Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/323830343a363336383a3a2f33322d3438203d3e20323639333539.roa
File:                     323830343a363336383a3a2f33322d3438203d3e20323639333539.roa (raw, json)
Hash identifier:          Sm9S1lDqeFYGrREUntKmX+YZVYdXVP90qih4wr+IDfE=
Subject key identifier:   25:59:6A:6D:22:DD:CB:11:4A:10:8C:1A:D9:4F:FE:E5:64:81:9C:CF
Certificate issuer:       /CN=838E2AA3E7CC12B77638528A70C2345F3ADD65D6
Certificate serial:       2399384F16223B5C405C4D8B78C3E7ACE0BC5FB9
Authority key identifier: 83:8E:2A:A3:E7:CC:12:B7:76:38:52:8A:70:C2:34:5F:3A:DD:65:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/838E2AA3E7CC12B77638528A70C2345F3ADD65D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/323830343a363336383a3a2f33322d3438203d3e20323639333539.roa
Signing time:             Wed 05 Aug 2026 17:15:45 +0000
ROA not before:           Wed 05 Aug 2026 17:10:45 +0000
ROA not after:            Wed 04 Aug 2027 17:15:45 +0000
asID:                     269359
IP address blocks:        2804:6368::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:99:38:4f:16:22:3b:5c:40:5c:4d:8b:78:c3:e7:ac:e0:bc:5f:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=838E2AA3E7CC12B77638528A70C2345F3ADD65D6
        Validity
            Not Before: Aug  5 17:10:45 2026 GMT
            Not After : Aug  4 17:15:45 2027 GMT
        Subject: CN=25596A6D22DDCB114A108C1AD94FFEE564819CCF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:03:99:de:cc:7c:36:03:80:1a:c6:04:72:19:
                    7d:3b:1e:6a:67:e2:a3:42:b2:33:6c:f8:c0:ac:15:
                    9d:36:9c:35:ab:46:e2:3f:77:c4:33:71:45:88:ac:
                    bf:c5:7d:43:5f:58:7a:73:6a:1d:45:89:2d:38:ca:
                    30:27:20:d8:b4:15:a7:ea:e3:26:6d:34:92:ed:12:
                    d9:49:8f:08:6b:e7:08:35:7e:b2:ca:7a:28:80:13:
                    5c:ac:95:9f:30:1a:32:fb:ac:73:66:61:69:48:a7:
                    f3:3a:32:b7:30:7c:26:cd:8f:8a:7f:96:b2:26:49:
                    a6:c6:9a:ec:c9:c4:79:3f:88:ff:16:d3:c1:54:1f:
                    4d:bb:f5:db:14:b2:4b:66:16:9e:49:46:c2:4f:68:
                    05:14:11:7d:30:b0:9a:c8:1f:13:47:77:eb:6f:83:
                    90:84:aa:dc:5a:b1:b2:78:f0:63:1c:66:df:a7:f3:
                    81:ee:47:91:f9:4e:d6:4f:1b:0d:40:a7:5e:b6:c8:
                    76:09:8a:49:df:41:66:19:9f:17:23:85:77:0d:d0:
                    48:00:05:46:03:38:f5:8b:be:5d:e9:78:77:16:78:
                    34:fc:ec:8f:2c:d3:f2:29:3b:1b:2c:2d:28:78:12:
                    64:b4:2d:c5:b7:9f:fc:28:91:59:65:0e:30:db:08:
                    61:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:59:6A:6D:22:DD:CB:11:4A:10:8C:1A:D9:4F:FE:E5:64:81:9C:CF
            X509v3 Authority Key Identifier:
                keyid:83:8E:2A:A3:E7:CC:12:B7:76:38:52:8A:70:C2:34:5F:3A:DD:65:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/838E2AA3E7CC12B77638528A70C2345F3ADD65D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/838E2AA3E7CC12B77638528A70C2345F3ADD65D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fjb3NrgfueX1yRdhF1vvDP2iFdZoQAsesapos6P1afvN/0/323830343a363336383a3a2f33322d3438203d3e20323639333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6368::/32

    Signature Algorithm: sha256WithRSAEncryption
         c6:39:9d:0c:66:aa:7b:7c:8c:20:df:27:dd:e2:18:b0:18:d6:
         4e:20:26:fe:23:fe:b3:7d:5e:3f:63:48:ca:ce:d0:53:9f:79:
         74:1b:65:8d:d3:80:fe:5c:0c:98:6d:11:54:36:2c:52:c8:1a:
         8f:6c:06:0e:dc:38:a2:2a:ec:78:0a:15:5a:24:7b:4e:82:5e:
         c6:db:df:58:2b:47:32:5f:ff:96:19:a0:43:61:b0:b1:ee:2c:
         ad:12:86:8d:b8:b5:b9:49:f4:00:22:36:26:82:e3:11:02:8b:
         fa:ae:54:7e:90:1f:43:19:06:13:8f:2e:1b:18:70:bd:f0:3b:
         b4:e1:24:8e:12:34:dc:cf:a1:68:62:92:ae:73:d8:32:06:70:
         fd:e2:5e:2a:55:db:75:69:46:a2:e9:31:68:81:46:2b:c4:88:
         fc:89:a1:88:6f:0f:c4:f0:25:0f:a7:c0:c2:dd:fe:57:c7:8b:
         0a:f9:cf:59:01:4c:f8:bb:b7:22:c9:96:b7:33:e5:f3:b9:51:
         d4:7b:24:d0:41:1b:93:32:8c:a9:03:6a:ff:74:0e:79:7b:55:
         d6:bc:a3:40:40:64:7c:ac:17:2c:58:5f:bf:d1:75:56:61:57:
         c4:11:bc:7a:fa:0e:6b:1e:2d:81:21:3f:a4:93:25:a6:63:46:
         cc:8f:5c:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----