Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/0/323830343a353662633a3a2f33322d3332203d3e20323638303230.roa
File:                     323830343a353662633a3a2f33322d3332203d3e20323638303230.roa (raw, json)
Hash identifier:          3uaoSbnguJ6PWbNqBhOy/xBrsjXj0O3PjP7+RTm6+9g=
Subject key identifier:   E1:8E:21:F7:1E:F7:BC:1F:7C:20:05:88:FB:15:7E:50:5D:8D:4D:96
Certificate issuer:       /CN=284EEA8E6EDB94AF9793A26E511B4993CF092BCA
Certificate serial:       462F56831E47EA9B5E587B536C8DE69F4D14A155
Authority key identifier: 28:4E:EA:8E:6E:DB:94:AF:97:93:A2:6E:51:1B:49:93:CF:09:2B:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/284EEA8E6EDB94AF9793A26E511B4993CF092BCA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/0/323830343a353662633a3a2f33322d3332203d3e20323638303230.roa
Signing time:             Wed 29 Jul 2026 15:42:15 +0000
ROA not before:           Wed 29 Jul 2026 15:37:15 +0000
ROA not after:            Wed 28 Jul 2027 15:42:15 +0000
asID:                     268020
IP address blocks:        2804:56bc::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:2f:56:83:1e:47:ea:9b:5e:58:7b:53:6c:8d:e6:9f:4d:14:a1:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=284EEA8E6EDB94AF9793A26E511B4993CF092BCA
        Validity
            Not Before: Jul 29 15:37:15 2026 GMT
            Not After : Jul 28 15:42:15 2027 GMT
        Subject: CN=E18E21F71EF7BC1F7C200588FB157E505D8D4D96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:cd:6e:85:f8:da:67:c9:41:01:b3:7c:18:2e:
                    93:f2:dd:54:69:f9:75:cb:89:40:27:9a:c3:72:23:
                    ee:92:72:d6:c6:13:16:3e:7f:20:16:25:eb:05:d4:
                    89:12:c6:6b:dc:5c:51:c5:df:a9:e2:70:42:d0:4e:
                    4d:6d:1f:17:e6:fb:c4:b9:e5:33:68:63:49:ae:14:
                    1e:1e:b5:ba:07:24:0c:11:51:14:0d:51:60:13:2c:
                    d8:47:2b:23:c4:9b:89:a6:9b:e1:51:07:93:5c:1a:
                    71:f3:cb:a5:e7:3e:37:11:20:93:cb:c5:6a:27:e0:
                    71:bb:88:54:08:82:78:16:ec:e9:4e:8e:26:81:56:
                    91:e1:f2:d8:20:1f:e2:6d:52:99:4f:5c:1e:a9:f2:
                    71:aa:28:91:e3:96:fa:b4:65:f4:9c:48:50:ba:e3:
                    20:da:cc:f7:8c:7f:83:07:dd:46:04:3c:7d:41:17:
                    a0:e0:da:3c:52:be:b6:ad:00:12:ff:db:0e:5f:4e:
                    39:45:3f:82:b1:39:b1:fa:61:a8:5e:b3:a6:42:a9:
                    bf:ff:ca:e0:a2:51:ab:6f:ab:ea:1e:cd:ad:e2:68:
                    db:8c:b7:68:78:95:59:6c:9b:c3:02:7e:3e:c0:13:
                    7f:93:d8:9a:d6:ec:02:94:6f:78:05:af:51:7c:ae:
                    dc:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:8E:21:F7:1E:F7:BC:1F:7C:20:05:88:FB:15:7E:50:5D:8D:4D:96
            X509v3 Authority Key Identifier:
