Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/323830343a6532343a3a2f33322d3438203d3e20323632343137.roa
File:                     323830343a6532343a3a2f33322d3438203d3e20323632343137.roa (raw, json)
Hash identifier:          CY36rVp4F51pZUqKHY08qe7/ghcuUOgh5eWof4so7c8=
Subject key identifier:   A8:FF:6E:0E:49:DD:A6:6E:38:D9:B0:45:F1:0D:38:17:FB:FC:38:61
Certificate issuer:       /CN=09621261D73082600F4F44D6CE2A087E16F5D31C
Certificate serial:       29AC8415684AAEE5E697E9522A286778B2AE9A33
Authority key identifier: 09:62:12:61:D7:30:82:60:0F:4F:44:D6:CE:2A:08:7E:16:F5:D3:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09621261D73082600F4F44D6CE2A087E16F5D31C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/323830343a6532343a3a2f33322d3438203d3e20323632343137.roa
Signing time:             Tue 21 Apr 2026 21:56:45 +0000
ROA not before:           Tue 21 Apr 2026 21:51:45 +0000
ROA not after:            Tue 20 Apr 2027 21:56:45 +0000
asID:                     262417
IP address blocks:        2804:e24::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:ac:84:15:68:4a:ae:e5:e6:97:e9:52:2a:28:67:78:b2:ae:9a:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09621261D73082600F4F44D6CE2A087E16F5D31C
        Validity
            Not Before: Apr 21 21:51:45 2026 GMT
            Not After : Apr 20 21:56:45 2027 GMT
        Subject: CN=A8FF6E0E49DDA66E38D9B045F10D3817FBFC3861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:28:09:99:a8:33:e6:86:2e:54:0e:d8:5d:47:
                    aa:4c:63:0b:6e:77:03:37:ea:f3:c2:78:56:08:f0:
                    8e:72:68:be:d5:07:c6:e6:87:50:30:09:bb:78:8e:
                    b8:86:76:53:3c:8f:e6:49:f9:09:f6:72:27:84:d7:
                    0d:a5:bf:3f:44:0e:d0:a0:b0:47:bd:a9:29:09:f4:
                    8b:2c:ed:24:fc:be:59:fb:94:f8:16:50:9a:2d:47:
                    b1:9f:06:13:9c:d8:77:49:58:17:31:27:68:10:f4:
                    6c:a4:ed:4a:54:b5:97:a3:ed:ce:8f:14:ca:6d:f8:
                    21:fe:9f:26:f7:69:fe:ae:18:25:c4:04:5a:44:95:
                    90:dc:af:c7:5b:7e:a7:bb:fd:62:32:63:6a:89:12:
                    04:aa:0a:fe:42:78:26:70:37:99:c9:bf:b5:2d:6e:
                    53:1a:31:09:ef:fd:84:c1:d9:c5:a1:51:24:db:96:
                    83:44:b3:19:38:ea:64:5d:c7:64:17:20:bd:17:90:
                    3c:ac:d4:cf:d5:11:02:07:8c:0c:3c:7f:5d:1c:3c:
                    6a:58:cd:8d:29:2d:1e:e7:65:bd:fe:5d:03:c8:00:
                    fb:b5:5d:df:48:cb:ee:01:48:aa:5e:1b:4d:24:31:
                    40:65:c5:de:b1:5a:03:4f:e9:00:38:5d:8d:cd:bc:
                    3d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:FF:6E:0E:49:DD:A6:6E:38:D9:B0:45:F1:0D:38:17:FB:FC:38:61
            X509v3 Authority Key Identifier:
                keyid:09:62:12:61:D7:30:82:60:0F:4F:44:D6:CE:2A:08:7E:16:F5:D3:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/09621261D73082600F4F44D6CE2A087E16F5D31C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/09621261D73082600F4F44D6CE2A087E16F5D31C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HEB45RzFg3G4iUiz4fuU4qT8PGo64RRPLtzaMWxfGUfR/0/323830343a6532343a3a2f33322d3438203d3e20323632343137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e24::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:f2:b7:28:5e:d9:19:82:70:10:03:94:48:f5:0a:5d:eb:c7:
         7f:80:93:a8:72:46:76:02:1d:fb:c6:eb:0f:7c:87:90:5e:7c:
         ba:fd:7b:72:a9:12:b1:6c:c3:68:f5:46:4a:5c:46:9a:b1:56:
         f8:3a:14:4b:9c:03:4f:be:1a:3d:d9:06:39:a1:3a:dd:e0:02:
         b2:32:a5:8f:5c:9b:81:76:d6:c5:79:f8:35:13:10:5d:b2:8b:
         aa:77:64:4a:2a:7d:54:40:40:c2:ea:8d:31:e0:2e:26:d9:ad:
         f8:c5:57:1f:b9:a3:b2:d2:89:6a:b0:51:5f:b8:2f:d6:55:91:
         b7:4d:a2:57:05:5a:76:c5:02:a6:84:f2:56:52:d0:60:0e:ff:
         69:ae:74:3a:1e:78:3d:92:03:19:76:d9:e1:b4:69:f1:80:00:
         60:02:87:7e:37:b8:fa:13:df:ea:04:ff:5a:8d:3d:0b:53:61:
         e8:00:05:53:59:8d:78:36:bb:74:99:fb:5e:31:c2:29:a8:bc:
         b0:6c:22:c1:07:f2:14:ee:32:0c:4b:ca:0b:cd:21:4b:24:f6:
         57:56:0d:95:a2:fe:5c:45:6b:e0:be:1c:9c:af:ad:36:0f:f3:
         e8:20:92:b1:8f:b9:c4:03:b7:c3:76:52:3c:26:2c:a2:2e:00:
         5e:4e:3b:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:50:04 2026 by rpki-client