Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/323830343a6636383a373030303a3a2f33362d3336203d3e20323633353834.roa
File:                     323830343a6636383a373030303a3a2f33362d3336203d3e20323633353834.roa (raw, json)
Hash identifier:          /28lSQCOyzBJXA+Y4wo5zBhZEcHrxXjcxO1DhXTF5zw=
Subject key identifier:   8B:86:22:C4:9C:AC:12:24:06:AC:BA:A4:83:95:67:BD:6E:D6:C3:6B
Certificate issuer:       /CN=4B3A30BAE843BAF4B139185B582BA682798E126F
Certificate serial:       0F226ECBC2EB8AD4623210EF7DE23DCCB88B7FEF
Authority key identifier: 4B:3A:30:BA:E8:43:BA:F4:B1:39:18:5B:58:2B:A6:82:79:8E:12:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3A30BAE843BAF4B139185B582BA682798E126F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/323830343a6636383a373030303a3a2f33362d3336203d3e20323633353834.roa
Signing time:             Sat 14 Mar 2026 22:28:25 +0000
ROA not before:           Sat 14 Mar 2026 22:23:25 +0000
ROA not after:            Sat 13 Mar 2027 22:28:25 +0000
asID:                     263584
IP address blocks:        2804:f68:7000::/36 maxlen: 36
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:22:6e:cb:c2:eb:8a:d4:62:32:10:ef:7d:e2:3d:cc:b8:8b:7f:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B3A30BAE843BAF4B139185B582BA682798E126F
        Validity
            Not Before: Mar 14 22:23:25 2026 GMT
            Not After : Mar 13 22:28:25 2027 GMT
        Subject: CN=8B8622C49CAC122406ACBAA4839567BD6ED6C36B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:fb:ca:67:82:39:01:54:7c:01:d5:0d:78:68:
                    be:d5:a9:33:aa:45:8e:96:e4:91:6a:05:7e:62:99:
                    9e:45:3c:c3:d0:72:74:bc:f4:95:4f:62:7e:19:fc:
                    7a:e1:b7:6f:6c:f0:28:94:71:75:be:8e:ce:6d:8c:
                    06:ce:38:c8:03:a8:a4:16:f8:ce:da:d2:d9:5b:7a:
                    92:64:c1:fc:c6:35:5e:7e:4c:14:2a:29:fb:f0:b2:
                    69:ee:df:b2:86:de:08:68:a0:9e:eb:e0:e7:e8:49:
                    02:d3:b0:91:79:c8:e0:b2:db:b0:25:11:33:cd:81:
                    01:05:42:5a:11:19:d4:1b:ac:5b:45:b5:99:c9:3a:
                    98:c5:f6:3b:b9:f8:cd:ff:61:80:1d:e7:49:0a:7a:
                    92:b2:21:0d:b7:9f:7a:ba:9c:14:8d:d7:a5:9b:5c:
                    e9:30:4e:65:1f:d7:75:59:00:84:2d:5b:32:81:ae:
                    19:aa:9d:17:c4:c3:3c:d6:a0:6c:d5:0c:98:d4:7e:
                    01:5d:85:e6:a6:3d:a4:7f:ce:1f:5b:4b:70:4e:2c:
                    6b:dd:bd:ed:cd:8f:f9:a1:78:03:33:5d:1d:cb:47:
                    ac:49:bc:ed:65:71:89:bc:a5:97:ad:a6:38:21:b2:
                    62:34:d4:d8:4b:ee:cd:0e:61:0d:0f:bf:01:7f:a0:
                    db:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:86:22:C4:9C:AC:12:24:06:AC:BA:A4:83:95:67:BD:6E:D6:C3:6B
            X509v3 Authority Key Identifier:
