Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/323830343a343234343a3a2f33322d3335203d3e20323637343839.roa
File:                     323830343a343234343a3a2f33322d3335203d3e20323637343839.roa (raw, json)
Hash identifier:          Skm0yVoxtthGTE84qQEHeOc+97F/2HD6lqyj5FEHNJ0=
Subject key identifier:   F3:F1:7A:E7:31:6E:13:C9:D7:1E:97:88:EE:93:09:49:45:A1:1F:51
Certificate issuer:       /CN=23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1
Certificate serial:       419DC906FE32424D9950F5A550F9B54CC179A327
Authority key identifier: 23:EC:D4:D1:AF:88:CE:2E:1B:3D:F6:DF:87:FC:76:CC:15:7A:07:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/323830343a343234343a3a2f33322d3335203d3e20323637343839.roa
Signing time:             Wed 04 Feb 2026 20:00:06 +0000
ROA not before:           Wed 04 Feb 2026 19:55:06 +0000
ROA not after:            Wed 03 Feb 2027 20:00:06 +0000
asID:                     267489
IP address blocks:        2804:4244::/32 maxlen: 35
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:9d:c9:06:fe:32:42:4d:99:50:f5:a5:50:f9:b5:4c:c1:79:a3:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1
        Validity
            Not Before: Feb  4 19:55:06 2026 GMT
            Not After : Feb  3 20:00:06 2027 GMT
        Subject: CN=3082010A0282010100A1C705B1FF7ED6BD92D025DEB54A6289EFC17AC4EEEE25F1910D4B1E80D7826390DD1E3CAD778B54727C580905D73F73B5CBC64C3AE7D04982052405CF71182F2152F74B5C726332ADD15AFC6D5CD5730BBB29292A92B0831471DDAE5CFB9CD4060370F40F5BF37C5EA46F882B604531879D7EA633E57410E3A9B50B917F719795F44B5B10A9128BE2F895436AF3E0335E464164739A05EF38575B0371E41816F3B959B2AD656EA85A594A5BB9E54DF8B51C6CD578FEC687571C988EF96A5697F7FA2D1FCB400D4BCFF35BB16CE81C93B4648B8820712F211D901E298EBAF5D83330F43E51DC2A13726E05777903C0FBF241E5B789684F29A631C2108F02BBED0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c7:05:b1:ff:7e:d6:bd:92:d0:25:de:b5:4a:
                    62:89:ef:c1:7a:c4:ee:ee:25:f1:91:0d:4b:1e:80:
                    d7:82:63:90:dd:1e:3c:ad:77:8b:54:72:7c:58:09:
                    05:d7:3f:73:b5:cb:c6:4c:3a:e7:d0:49:82:05:24:
                    05:cf:71:18:2f:21:52:f7:4b:5c:72:63:32:ad:d1:
                    5a:fc:6d:5c:d5:73:0b:bb:29:29:2a:92:b0:83:14:
                    71:dd:ae:5c:fb:9c:d4:06:03:70:f4:0f:5b:f3:7c:
                    5e:a4:6f:88:2b:60:45:31:87:9d:7e:a6:33:e5:74:
                    10:e3:a9:b5:0b:91:7f:71:97:95:f4:4b:5b:10:a9:
                    12:8b:e2:f8:95:43:6a:f3:e0:33:5e:46:41:64:73:
                    9a:05:ef:38:57:5b:03:71:e4:18:16:f3:b9:59:b2:
                    ad:65:6e:a8:5a:59:4a:5b:b9:e5:4d:f8:b5:1c:6c:
                    d5:78:fe:c6:87:57:1c:98:8e:f9:6a:56:97:f7:fa:
                    2d:1f:cb:40:0d:4b:cf:f3:5b:b1:6c:e8:1c:93:b4:
                    64:8b:88:20:71:2f:21:1d:90:1e:29:8e:ba:f5:d8:
                    33:30:f4:3e:51:dc:2a:13:72:6e:05:77:79:03:c0:
                    fb:f2:41:e5:b7:89:68:4f:29:a6:31:c2:10:8f:02:
                    bb:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F1:7A:E7:31:6E:13:C9:D7:1E:97:88:EE:93:09:49:45:A1:1F:51
            X509v3 Authority Key Identifier:
                keyid:23:EC:D4:D1:AF:88:CE:2E:1B:3D:F6:DF:87:FC:76:CC:15:7A:07:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/23ECD4D1AF88CE2E1B3DF6DF87FC76CC157A07C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/85s1xBEtx8BGSv6wPHNpbyr2LpXXpPCGktHiJvYux27t/1/323830343a343234343a3a2f33322d3335203d3e20323637343839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4244::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:17:fd:f4:dd:8b:67:68:88:cd:b3:ac:94:f8:b9:e6:2d:80:
         1c:16:70:fc:54:53:33:aa:f0:ed:72:e4:9d:9f:d6:0a:77:1b:
         96:40:1a:8a:5c:7f:64:27:fa:16:a8:30:e6:5d:48:30:24:9b:
         f5:d4:2f:d8:29:31:d9:82:16:c8:66:c1:8d:2b:b2:dd:8f:11:
         6a:c8:eb:16:9d:e3:67:2d:0c:a7:79:af:f8:c1:1f:67:d8:3c:
         cd:95:20:e0:3b:90:f1:b4:a3:23:1e:7a:33:dd:78:bc:92:cd:
         fd:8f:39:e1:fd:fa:e1:60:e7:9b:d5:61:b8:08:77:cb:a6:38:
         c6:42:50:c8:3a:fd:78:99:a6:ce:1d:dc:48:92:c0:94:a2:c6:
         6b:ea:7c:90:e3:a8:46:01:c9:76:fa:96:bf:22:81:c9:c8:bb:
         07:d4:dd:87:48:29:ca:ed:75:79:4a:e5:9f:a4:9d:87:ad:9f:
         4c:36:ac:79:0c:87:af:66:4c:24:13:a5:a5:06:78:41:f1:d9:
         30:63:d8:0f:da:56:fd:d4:40:b5:c4:f9:6e:d5:b5:c5:bf:33:
         4a:d3:0e:6d:ca:5e:ab:4f:29:9c:a3:23:d9:13:ab:c4:a6:eb:
         ec:d5:8d:5a:fb:9d:25:a3:17:18:8d:12:25:af:88:81:87:19:
         4c:1f:61:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:29:06 2026 by rpki-client