Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/323830343a363730303a343030303a3a2f33342d3334203d3e20323639353937.roa
File:                     323830343a363730303a343030303a3a2f33342d3334203d3e20323639353937.roa (raw, json)
Hash identifier:          QevWvHsCmcoO8HG5WR1pNRlE+4gCN5yHYORS/0E34Cc=
Subject key identifier:   F3:B6:0C:E3:03:C2:F5:65:91:22:10:4B:19:DC:EE:26:7F:92:80:65
Certificate issuer:       /CN=11F4865823D65C7C2943A45FEA49FEC8A3990F5A
Certificate serial:       1A1EB8BFF30E18BA617D5DEC1F10B4E4EFD46862
Authority key identifier: 11:F4:86:58:23:D6:5C:7C:29:43:A4:5F:EA:49:FE:C8:A3:99:0F:5A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/323830343a363730303a343030303a3a2f33342d3334203d3e20323639353937.roa
Signing time:             Thu 09 Jul 2026 19:41:08 +0000
ROA not before:           Thu 09 Jul 2026 19:36:08 +0000
ROA not after:            Thu 08 Jul 2027 19:41:08 +0000
asID:                     269597
IP address blocks:        2804:6700:4000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:1e:b8:bf:f3:0e:18:ba:61:7d:5d:ec:1f:10:b4:e4:ef:d4:68:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11F4865823D65C7C2943A45FEA49FEC8A3990F5A
        Validity
            Not Before: Jul  9 19:36:08 2026 GMT
            Not After : Jul  8 19:41:08 2027 GMT
        Subject: CN=F3B60CE303C2F5659122104B19DCEE267F928065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:89:33:1b:d7:15:96:0d:ed:9d:0b:8e:6c:ed:
                    02:6e:1e:7f:e7:0c:66:75:87:a0:e8:e9:bb:06:a0:
                    5c:87:be:df:69:79:b4:ca:85:a6:13:ac:e8:09:26:
                    ce:f6:19:83:97:c0:01:6c:66:d1:07:f3:50:3e:b4:
                    d9:ff:84:d5:8a:f8:12:77:c9:c2:95:18:4e:ea:f0:
                    59:4a:ad:05:f2:c9:af:55:24:c7:ec:6d:14:6e:dd:
                    ec:75:cc:f8:33:90:ed:8a:7d:89:b6:5a:94:39:7f:
                    c6:72:18:83:de:94:22:41:d5:4f:68:2b:8c:5c:75:
                    57:12:14:25:b7:2e:48:21:b0:71:11:54:c6:aa:01:
                    1b:78:bc:e3:21:b1:58:18:e5:68:1a:b2:8e:f6:32:
                    95:d6:4f:13:04:49:5e:99:13:bd:85:68:0a:47:e1:
                    9f:b4:4b:df:f4:aa:ee:95:8a:ea:76:19:40:3d:03:
                    06:33:e1:55:1a:d3:81:96:f5:dd:f2:ac:e2:55:c6:
                    87:15:eb:55:13:43:ab:b3:88:04:0b:69:82:2b:1c:
                    e5:22:64:13:d4:33:c2:da:1b:b7:e0:a3:5f:45:ab:
                    51:c5:ed:a4:4a:49:4a:b8:cb:cb:bb:f8:41:68:63:
                    49:ea:c9:dc:f2:9d:31:68:cc:8a:75:6d:2a:76:34:
                    10:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:B6:0C:E3:03:C2:F5:65:91:22:10:4B:19:DC:EE:26:7F:92:80:65
            X509v3 Authority Key Identifier:
                keyid:11:F4:86:58:23:D6:5C:7C:29:43:A4:5F:EA:49:FE:C8:A3:99:0F:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/11F4865823D65C7C2943A45FEA49FEC8A3990F5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GZRQuacA5spvsrH1zCPHcUMqz7Lo16VUsaui1BSxRw8q/0/323830343a363730303a343030303a3a2f33342d3334203d3e20323639353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6700:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         1d:65:01:6a:0c:c6:f5:ee:49:c6:80:4e:09:db:b3:21:35:c5:
         61:c2:fc:06:05:2d:3c:f6:94:bb:19:fa:38:17:c9:fc:11:68:
         a9:ce:92:95:0c:1f:78:f7:b6:25:bf:86:40:27:26:66:a1:d9:
         fe:05:66:3c:aa:54:48:db:9e:55:33:d2:20:77:7b:ce:9b:f1:
         64:3d:ae:01:4e:ff:aa:1f:43:8c:6d:84:08:f2:56:7f:c9:50:
         f0:22:b8:94:c4:35:c1:48:12:2a:87:b2:52:4f:7e:40:a5:91:
         16:81:af:41:fb:dc:d5:3e:03:ea:84:f5:e4:0c:5a:c4:63:6b:
         5c:05:8a:84:c3:a8:a9:cf:ec:db:d2:fb:57:86:b5:76:5e:6e:
         48:fa:e7:90:b8:53:f6:cc:4e:13:46:c3:fb:bf:6a:78:e6:11:
         c8:92:81:27:c0:d5:90:e3:cf:d5:69:54:98:57:6e:06:84:0a:
         8e:d0:ee:34:0d:7e:b3:e8:c5:eb:ac:95:42:16:72:46:3a:f3:
         d8:5b:62:bf:a2:06:f0:6a:db:65:d3:f8:e5:75:77:c0:ce:9a:
         0d:14:37:49:af:9e:aa:31:08:ca:0c:47:6c:48:8a:73:00:40:
         7a:c4:f4:05:43:75:4c:34:30:a1:1a:ec:9e:24:62:ff:ce:ae:
         59:91:57:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----