Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/323830343a313763343a3a2f33322d3438203d3e20323633323530.roa
File:                     323830343a313763343a3a2f33322d3438203d3e20323633323530.roa (raw, json)
Hash identifier:          LDQV8TGhdVF7p6hZPJRIV+QeMSc/MqCNF5Xh/mwA8rM=
Subject key identifier:   B8:3D:E0:F9:E3:9F:94:C9:0F:A9:FC:AC:9B:02:EC:D1:39:8D:76:4B
Certificate issuer:       /CN=A1E6749C09E9E32D11C15678D45C1B936D525291
Certificate serial:       4687A25B5B707A674889521461A96948A4C848AE
Authority key identifier: A1:E6:74:9C:09:E9:E3:2D:11:C1:56:78:D4:5C:1B:93:6D:52:52:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E6749C09E9E32D11C15678D45C1B936D525291.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/323830343a313763343a3a2f33322d3438203d3e20323633323530.roa
Signing time:             Thu 05 Mar 2026 19:33:45 +0000
ROA not before:           Thu 05 Mar 2026 19:28:45 +0000
ROA not after:            Thu 04 Mar 2027 19:33:45 +0000
asID:                     263250
IP address blocks:        2804:17c4::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:87:a2:5b:5b:70:7a:67:48:89:52:14:61:a9:69:48:a4:c8:48:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1E6749C09E9E32D11C15678D45C1B936D525291
        Validity
            Not Before: Mar  5 19:28:45 2026 GMT
            Not After : Mar  4 19:33:45 2027 GMT
        Subject: CN=B83DE0F9E39F94C90FA9FCAC9B02ECD1398D764B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:dd:09:11:71:69:aa:19:a5:9e:62:01:92:e0:
                    1b:4e:56:ac:83:92:af:83:d9:a0:d3:85:13:8e:b1:
                    2b:79:6b:47:c4:21:45:43:13:ab:50:27:e9:a4:80:
                    62:d8:74:d2:8d:a2:4c:0d:d5:04:f5:f7:29:5d:6e:
                    ab:50:1a:f4:6d:11:fc:00:98:ad:83:b1:8a:c3:32:
                    fe:62:6a:67:12:17:87:98:ac:88:2b:75:64:d0:9f:
                    3f:28:31:e6:8b:2b:0a:49:d2:29:4c:5d:c3:5e:45:
                    b6:fa:36:17:3e:86:27:7c:69:9b:ad:31:d6:08:7f:
                    6e:b7:4f:2a:d3:f6:2d:7d:a3:07:41:13:6f:49:de:
                    5e:09:eb:1b:5d:05:39:69:f2:33:30:65:64:30:4e:
                    e3:22:6a:91:a5:87:e4:6d:7c:29:a6:0c:cd:3e:71:
                    cc:25:47:e5:7e:2f:ee:78:6e:d0:bd:94:2b:f6:c2:
                    2f:aa:1f:62:3a:13:ed:67:1d:bf:50:08:84:38:7a:
                    29:4a:4f:88:c4:ae:34:9e:4e:d1:c6:81:a5:0f:cb:
                    39:6b:5a:56:60:ac:6f:af:ef:e5:8f:20:bd:7d:5d:
                    51:38:1c:21:3c:97:8f:df:f9:36:d1:77:93:ad:65:
                    f6:64:f8:8a:bf:1b:2b:12:b0:d3:c8:b6:af:3a:5f:
                    5d:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:3D:E0:F9:E3:9F:94:C9:0F:A9:FC:AC:9B:02:EC:D1:39:8D:76:4B
            X509v3 Authority Key Identifier:
                keyid:A1:E6:74:9C:09:E9:E3:2D:11:C1:56:78:D4:5C:1B:93:6D:52:52:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/A1E6749C09E9E32D11C15678D45C1B936D525291.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A1E6749C09E9E32D11C15678D45C1B936D525291.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DYd2iJ9nU2thSVQogpCZ6fJadagDjG9Acs9YtW8cNAPX/0/323830343a313763343a3a2f33322d3438203d3e20323633323530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:17c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:63:19:63:49:79:8e:71:94:8b:52:af:af:7d:d5:33:68:97:
         9b:bb:09:81:76:82:bb:ab:32:6d:fa:23:8f:92:1f:2d:89:1f:
         bc:39:96:da:3b:bf:4d:e5:c8:2d:95:9c:17:38:18:6c:dd:ca:
         b0:3b:44:bc:46:a7:a8:fd:c8:07:eb:eb:12:66:a1:fc:f8:f0:
         58:94:0c:64:c9:57:9d:20:09:96:2b:cc:4b:b9:40:a5:49:13:
         65:80:66:64:67:7d:c2:b0:1d:45:36:6c:5e:82:de:59:b7:1e:
         f6:90:bc:5d:b0:36:38:96:13:f2:b2:59:c6:17:f9:61:3f:b3:
         d9:a3:19:50:70:aa:45:3b:b9:89:2b:d0:ea:c8:2c:6a:2e:64:
         82:27:0d:47:dd:ad:e7:d5:55:c3:85:62:5b:a7:5b:79:98:6a:
         fd:69:03:6f:26:04:91:11:4e:9e:a5:d2:5c:eb:0f:0a:6b:0d:
         d4:14:c3:2d:b6:3a:3e:b6:18:0b:f5:be:6e:75:0d:62:f8:1e:
         9c:3c:99:0e:e6:2e:1d:a4:ed:14:77:d0:44:68:78:8c:7a:be:
         42:1f:2f:bc:a9:aa:f6:a3:c9:ea:b7:fa:ed:a7:4e:1d:84:61:
         8e:2c:25:89:4b:8c:dd:09:d3:91:fa:55:75:0e:c2:0f:51:dd:
         63:94:e6:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 19:27:42 2026 by rpki-client