Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/323830343a353039343a3a2f33322d3438203d3e20323638333937.roa
File:                     323830343a353039343a3a2f33322d3438203d3e20323638333937.roa (raw, json)
Hash identifier:          TRz/yvSIRaFMEKjRugvwg/gUKuutq7gki7vs5T1ovcs=
Subject key identifier:   D0:7E:7B:CA:EA:C5:81:A0:68:85:8C:22:EE:D4:66:B4:F2:DC:70:F5
Certificate issuer:       /CN=E68BB9511D551C8445F6B84AD60A02028B528342
Certificate serial:       13389A308DCA0080A534D4F7BDF3258E47696A68
Authority key identifier: E6:8B:B9:51:1D:55:1C:84:45:F6:B8:4A:D6:0A:02:02:8B:52:83:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68BB9511D551C8445F6B84AD60A02028B528342.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/323830343a353039343a3a2f33322d3438203d3e20323638333937.roa
Signing time:             Wed 03 Jun 2026 14:12:08 +0000
ROA not before:           Wed 03 Jun 2026 14:07:08 +0000
ROA not after:            Wed 02 Jun 2027 14:12:08 +0000
asID:                     268397
IP address blocks:        2804:5094::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:38:9a:30:8d:ca:00:80:a5:34:d4:f7:bd:f3:25:8e:47:69:6a:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E68BB9511D551C8445F6B84AD60A02028B528342
        Validity
            Not Before: Jun  3 14:07:08 2026 GMT
            Not After : Jun  2 14:12:08 2027 GMT
        Subject: CN=D07E7BCAEAC581A068858C22EED466B4F2DC70F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:42:11:81:41:83:89:30:f0:6d:9d:f3:af:af:
                    fb:b4:e9:fd:7a:7b:c4:58:e8:13:22:87:b7:5f:96:
                    73:09:3d:c9:34:39:ca:40:52:59:7a:02:5b:39:1d:
                    f0:94:da:a2:f6:0c:ad:86:af:14:f2:71:26:30:d5:
                    1a:f8:da:3f:ae:af:f1:1d:f2:84:61:1a:fe:96:86:
                    0a:99:f4:00:d1:10:71:0f:bb:00:65:86:60:cb:41:
                    88:bc:8a:11:46:0e:a6:99:a2:75:60:b5:80:66:fc:
                    4c:79:80:18:db:e3:dd:d3:96:b2:10:18:a4:ff:ee:
                    42:4f:0a:8a:9f:da:01:e4:87:20:29:a8:05:9a:2b:
                    ba:83:7b:f3:9c:84:c5:84:44:01:3f:5f:fa:36:90:
                    84:7c:f9:7a:6f:ca:25:2f:c0:14:a4:be:7a:a8:ce:
                    99:b9:bf:e1:c8:f1:bd:ef:77:a2:c2:bb:64:68:20:
                    55:3b:8a:05:87:03:d1:70:60:4e:ef:2b:ee:84:5a:
                    2e:c9:3a:c4:d3:10:d7:ec:1f:c2:3b:b0:29:c6:6a:
                    c9:d3:0a:26:e1:49:83:c8:30:8a:48:c0:20:9d:d1:
                    18:65:60:f1:be:0f:f0:40:ff:64:f4:d5:78:80:2e:
                    1f:ae:da:b9:e2:b7:c8:87:27:5e:25:2c:dd:03:d2:
                    ff:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:7E:7B:CA:EA:C5:81:A0:68:85:8C:22:EE:D4:66:B4:F2:DC:70:F5
            X509v3 Authority Key Identifier:
