Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DTK83rT71rfXjN8DzT7AKt8qFXuvu5HeKKhtzg39Qoke/0/323830343a356634633a3a2f33322d3334203d3e20323639303930.roa
File:                     323830343a356634633a3a2f33322d3334203d3e20323639303930.roa (raw, json)
Hash identifier:          D/+cDIJJiGxHtIrhz656XpVJvAmm4SBjriQZJVA+S3g=
Subject key identifier:   C2:3F:67:31:73:24:31:FA:9A:82:7C:31:8A:AC:28:F6:3B:A5:CF:B6
Certificate issuer:       /CN=1DA4BADD512CEC618201908100D24DA0D888453C
Certificate serial:       5265333DA0CE7B9C05A1FA3B1B6798FD3F54B520
Authority key identifier: 1D:A4:BA:DD:51:2C:EC:61:82:01:90:81:00:D2:4D:A0:D8:88:45:3C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1DA4BADD512CEC618201908100D24DA0D888453C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DTK83rT71rfXjN8DzT7AKt8qFXuvu5HeKKhtzg39Qoke/0/323830343a356634633a3a2f33322d3334203d3e20323639303930.roa
Signing time:             Tue 30 Jun 2026 15:25:36 +0000
ROA not before:           Tue 30 Jun 2026 15:20:36 +0000
ROA not after:            Tue 29 Jun 2027 15:25:36 +0000
asID:                     269090
IP address blocks:        2804:5f4c::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:65:33:3d:a0:ce:7b:9c:05:a1:fa:3b:1b:67:98:fd:3f:54:b5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DA4BADD512CEC618201908100D24DA0D888453C
        Validity
            Not Before: Jun 30 15:20:36 2026 GMT
            Not After : Jun 29 15:25:36 2027 GMT
        Subject: CN=C23F6731732431FA9A827C318AAC28F63BA5CFB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9d:36:7f:5e:b6:f9:cc:a6:05:81:bf:3b:b6:
                    6f:1a:24:52:ad:d2:1e:44:64:23:e6:a3:bd:18:a5:
                    fd:81:30:4a:1a:e2:b4:11:bf:09:ac:48:65:e2:55:
                    04:ad:92:85:fe:62:c0:dd:64:50:3f:af:8d:8a:54:
                    9c:ff:58:a9:2b:58:17:10:de:4c:f6:33:4d:32:6c:
                    36:24:a2:2d:41:b5:50:05:8c:f4:f7:70:7a:c0:da:
                    32:f6:e1:57:ac:55:8a:d2:26:fb:82:2e:9c:0e:15:
                    78:9b:1f:a9:c7:42:0e:d4:32:4f:58:40:fd:2b:3e:
                    a5:f4:31:d1:ff:6a:01:01:78:38:13:9a:2b:9a:84:
                    ce:f6:39:09:67:7c:8e:94:31:ad:f4:08:c5:9a:9b:
                    ed:f1:84:dd:20:85:37:72:ea:34:95:3d:cb:46:de:
                    01:2d:42:d0:5b:47:48:3a:46:40:5e:5e:96:83:a8:
                    18:2e:42:c4:c3:88:d3:df:ad:7c:39:2c:a2:1d:a1:
                    bc:d5:40:ec:f1:8a:b2:75:ef:dc:cb:76:e9:7a:c7:
                    2d:db:3e:c9:c7:8f:6e:90:31:4e:60:f8:f1:63:33:
                    74:5b:44:19:c2:54:52:bb:3a:3e:bb:40:94:e9:8c:
                    b8:87:fc:ca:58:c9:c8:c1:57:8f:0a:79:c3:d2:08:
                    98:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:3F:67:31:73:24:31:FA:9A:82:7C:31:8A:AC:28:F6:3B:A5:CF:B6
            X509v3 Authority Key Identifier:
                keyid:1D:A4:BA:DD:51:2C:EC:61:82:01:90:81:00:D2:4D:A0:D8:88:45:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DTK83rT71rfXjN8DzT7AKt8qFXuvu5HeKKhtzg39Qoke/0/1DA4BADD512CEC618201908100D24DA0D888453C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1DA4BADD512CEC618201908100D24DA0D888453C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DTK83rT71rfXjN8DzT7AKt8qFXuvu5HeKKhtzg39Qoke/0/323830343a356634633a3a2f33322d3334203d3e20323639303930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f4c::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:aa:8b:f6:b7:69:d7:b3:0b:9e:1a:bd:ec:71:9d:47:db:8a:
         b2:a1:e8:db:0e:98:9f:ce:81:2b:a2:9c:7a:54:3d:38:96:bc:
         4e:4b:b8:5c:13:1a:01:9e:41:1b:32:cf:a8:bb:03:95:11:ab:
         cc:8a:6b:e8:e6:02:0b:69:fc:6c:47:14:b5:c0:e1:df:11:06:
         3d:53:9e:4d:85:68:18:b6:77:21:b5:02:f2:58:a7:c1:ce:97:
         ee:95:2a:bd:cb:a9:39:68:2f:45:80:02:ab:4a:06:d5:19:32:
         84:a9:62:4c:4d:a0:02:29:2c:a3:e7:bb:13:ff:43:c5:28:f6:
         45:2e:00:46:29:09:da:25:64:7c:2d:a6:e5:53:42:7c:62:89:
         67:c6:f5:e4:8e:3a:77:0e:68:74:15:14:4d:13:12:fc:31:c2:
         1a:39:23:ad:69:80:9d:c4:98:4c:fe:5f:21:94:e2:d3:f6:e1:
         e9:e1:df:90:dc:17:7d:d7:46:79:a6:52:ee:55:60:e3:86:91:
         2e:2b:6e:df:fb:a1:7c:41:7a:15:f6:90:b3:be:97:39:e7:c8:
         5e:5f:b4:4f:e7:ac:54:d3:90:ec:dc:48:29:d4:e2:3b:de:f3:
         71:9d:5b:7a:fb:54:c2:04:48:12:5b:e0:74:3f:c9:e9:7d:2f:
         0e:36:31:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----