                keyid:4B:3A:30:BA:E8:43:BA:F4:B1:39:18:5B:58:2B:A6:82:79:8E:12:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/4B3A30BAE843BAF4B139185B582BA682798E126F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B3A30BAE843BAF4B139185B582BA682798E126F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GKi2zYPvVCvUpaK8TRHVa88YkdKQi7wBzKgwjmyL4RCq/0/323830343a6636383a373030303a3a2f33362d3336203d3e20323633353834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:f68:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         6e:4b:67:f1:da:68:53:0e:0c:41:b9:f8:b8:35:8e:0a:9c:d1:
         b5:e0:92:23:e9:cc:1f:60:31:17:46:58:2e:bf:2f:51:44:ac:
         94:14:74:2a:59:dd:5b:eb:3f:41:3d:5b:9b:9e:41:3c:90:b7:
         9c:14:f3:e6:a4:66:81:6d:ff:7f:35:b3:77:69:49:a5:01:b5:
         a2:e4:32:e8:17:a0:0f:fe:03:1d:62:83:a8:d7:02:65:f6:0e:
         8a:ba:bd:05:ad:f8:8d:2b:5c:14:81:a6:ab:e5:09:16:89:71:
         4f:f9:85:c4:a7:d5:30:b5:ad:fb:75:23:c0:d8:00:10:ac:97:
         67:ec:e2:9f:fa:2f:4e:4b:a3:42:a6:a6:87:52:13:29:bd:cc:
         1f:dc:34:23:1a:1c:b5:60:35:57:4a:0a:48:63:2b:97:60:71:
         6d:c9:06:d4:8c:29:fc:7c:81:fc:2f:11:73:ea:94:ce:dd:04:
         d2:a7:be:10:d1:6f:b0:c1:05:58:6c:96:ee:05:2f:23:3d:60:
         04:9e:e5:89:36:3d:a7:68:70:4e:ac:36:e0:d9:09:df:00:64:
         c4:80:a1:68:8c:bb:71:e9:3c:51:c8:3c:f4:02:f4:96:93:8f:
         cc:2b:3d:fd:54:93:d3:10:ba:9a:6a:74:79:a0:c8:a2:0b:be:
         f2:8a:21:f2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgIUDyJuy8LritRiMhDvfeI9zLiLf+8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEIzQTMwQkFFODQzQkFGNEIxMzkxODVCNTgyQkE2ODI3
OThFMTI2RjAeFw0yNjAzMTQyMjIzMjVaFw0yNzAzMTMyMjI4MjVaMDMxMTAvBgNV
BAMTKDhCODYyMkM0OUNBQzEyMjQwNkFDQkFBNDgzOTU2N0JENkVENkMzNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj+8pngjkBVHwB1Q14aL7VqTOq
RY6W5JFqBX5imZ5FPMPQcnS89JVPYn4Z/Hrht29s8CiUcXW+js5tjAbOOMgDqKQW
+M7a0tlbepJkwfzGNV5+TBQqKfvwsmnu37KG3ghooJ7r4OfoSQLTsJF5yOCy27Al
ETPNgQEFQloRGdQbrFtFtZnJOpjF9ju5+M3/YYAd50kKepKyIQ23n3q6nBSN16Wb
XOkwTmUf13VZAIQtWzKBrhmqnRfEwzzWoGzVDJjUfgFdheamPaR/zh9bS3BOLGvd
ve3Nj/mheAMzXR3LR6xJvO1lcYm8pZetpjghsmI01NhL7s0OYQ0PvwF/oNvpAgMB
AAGjggJZMIICVTAdBgNVHQ4EFgQUi4YixJysEiQGrLqkg5VnvW7Ww2swHwYDVR0j
BBgwFoAUSzowuuhDuvSxORhbWCumgnmOEm8wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vR0tpMnpZUHZWQ3ZVcGFLOFRSSFZhODhZa2RLUWk3d0J6S2d3am15TDRS
Q3EvMC80QjNBMzBCQUU4NDNCQUY0QjEzOTE4NUI1ODJCQTY4Mjc5OEUxMjZGLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzRCM0EzMEJBRTg0M0JBRjRC
MTM5MTg1QjU4MkJBNjgyNzk4RTEyNkYuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0dLaTJ6WVB2VkN2VXBhSzhUUkhWYTg4WWtkS1FpN3dCektnd2pteUw0UkNxLzAv
MzIzODMwMzQzYTY2MzYzODNhMzczMDMwMzAzYTNhMmYzMzM2MmQzMzM2MjAzZDNl
MjAzMjM2MzMzNTM4MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI
KwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgQoBA9ocDANBgkqhkiG9w0BAQsFAAOC
AQEAbktn8dpoUw4MQbn4uDWOCpzRteCSI+nMH2AxF0ZYLr8vUUSslBR0KlndW+s/
QT1bm55BPJC3nBTz5qRmgW3/fzWzd2lJpQG1ouQy6BegD/4DHWKDqNcCZfYOirq9
Ba34jStcFIGmq+UJFolxT/mFxKfVMLWt+3UjwNgAEKyXZ+zin/ovTkujQqamh1IT
Kb3MH9w0IxoctWA1V0oKSGMrl2BxbckG1Iwp/HyB/C8Rc+qUzt0E0qe+ENFvsMEF
WGyW7gUvIz1gBJ7liTY9p2hwTqw24NkJ3wBkxIChaIy7cek8Ucg89AL0lpOPzCs9
/VST0xC6mmp0eaDIogu+8ooh8g==
-----END CERTIFICATE-----
Generated at Wed Apr 8 10:43:15 2026 by rpki-client