Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/0/323830343a363033383a3a2f33322d3438203d3e20323639313533.roa
File:                     323830343a363033383a3a2f33322d3438203d3e20323639313533.roa (raw, json)
Hash identifier:          fcayA2W6ysssBeNE6CC4P5NaBjP0ErBc5CfN+wiW1so=
Subject key identifier:   E2:36:59:4C:41:3F:82:D4:8E:48:D8:48:B7:46:57:32:76:49:27:94
Certificate issuer:       /CN=C44CCB5164B3BD1D19A1AE7D9A2BA77587F687E8
Certificate serial:       518B3E782BF37DC86042F0F6DA347D6B29AC22F1
Authority key identifier: C4:4C:CB:51:64:B3:BD:1D:19:A1:AE:7D:9A:2B:A7:75:87:F6:87:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C44CCB5164B3BD1D19A1AE7D9A2BA77587F687E8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/0/323830343a363033383a3a2f33322d3438203d3e20323639313533.roa
Signing time:             Mon 24 Aug 2026 20:35:44 +0000
ROA not before:           Mon 24 Aug 2026 20:30:44 +0000
ROA not after:            Mon 23 Aug 2027 20:35:44 +0000
asID:                     269153
IP address blocks:        2804:6038::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:8b:3e:78:2b:f3:7d:c8:60:42:f0:f6:da:34:7d:6b:29:ac:22:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C44CCB5164B3BD1D19A1AE7D9A2BA77587F687E8
        Validity
            Not Before: Aug 24 20:30:44 2026 GMT
            Not After : Aug 23 20:35:44 2027 GMT
        Subject: CN=E236594C413F82D48E48D848B746573276492794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:91:4f:5c:d2:4d:e6:0a:dd:97:e5:2f:f0:72:
                    b1:e1:f9:5b:cb:71:0a:94:9e:7d:06:4e:77:0d:31:
                    c2:a1:78:38:e5:61:bf:1f:eb:4b:05:9d:73:70:00:
                    f5:56:01:11:b1:e0:41:57:ee:cb:c7:d4:ac:c7:81:
                    b1:87:88:02:3e:e9:7d:55:de:8d:2a:62:35:19:91:
                    db:0c:4a:fd:1b:05:e6:32:99:51:d3:a1:ad:28:41:
                    b6:3a:1e:6a:10:46:92:ea:0b:44:98:a7:b6:53:39:
                    9c:c7:b4:66:ec:b8:de:7d:c7:8c:d2:5c:fa:56:78:
                    da:fb:12:ba:fa:aa:90:a7:93:82:e3:ff:17:11:3f:
                    4e:2b:41:44:d3:63:91:77:20:2a:fa:f6:62:50:88:
                    77:d2:e5:c6:c3:f7:55:97:da:9a:61:df:41:9c:4b:
                    48:b4:d2:d8:09:9a:8b:c2:f3:56:8d:15:73:1a:ca:
                    c3:9d:0e:ee:2d:dc:c3:47:b6:6a:cb:15:d7:72:a8:
                    b2:61:0a:c3:7a:15:9c:c8:c3:d2:e8:45:03:21:62:
                    d8:ad:09:98:1d:23:cb:fd:4d:c3:67:7f:99:7a:86:
                    64:d8:bc:fb:aa:84:52:0c:37:09:7d:82:6a:b2:66:
                    2f:ff:a9:d0:6c:3c:91:9a:45:88:29:af:46:e4:13:
                    f8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:36:59:4C:41:3F:82:D4:8E:48:D8:48:B7:46:57:32:76:49:27:94
            X509v3 Authority Key Identifier:
                keyid:C4:4C:CB:51:64:B3:BD:1D:19:A1:AE:7D:9A:2B:A7:75:87:F6:87:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/0/C44CCB5164B3BD1D19A1AE7D9A2BA77587F687E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C44CCB5164B3BD1D19A1AE7D9A2BA77587F687E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GrZXzfwa2P1iC2U6eMMYFSUkBrfC4CsbUR6wA2PTVZAh/0/323830343a363033383a3a2f33322d3438203d3e20323639313533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6038::/32

    Signature Algorithm: sha256WithRSAEncryption
         5b:66:4a:03:94:7e:ef:18:ed:0c:f5:79:d1:46:7d:70:30:bf:
         63:b0:2b:92:de:e8:48:b2:14:a4:0c:58:1f:20:68:0b:4a:40:
         22:74:cd:cd:8e:ed:77:94:9d:d0:66:ca:ec:6a:a1:01:4a:25:
         05:77:19:6b:78:25:8b:81:87:cd:7f:34:51:4a:81:77:96:21:
         f4:91:c1:bc:ac:58:e8:7a:33:79:a4:ce:e7:02:84:ba:21:48:
         28:bd:71:ea:95:f5:d0:d0:bd:25:11:02:91:16:dd:9c:85:3e:
         15:97:56:ed:ab:06:70:40:2d:c8:1a:53:62:9d:3a:21:0b:5c:
         8f:49:b3:38:da:78:9f:e5:26:45:95:fe:6e:78:f0:86:60:9d:
         a7:df:63:da:ce:49:b8:06:30:85:78:35:40:b6:5e:73:cd:77:
         4d:77:4e:2b:01:bd:2d:19:b2:1a:e6:cf:19:d4:b8:bc:80:b6:
         a2:71:0c:a6:a7:3a:af:19:a6:0f:06:75:ef:12:b0:8e:b1:5e:
         0c:8d:e8:86:05:f9:4b:7d:36:0e:c3:0c:b3:cf:47:8f:70:f0:
         b1:6b:b2:61:30:54:f9:21:81:a5:52:54:8b:40:1c:12:d5:4b:
         59:fa:a2:a3:91:46:7f:06:01:e3:9e:d7:ed:d5:be:40:71:ce:
         49:b9:01:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----