633a3a2f33322d3332203d3e20323636393334.roa (raw, json)
Hash identifier:          1+I+TDwTNSqfMnYQxdj9UQbb957qNDv6ZTdpmRaR7fs=
Subject key identifier:   89:4C:44:41:50:11:3B:57:99:7C:7B:46:82:1F:FA:F1:A4:12:4B:00
Certificate issuer:       /CN=A8EB322DAEF01E5C8FCF7EB0871CEEB449936F8F
Certificate serial:       5BC1C7880A41A332EED82574A258B8C26EA60F7E
Authority key identifier: A8:EB:32:2D:AE:F0:1E:5C:8F:CF:7E:B0:87:1C:EE:B4:49:93:6F:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8EB322DAEF01E5C8FCF7EB0871CEEB449936F8F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/0/323830343a343538633a3a2f33322d3332203d3e20323636393334.roa
Signing time:             Tue 23 Jun 2026 20:00:55 +0000
ROA not before:           Tue 23 Jun 2026 19:55:55 +0000
ROA not after:            Tue 22 Jun 2027 20:00:55 +0000
asID:                     266934
IP address blocks:        2804:458c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:c1:c7:88:0a:41:a3:32:ee:d8:25:74:a2:58:b8:c2:6e:a6:0f:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8EB322DAEF01E5C8FCF7EB0871CEEB449936F8F
        Validity
            Not Before: Jun 23 19:55:55 2026 GMT
            Not After : Jun 22 20:00:55 2027 GMT
        Subject: CN=894C444150113B57997C7B46821FFAF1A4124B00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:fe:b4:83:87:1c:cb:45:2f:8a:fe:0f:b8:98:
                    ff:3d:84:21:9b:58:1a:cb:8e:93:22:bc:3c:2d:cd:
                    92:32:76:6b:3b:30:f5:f4:3f:38:57:91:7e:3c:07:
                    26:57:dd:61:26:65:28:8e:48:15:5c:39:3f:e1:83:
                    27:ac:04:4d:30:8b:cd:6b:01:cf:96:f4:d3:bd:cd:
                    7c:64:a7:29:9a:8e:05:e4:10:c0:6c:d8:f3:d5:36:
                    b9:21:7d:65:b6:d8:c9:9a:ab:a4:e5:29:e5:54:74:
                    75:ab:3f:2f:90:b5:70:25:e8:0e:42:58:b0:02:51:
                    03:53:7b:2e:00:e1:be:c0:4f:41:11:ed:27:19:5a:
                    39:15:76:0a:2b:b2:8f:a4:48:1b:cc:56:b4:f2:fd:
                    1b:93:4a:6e:b9:70:07:21:a8:98:75:5a:65:79:aa:
                    1c:a5:89:de:e4:d5:a2:05:1c:fe:02:75:cb:16:b7:
                    5a:13:75:22:7f:1e:8b:cf:5b:6f:96:b8:f9:02:01:
                    bd:c9:bc:ca:88:fc:c4:43:9b:29:fe:76:07:ef:f4:
                    fe:67:92:c7:61:1f:0d:ec:f4:a4:ca:19:c4:99:12:
                    c8:09:28:69:66:ff:bc:d9:f9:0c:83:69:c6:0e:42:
                    e4:2c:8e:51:d2:3e:aa:67:30:52:9d:78:cf:cd:cd:
                    a3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:4C:44:41:50:11:3B:57:99:7C:7B:46:82:1F:FA:F1:A4:12:4B:00
            X509v3 Authority Key Identifier:
                keyid:A8:EB:32:2D:AE:F0:1E:5C:8F:CF:7E:B0:87:1C:EE:B4:49:93:6F:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/0/A8EB322DAEF01E5C8FCF7EB0871CEEB449936F8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A8EB322DAEF01E5C8FCF7EB0871CEEB449936F8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4vXmSSd311LLdY3XKfQ5Km9DNouRdw1zrwy52UbBttPh/0/323830343a343538633a3a2f33322d3332203d3e20323636393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:458c::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:d8:fe:db:59:54:32:f0:ba:2b:32:ea:99:08:3c:07:42:96:
         9b:c0:05:23:c2:57:7a:20:d4:6f:b4:cb:5d:e8:0e:2c:5a:5e:
         72:7c:be:04:51:0b:68:44:b5:61:ec:08:bd:12:c1:55:7e:3a:
         de:04:4e:6f:d4:ff:e8:12:46:30:18:32:2a:74:b9:dd:2c:40:
         98:cf:26:e6:2f:7c:67:a0:83:e0:a6:e1:58:cd:32:5e:1a:11:
         37:1c:74:9a:7a:7a:31:1a:4b:bf:86:1d:1e:b2:9c:36:ab:82:
         f8:e0:14:d5:18:60:0f:90:c6:02:40:40:26:00:f8:7a:be:0d:
         08:49:88:b6:4b:81:66:3d:69:40:80:6c:f3:01:ad:2a:18:c7:
         6d:97:16:b3:38:a9:a8:7e:d2:72:d7:11:22:7b:a6:23:88:d7:
         b7:03:b3:44:4f:6a:af:06:c5:a5:dd:5b:84:29:23:99:15:b1:
         1d:fd:2f:d8:ab:65:b1:d0:6d:b5:09:34:ac:8a:68:19:b4:73:
         db:c8:cb:45:72:51:cb:70:46:63:21:5a:c0:e9:d5:18:f3:38:
         32:88:c3:14:17:93:0a:69:38:b3:44:b1:a4:ae:0d:5e:b2:af:
         c4:8e:df:d6:32:58:04:13:a5:82:1f:00:7d:7f:a2:44:f2:08:
         d4:f7:68:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----