                keyid:28:4E:EA:8E:6E:DB:94:AF:97:93:A2:6E:51:1B:49:93:CF:09:2B:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/0/284EEA8E6EDB94AF9793A26E511B4993CF092BCA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/284EEA8E6EDB94AF9793A26E511B4993CF092BCA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRK4UAmZr2E1Thkr2KTqt4p7wvzHdwjZdeP8uTXNejWd/0/323830343a353662633a3a2f33322d3332203d3e20323638303230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:56bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:46:c6:81:ae:54:42:7f:d1:a4:51:ae:01:21:52:fc:e5:b5:
         a6:5b:97:97:89:67:81:5c:a1:a0:77:8c:07:70:58:56:26:f5:
         ca:b4:60:3e:81:d1:65:3e:5c:3f:0c:94:38:0a:b7:78:bb:3d:
         08:b6:7e:0f:c3:64:b4:3a:94:ff:64:f7:9b:b0:7f:c2:5a:f2:
         be:1f:3a:58:88:7c:8d:e5:55:96:54:d6:44:a2:0a:b6:e1:5f:
         1b:29:53:f8:fe:bd:5f:b7:e9:be:52:58:3a:71:ae:fe:f5:da:
         f0:f9:5f:57:97:6f:b1:8e:f6:18:85:6c:70:48:37:d4:a5:72:
         1a:dc:23:b1:ef:dc:8c:72:45:fa:07:ba:d2:bf:5c:51:ad:da:
         f8:9c:7d:a9:39:3e:4e:21:15:37:dd:6d:a1:e6:c2:42:7b:e2:
         27:b6:1f:7f:42:87:51:50:ee:fe:51:15:07:00:36:3f:ec:76:
         e2:fb:51:f5:d7:d9:33:90:45:f8:9a:da:12:77:cf:b0:bf:a0:
         9b:7e:55:e3:25:09:64:e1:45:3f:3b:35:6b:dc:75:4f:d9:55:
         2d:31:52:11:b1:fd:b2:4c:9f:83:6a:9d:95:20:da:2a:6e:58:
         f9:fa:41:5c:22:65:6e:14:fc:ee:8e:c3:ad:cb:05:c2:30:5b:
         5c:0b:e1:0a
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIURi9Wgx5H6pteWHtTbI3mn00UoVUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjg0RUVBOEU2RURCOTRBRjk3OTNBMjZFNTExQjQ5OTND
RjA5MkJDQTAeFw0yNjA3MjkxNTM3MTVaFw0yNzA3MjgxNTQyMTVaMDMxMTAvBgNV
BAMTKEUxOEUyMUY3MUVGN0JDMUY3QzIwMDU4OEZCMTU3RTUwNUQ4RDREOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPzW6F+NpnyUEBs3wYLpPy3VRp
+XXLiUAnmsNyI+6SctbGExY+fyAWJesF1IkSxmvcXFHF36nicELQTk1tHxfm+8S5
5TNoY0muFB4etboHJAwRURQNUWATLNhHKyPEm4mmm+FRB5NcGnHzy6XnPjcRIJPL
xWon4HG7iFQIgngW7OlOjiaBVpHh8tggH+JtUplPXB6p8nGqKJHjlvq0ZfScSFC6
4yDazPeMf4MH3UYEPH1BF6Dg2jxSvratABL/2w5fTjlFP4KxObH6Yahes6ZCqb//
yuCiUatvq+oeza3iaNuMt2h4lVlsm8MCfj7AE3+T2JrW7AKUb3gFr1F8rtwPAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQU4Y4h9x73vB98IAWI+xV+UF2NTZYwHwYDVR0j
BBgwFoAUKE7qjm7blK+Xk6JuURtJk88JK8owDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ1JLNFVBbVpyMkUxVGhrcjJLVHF0NHA3d3Z6SGR3alpkZVA4dVRYTmVq
V2QvMC8yODRFRUE4RTZFREI5NEFGOTc5M0EyNkU1MTFCNDk5M0NGMDkyQkNBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzI4NEVFQThFNkVEQjk0QUY5
NzkzQTI2RTUxMUI0OTkzQ0YwOTJCQ0EuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NSSzRVQW1acjJFMVRoa3IyS1RxdDRwN3d2ekhkd2paZGVQOHVUWE5laldkLzAv
MzIzODMwMzQzYTM1MzY2MjYzM2EzYTJmMzMzMjJkMzMzMjIwM2QzZTIwMzIzNjM4
MzAzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARWvDANBgkqhkiG9w0BAQsFAAOCAQEAPEbGga5U
Qn/RpFGuASFS/OW1pluXl4lngVyhoHeMB3BYVib1yrRgPoHRZT5cPwyUOAq3eLs9
CLZ+D8NktDqU/2T3m7B/wlryvh86WIh8jeVVllTWRKIKtuFfGylT+P69X7fpvlJY
OnGu/vXa8PlfV5dvsY72GIVscEg31KVyGtwjse/cjHJF+ge60r9cUa3a+Jx9qTk+
TiEVN91toebCQnviJ7Yff0KHUVDu/lEVBwA2P+x24vtR9dfZM5BF+JraEnfPsL+g
m35V4yUJZOFFPzs1a9x1T9lVLTFSEbH9skyfg2qdlSDaKm5Y+fpBXCJlbhT87o7D
rcsFwjBbXAvhCg==
-----END CERTIFICATE-----