Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/323830343a363730303a313430303a3a2f34322d3432203d3e20323639353937.roa
File:                     323830343a363730303a313430303a3a2f34322d3432203d3e20323639353937.roa (raw, json)
Hash identifier:          7bhaflZjE39B7ZAY9sKnhBc47llm8HwDw7P4WUTitkM=
Subject key identifier:   5E:8C:4A:B6:E7:7A:1B:A3:CC:55:CC:35:78:B9:B2:BA:CC:88:01:CB
Certificate issuer:       /CN=11F4865823D65C7C2943A45FEA49FEC8A3990F5A
Certificate serial:       619BA6700A274C57BBC8587BB5D674197BB9B002
Authority key identifier: 11:F4:86:58:23:D6:5C:7C:29:43:A4:5F:EA:49:FE:C8:A3:99:0F:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/323830343a363730303a313430303a3a2f34322d3432203d3e20323639353937.roa
Signing time:             Thu 09 Jul 2026 19:41:07 +0000
ROA not before:           Thu 09 Jul 2026 19:36:07 +0000
ROA not after:            Thu 08 Jul 2027 19:41:07 +0000
asID:                     269597
IP address blocks:        2804:6700:1400::/42 maxlen: 42
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:9b:a6:70:0a:27:4c:57:bb:c8:58:7b:b5:d6:74:19:7b:b9:b0:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11F4865823D65C7C2943A45FEA49FEC8A3990F5A
        Validity
            Not Before: Jul  9 19:36:07 2026 GMT
            Not After : Jul  8 19:41:07 2027 GMT
        Subject: CN=5E8C4AB6E77A1BA3CC55CC3578B9B2BACC8801CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ff:8e:bb:3e:79:7a:1e:86:f3:b7:ce:16:9b:
                    9d:68:ba:81:96:80:b0:88:9a:f0:b8:63:bd:40:e1:
                    c1:bb:ea:5c:b9:71:81:07:1f:09:23:77:a0:34:b7:
                    64:08:69:3f:07:c3:97:e6:67:1a:bb:46:06:92:86:
                    32:a0:94:34:d6:c9:b7:98:9f:60:e5:e8:a6:ee:bc:
                    fe:5c:fd:ac:6e:d9:aa:e0:29:49:85:31:c2:3a:9c:
                    c6:81:40:3d:39:f0:30:3f:8f:49:51:6c:6f:66:79:
                    a6:2a:0c:1e:4e:fe:6e:e9:b2:8b:b4:bd:ec:31:d0:
                    3b:a5:23:57:9c:cb:12:64:35:b4:5d:3a:a4:15:b5:
                    c9:2a:8a:a9:2b:57:f8:62:76:8d:d3:5d:f7:a6:65:
                    b7:fe:c7:ea:6c:11:59:0a:dc:49:34:b5:6c:46:5b:
                    bf:9f:e7:f2:07:bf:90:4c:e5:ce:46:63:39:1f:1d:
                    f9:84:2e:4c:15:8e:f9:ce:1b:4e:2b:6a:27:8f:4b:
                    b1:b3:b8:be:3c:1e:8d:e6:f1:53:7f:a5:7d:7d:c3:
                    e0:78:60:0e:22:45:b7:2c:7a:f4:3c:e6:93:d4:5f:
                    d8:0f:9b:64:cb:53:22:ec:47:1e:d3:ef:93:9c:ea:
                    11:12:fd:04:1b:45:a5:cb:02:d6:db:e6:85:26:33:
                    37:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:8C:4A:B6:E7:7A:1B:A3:CC:55:CC:35:78:B9:B2:BA:CC:88:01:CB
            X509v3 Authority Key Identifier:
                keyid:11:F4:86:58:23:D6:5C:7C:29:43:A4:5F:EA:49:FE:C8:A3:99:0F:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/323830343a363730303a313430303a3a2f34322d3432203d3e20323639353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6700:1400::/42

    Signature Algorithm: sha256WithRSAEncryption
         9c:b0:a4:a1:91:6f:eb:56:68:c9:2d:fa:9d:8e:c2:8a:02:99:
         0c:81:21:23:a1:d0:aa:5e:c0:b9:13:92:c1:12:c2:8d:e9:b9:
         df:4c:5e:c6:30:aa:b8:62:2b:a6:ad:1b:6e:35:7a:cf:2f:b5:
         cc:1c:3f:8d:a8:63:33:ef:18:49:88:d6:f7:89:5d:de:5d:e4:
         9c:97:48:f9:aa:ab:7e:c7:f2:f4:70:2b:4a:9e:06:dd:5e:ea:
         72:ce:ee:54:83:fd:44:80:f4:e5:2e:41:04:c7:a8:70:2f:0e:
         04:17:dc:99:7e:34:3e:12:ae:7c:e1:fa:16:84:0b:c8:f5:4d:
         42:a2:8e:d6:01:6e:2e:a0:6f:79:9d:6e:b3:a7:6e:94:ef:1b:
         18:ce:f0:38:25:57:6a:ad:53:b3:87:7a:e9:20:a9:12:53:f1:
         f8:75:ab:69:d9:29:4d:e6:da:87:cf:87:c3:bf:e3:7a:17:3d:
         f6:be:31:54:ce:9c:9e:9e:07:89:47:9c:fe:ea:f7:ae:79:74:
         ae:ca:74:6d:55:c0:d6:ec:b7:66:07:58:1c:a0:5d:0b:f5:6e:
         61:78:35:78:99:12:03:20:83:0a:fc:eb:e6:3f:43:73:ea:1f:
         ef:c9:35:de:ef:69:7a:3d:9d:b2:71:3e:ce:27:7c:7a:f5:3f:
         87:8e:81:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----