Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bu7gL29tZj8GwX8KDWYb3cmuuSm3TkJCAs4ojfbaQcBE/1/323830343a353165633a3a2f33322d3336203d3e20323638343835.roa
File:                     323830343a353165633a3a2f33322d3336203d3e20323638343835.roa (raw, json)
Hash identifier:          FCAvS/eM+HLx30eX5NP5P89lXrHXnnlyrmjtxVXj1bI=
Subject key identifier:   A5:3B:18:3C:64:A4:07:96:3E:EB:D9:C5:58:99:C8:3B:12:E0:12:B8
Certificate issuer:       /CN=C9850FF27349373256297F63FF910624053FB89A
Certificate serial:       5DA98C9E50971AF4D5BD59A1C784DCBF61AAB7DF
Authority key identifier: C9:85:0F:F2:73:49:37:32:56:29:7F:63:FF:91:06:24:05:3F:B8:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9850FF27349373256297F63FF910624053FB89A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bu7gL29tZj8GwX8KDWYb3cmuuSm3TkJCAs4ojfbaQcBE/1/323830343a353165633a3a2f33322d3336203d3e20323638343835.roa
Signing time:             Wed 04 Feb 2026 22:12:42 +0000
ROA not before:           Wed 04 Feb 2026 22:07:42 +0000
ROA not after:            Wed 03 Feb 2027 22:12:42 +0000
asID:                     268485
IP address blocks:        2804:51ec::/32 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:a9:8c:9e:50:97:1a:f4:d5:bd:59:a1:c7:84:dc:bf:61:aa:b7:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9850FF27349373256297F63FF910624053FB89A
        Validity
            Not Before: Feb  4 22:07:42 2026 GMT
            Not After : Feb  3 22:12:42 2027 GMT
        Subject: CN=A53B183C64A407963EEBD9C55899C83B12E012B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5d:60:7e:96:8c:39:65:be:b8:3d:19:83:a0:
                    9c:a7:d0:bc:55:2c:4f:22:53:0d:eb:4b:2d:d0:6b:
                    a6:b4:44:c9:7e:5e:fb:f3:41:5a:c5:f0:ec:ed:08:
                    56:4d:93:7f:56:94:ec:3e:25:1c:3c:60:f3:a9:f2:
                    62:9f:e3:03:88:cd:5b:5f:05:c8:e9:71:dd:8f:18:
                    7a:25:9f:6f:0e:2b:48:22:f4:7d:59:af:ea:76:82:
                    b9:9b:ed:f5:42:85:eb:d2:db:94:f4:68:6c:61:e8:
                    2c:dd:cd:a0:90:8c:ee:79:83:bc:68:48:7f:15:26:
                    eb:8a:dd:7e:67:2d:55:50:af:35:de:44:bf:14:63:
                    a0:d4:bb:c3:94:16:cd:81:93:44:aa:63:60:a6:f0:
                    35:97:6c:94:84:a8:cc:17:0c:2c:85:51:fa:d2:a2:
                    a4:c5:37:3e:8c:47:7a:16:97:21:82:e5:d1:c2:5c:
                    35:7c:1f:33:26:13:6a:c6:dc:2d:20:73:c7:01:5b:
                    f8:f0:b5:2e:68:71:6d:28:7c:46:e0:cd:5e:37:1f:
                    6b:db:aa:d4:1b:26:49:7d:8e:7a:57:52:e4:43:c4:
                    34:70:4e:69:06:94:bc:4a:85:2d:75:49:ba:bb:35:
                    bc:bd:a9:b6:7e:a9:f3:8a:ce:c5:82:d3:fb:0d:06:
                    57:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:3B:18:3C:64:A4:07:96:3E:EB:D9:C5:58:99:C8:3B:12:E0:12:B8
            X509v3 Authority Key Identifier:
                keyid:C9:85:0F:F2:73:49:37:32:56:29:7F:63:FF:91:06:24:05:3F:B8:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bu7gL29tZj8GwX8KDWYb3cmuuSm3TkJCAs4ojfbaQcBE/1/C9850FF27349373256297F63FF910624053FB89A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C9850FF27349373256297F63FF910624053FB89A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bu7gL29tZj8GwX8KDWYb3cmuuSm3TkJCAs4ojfbaQcBE/1/323830343a353165633a3a2f33322d3336203d3e20323638343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:51ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:db:e4:36:2e:42:2a:55:b9:7b:47:08:ce:19:8a:2d:bc:03:
         52:1a:d2:90:77:34:1b:20:d5:39:da:ee:14:3e:98:91:d9:12:
         74:f9:48:66:df:a5:83:9d:2e:0a:7b:a4:04:3b:e0:8d:c1:c0:
         c2:62:7d:52:2c:44:5a:17:32:34:a7:16:38:7e:15:32:47:79:
         c7:d5:fa:9e:ba:45:ed:ac:8c:b2:f2:17:3d:7f:87:a5:e7:de:
         b0:2d:5b:2e:5b:e1:be:45:8d:d6:a0:5c:de:67:74:77:26:61:
         3f:14:4b:f4:1d:50:4e:0f:1f:74:d8:2d:06:f8:f0:4d:27:d2:
         bd:57:96:46:cb:73:ea:19:81:fc:9c:c5:c7:0c:80:e7:08:ed:
         5d:c3:17:69:6e:69:4f:82:0b:06:a6:5d:31:ff:f4:06:f5:d5:
         f8:e8:29:2d:66:92:8c:62:5b:79:0c:19:a2:6b:8f:86:90:24:
         df:d0:e2:fd:09:2d:1f:e9:b4:d3:f8:4e:c2:64:2a:0c:a8:fe:
         4a:09:ec:33:ab:ad:ae:10:79:c2:05:0f:05:13:f7:6f:c5:4d:
         19:a0:d8:43:d1:0c:ae:62:a8:7e:10:eb:46:26:f4:a4:51:a5:
         e3:f9:0f:67:3a:ce:12:6b:c3:7b:42:c2:03:a5:64:d5:e6:bd:
         5f:21:cc:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 17:31:46 2026 by rpki-client