Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/0/323830343a336636343a3a2f33322d313238203d3e20323635383930.roa
File:                     323830343a336636343a3a2f33322d313238203d3e20323635383930.roa (raw, json)
Hash identifier:          W7pV6a95T8U1yytj89YZ5QB83F99LZmMbcxdRMkWToA=
Subject key identifier:   B1:CA:4A:6C:E3:6A:D9:F5:39:21:A0:FC:88:D4:89:52:95:0E:F0:16
Certificate issuer:       /CN=378AF248866D7894637F1B5F4BA46F961C09B63D
Certificate serial:       5F675D7A8356667EF46B66F4738C6795BE56654E
Authority key identifier: 37:8A:F2:48:86:6D:78:94:63:7F:1B:5F:4B:A4:6F:96:1C:09:B6:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/378AF248866D7894637F1B5F4BA46F961C09B63D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/0/323830343a336636343a3a2f33322d313238203d3e20323635383930.roa
Signing time:             Fri 03 Jul 2026 13:27:09 +0000
ROA not before:           Fri 03 Jul 2026 13:22:09 +0000
ROA not after:            Fri 02 Jul 2027 13:27:09 +0000
asID:                     265890
IP address blocks:        2804:3f64::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:67:5d:7a:83:56:66:7e:f4:6b:66:f4:73:8c:67:95:be:56:65:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=378AF248866D7894637F1B5F4BA46F961C09B63D
        Validity
            Not Before: Jul  3 13:22:09 2026 GMT
            Not After : Jul  2 13:27:09 2027 GMT
        Subject: CN=B1CA4A6CE36AD9F53921A0FC88D48952950EF016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0f:65:8f:ad:08:a0:0d:bf:56:66:b2:6d:d4:
                    08:35:2d:10:d3:30:d7:b3:27:67:c4:9b:2b:0e:80:
                    ac:b0:45:18:11:a2:5c:37:c8:29:2c:d0:b4:3b:84:
                    ef:40:31:c7:a8:cf:c7:6d:8b:dc:91:e2:82:8c:84:
                    18:b4:47:e2:00:7a:b4:b9:f4:91:a8:a0:18:61:0a:
                    01:80:f8:3e:c2:39:5d:30:bd:ff:3a:69:19:36:ab:
                    bd:b7:2f:d5:7d:4a:b2:6b:14:6e:e3:3e:3e:e1:aa:
                    f9:a7:2c:9f:eb:55:9c:1b:3f:2d:b8:54:f0:69:27:
                    20:81:68:30:73:00:7b:a5:6c:0e:ec:22:2e:02:28:
                    e9:5f:ba:70:a8:09:c8:b9:ff:a7:83:a1:aa:f6:65:
                    00:2f:31:5f:4e:2c:9c:2d:d6:37:b0:d5:55:d7:ad:
                    9d:42:a7:5e:87:a0:3c:78:fb:4f:70:bd:69:a6:f3:
                    8b:e6:55:06:fe:3b:e5:d5:d5:8b:0c:73:b6:d2:37:
                    86:62:b8:61:6b:81:0a:9c:8d:30:2a:27:6b:87:7b:
                    66:98:81:52:40:55:fe:2e:62:dc:f0:94:2e:43:34:
                    f6:7c:8d:f7:99:b4:0b:82:f1:e6:45:ec:9f:f6:cc:
                    e0:9b:29:46:66:0a:ed:cd:ec:c4:9f:4e:ee:9f:d4:
                    ba:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:CA:4A:6C:E3:6A:D9:F5:39:21:A0:FC:88:D4:89:52:95:0E:F0:16
            X509v3 Authority Key Identifier:
                keyid:37:8A:F2:48:86:6D:78:94:63:7F:1B:5F:4B:A4:6F:96:1C:09:B6:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/0/378AF248866D7894637F1B5F4BA46F961C09B63D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/378AF248866D7894637F1B5F4BA46F961C09B63D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HjYyFC9DBpHQDNZckmgGjT3yQTLKvFbSsCza3M8WQ8qA/0/323830343a336636343a3a2f33322d313238203d3e20323635383930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3f64::/32

    Signature Algorithm: sha256WithRSAEncryption
         2b:eb:56:1b:be:b9:60:96:2b:45:9a:8e:1e:63:5f:05:e4:4e:
         d9:02:ce:19:5a:f4:40:a3:7c:52:d1:34:44:5d:87:5a:90:8c:
         36:d2:9b:4b:8e:a0:eb:fe:f1:18:53:a2:ca:1f:59:9a:be:93:
         a1:f1:b2:a0:d1:08:e3:eb:88:f0:36:bd:78:03:89:ec:26:77:
         c9:13:25:04:c8:db:ca:bb:2c:48:64:e8:83:06:a4:8f:f2:5c:
         64:9f:a8:5d:87:d2:22:55:35:9a:91:60:f8:19:55:6a:2f:15:
         d0:c5:59:a7:c8:6a:e3:66:0f:fd:83:25:ab:3a:58:37:ea:46:
         b5:01:ef:26:91:26:32:4b:f4:26:8d:dd:f0:a4:8c:4c:d8:ff:
         69:87:85:ed:18:80:05:da:da:dd:28:b6:50:dd:16:25:dc:86:
         d2:83:dc:c3:1a:e3:54:85:b9:3e:03:32:3a:da:d2:17:4b:3c:
         99:de:ff:13:d4:78:04:2a:c3:b5:46:09:1d:45:e7:36:a4:90:
         1b:b4:4a:59:53:75:39:9f:ae:dc:ea:55:57:19:45:ce:e4:c2:
         b2:6c:92:16:51:4e:95:d9:da:2d:91:68:09:8f:d8:1b:77:93:
         e2:09:be:22:49:9e:64:97:2c:de:5c:b8:b8:84:e3:49:26:b6:
         2f:8d:f4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----