Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GXqG5YPNBaABFBdNgcVwJ7jbdeiJzBdzEczJNMsu4MPr/0/323830343a343364383a3a2f33322d3438203d3e20323637353934.roa
File:                     323830343a343364383a3a2f33322d3438203d3e20323637353934.roa (raw, json)
Hash identifier:          zO0iziCKYtNXOpQeyc7IVYMeKL+g48KbMQO9QMJzgwc=
Subject key identifier:   75:C9:B9:91:A9:3A:EE:C5:3A:A7:78:8E:B6:0D:F8:AE:15:4D:9E:5F
Certificate issuer:       /CN=E19797797ED076B71FA5809374E9945BD3EDC3D4
Certificate serial:       16A17F93002C268086FC733964BC0B8F15E15FC3
Authority key identifier: E1:97:97:79:7E:D0:76:B7:1F:A5:80:93:74:E9:94:5B:D3:ED:C3:D4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E19797797ED076B71FA5809374E9945BD3EDC3D4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GXqG5YPNBaABFBdNgcVwJ7jbdeiJzBdzEczJNMsu4MPr/0/323830343a343364383a3a2f33322d3438203d3e20323637353934.roa
Signing time:             Wed 26 Aug 2026 13:32:02 +0000
ROA not before:           Wed 26 Aug 2026 13:27:02 +0000
ROA not after:            Wed 25 Aug 2027 13:32:02 +0000
asID:                     267594
IP address blocks:        2804:43d8::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:a1:7f:93:00:2c:26:80:86:fc:73:39:64:bc:0b:8f:15:e1:5f:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E19797797ED076B71FA5809374E9945BD3EDC3D4
        Validity
            Not Before: Aug 26 13:27:02 2026 GMT
            Not After : Aug 25 13:32:02 2027 GMT
        Subject: CN=75C9B991A93AEEC53AA7788EB60DF8AE154D9E5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7e:fd:89:66:6e:f7:f8:9d:f9:4f:4f:10:98:
                    f2:dd:4e:12:6e:cb:10:a2:37:5e:d3:ff:cf:3c:6e:
                    be:8f:6a:77:f0:ce:3c:10:ad:4e:f7:d1:fe:26:a5:
                    b7:d5:41:bd:b0:02:8a:db:58:70:d7:aa:2f:fd:46:
                    f8:92:e9:c8:97:04:e9:d1:46:3e:99:57:de:b6:1d:
                    9e:33:49:4c:c0:5f:6e:0b:b7:bd:e7:0f:0e:3b:61:
                    20:6e:71:96:8a:71:63:b7:02:fa:79:d8:2f:3b:c2:
                    44:1f:84:50:33:10:fe:8b:14:0a:62:5e:56:05:86:
                    d9:b8:82:18:5f:77:c4:53:06:da:be:9a:6f:92:ea:
                    6f:2b:33:05:b4:20:c8:30:08:ff:ed:96:ab:be:1a:
                    33:e5:2e:5e:52:92:33:ec:c3:bb:4c:0c:96:71:9e:
                    f8:90:56:2e:11:93:b3:30:b7:21:1f:b6:6e:b0:c9:
                    d3:a7:da:c0:0a:f4:ba:bd:8d:77:b8:a7:6a:9a:59:
                    e6:5a:8a:64:97:4c:1e:c1:f5:12:d1:55:0a:72:35:
                    3d:d4:bf:08:07:61:6e:a9:05:b7:e0:07:b3:d5:7d:
                    4f:81:d7:ca:29:5f:1a:70:bb:29:99:5d:c7:0c:2a:
                    aa:99:6a:f5:fd:80:60:6f:30:28:0d:01:79:e9:66:
                    f6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:C9:B9:91:A9:3A:EE:C5:3A:A7:78:8E:B6:0D:F8:AE:15:4D:9E:5F
            X509v3 Authority Key Identifier:
                keyid:E1:97:97:79:7E:D0:76:B7:1F:A5:80:93:74:E9:94:5B:D3:ED:C3:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GXqG5YPNBaABFBdNgcVwJ7jbdeiJzBdzEczJNMsu4MPr/0/E19797797ED076B71FA5809374E9945BD3EDC3D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E19797797ED076B71FA5809374E9945BD3EDC3D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GXqG5YPNBaABFBdNgcVwJ7jbdeiJzBdzEczJNMsu4MPr/0/323830343a343364383a3a2f33322d3438203d3e20323637353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43d8::/32

    Signature Algorithm: sha256WithRSAEncryption
         26:79:9e:76:f3:66:c4:b5:85:10:db:74:52:0c:ea:5c:dc:47:
         51:37:41:84:50:eb:ec:25:cd:a3:26:17:19:a4:ee:8a:7b:59:
         4d:49:e9:f1:91:98:bb:ee:68:93:7c:24:98:10:97:ae:2d:cb:
         a2:69:bc:c9:c8:b5:5a:fc:3d:ee:b2:14:49:e9:1b:3a:fa:9b:
         75:ca:76:67:e3:b8:f6:fd:fe:5d:37:5b:98:dd:d9:37:10:72:
         5b:a3:23:a3:09:6c:aa:d8:27:56:9e:6c:b9:1e:a7:df:96:b5:
         e0:f6:0b:a0:cd:75:28:54:0c:e0:bf:81:bc:44:a2:51:08:5e:
         f1:e7:6d:2f:ff:90:84:30:0f:59:c0:7a:4b:50:55:fc:71:42:
         63:44:fa:a3:cb:51:12:f1:b1:25:c6:e2:0e:e0:fb:cb:b4:7f:
         f1:47:c6:25:b9:6f:f2:5a:53:b7:79:79:59:64:ad:cd:8c:84:
         98:50:d3:86:28:1b:0a:ca:80:57:e7:b0:6d:45:3d:fe:44:51:
         dd:8c:81:e6:9a:7b:46:ea:66:32:46:ad:5a:69:bf:72:fb:b2:
         ce:79:4d:16:30:bd:e7:bf:0a:e1:d6:d8:a6:44:50:11:5b:6d:
         c9:a5:46:1f:5d:d6:62:a8:d6:e1:5a:14:9d:ef:9c:10:53:3f:
         80:80:be:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----