                keyid:E6:8B:B9:51:1D:55:1C:84:45:F6:B8:4A:D6:0A:02:02:8B:52:83:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/E68BB9511D551C8445F6B84AD60A02028B528342.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E68BB9511D551C8445F6B84AD60A02028B528342.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/NJdNezN6CG4FSpXacoPXJT4e82iKXRDc7RjmdAVLD4i/0/323830343a353039343a3a2f33322d3438203d3e20323638333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5094::/32

    Signature Algorithm: sha256WithRSAEncryption
         96:14:b6:58:5e:54:78:15:90:c5:9b:7e:9e:73:61:81:a6:ef:
         b6:b7:28:6a:04:31:f4:3f:24:3e:64:41:4b:0e:55:12:1d:59:
         17:eb:4b:e9:08:b4:91:88:64:b2:ed:e4:ba:14:0b:97:af:eb:
         1f:46:50:3e:d4:07:6d:16:a5:5c:fa:ba:63:2a:b6:4c:5b:7e:
         98:9c:13:f0:04:5f:ac:66:a1:76:d8:ae:b6:6e:f5:aa:a4:b8:
         88:e9:e1:91:75:87:f6:02:db:0f:6a:3c:30:31:c9:6c:cd:56:
         7d:8d:82:8d:2b:6d:1d:29:a8:cd:e5:9f:94:3f:97:75:d4:b5:
         30:6e:e6:dc:01:4d:67:7b:4b:75:74:06:c9:a5:8c:a2:a3:f3:
         14:e0:03:39:67:8b:5f:bf:be:d0:f3:88:4c:a4:c2:4e:24:bc:
         34:a8:84:ca:9a:b1:65:d3:f0:29:69:39:d4:20:35:42:12:12:
         3f:b5:6a:1c:ca:f9:98:01:81:04:40:cc:a9:bf:a8:5d:ae:67:
         d4:a2:6d:ca:2d:a8:43:01:9d:51:2b:4a:8b:ae:84:5a:81:8b:
         33:a9:b8:19:6e:6b:b7:2e:95:a5:eb:f6:16:ef:5c:3b:e0:bf:
         0b:2c:df:c9:c5:f8:dd:82:75:bb:6e:d7:60:ba:61:eb:88:47:
         fe:93:8a:75
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUEziaMI3KAIClNNT3vfMljkdpamgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTY4QkI5NTExRDU1MUM4NDQ1RjZCODRBRDYwQTAyMDI4
QjUyODM0MjAeFw0yNjA2MDMxNDA3MDhaFw0yNzA2MDIxNDEyMDhaMDMxMTAvBgNV
BAMTKEQwN0U3QkNBRUFDNTgxQTA2ODg1OEMyMkVFRDQ2NkI0RjJEQzcwRjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsQhGBQYOJMPBtnfOvr/u06f16
e8RY6BMih7dflnMJPck0OcpAUll6Als5HfCU2qL2DK2GrxTycSYw1Rr42j+ur/Ed
8oRhGv6WhgqZ9ADREHEPuwBlhmDLQYi8ihFGDqaZonVgtYBm/Ex5gBjb493TlrIQ
GKT/7kJPCoqf2gHkhyApqAWaK7qDe/OchMWERAE/X/o2kIR8+XpvyiUvwBSkvnqo
zpm5v+HI8b3vd6LCu2RoIFU7igWHA9FwYE7vK+6EWi7JOsTTENfsH8I7sCnGasnT
CibhSYPIMIpIwCCd0RhlYPG+D/BA/2T01XiALh+u2rnit8iHJ14lLN0D0v/RAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQU0H57yurFgaBohYwi7tRmtPLccPUwHwYDVR0j
BBgwFoAU5ou5UR1VHIRF9rhK1goCAotSg0IwDgYDVR0PAQH/BAQDAgeAMIGSBgNV
HR8EgYowgYcwgYSggYGgf4Z9cnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIv
cmVwby9OSmROZXpONkNHNEZTcFhhY29QWEpUNGU4MmlLWFJEYzdSam1kQVZMRDRp
LzAvRTY4QkI5NTExRDU1MUM4NDQ1RjZCODRBRDYwQTAyMDI4QjUyODM0Mi5jcmww
eAYIKwYBBQUHAQEEbDBqMGgGCCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5y
ZWdpc3Ryby5ici9yZXBvL25pY2JyX3JlcG8vMS9FNjhCQjk1MTFENTUxQzg0NDVG
NkI4NEFENjBBMDIwMjhCNTI4MzQyLmNlcjCBqwYIKwYBBQUHAQsEgZ4wgZswgZgG
CCsGAQUFBzALhoGLcnN5bmM6Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9O
SmROZXpONkNHNEZTcFhhY29QWEpUNGU4MmlLWFJEYzdSam1kQVZMRDRpLzAvMzIz
ODMwMzQzYTM1MzAzOTM0M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM4MzMz
OTM3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/
BBEwDzANBAIAAjAHAwUAKARQlDANBgkqhkiG9w0BAQsFAAOCAQEAlhS2WF5UeBWQ
xZt+nnNhgabvtrcoagQx9D8kPmRBSw5VEh1ZF+tL6Qi0kYhksu3kuhQLl6/rH0ZQ
PtQHbRalXPq6Yyq2TFt+mJwT8ARfrGahdtiutm71qqS4iOnhkXWH9gLbD2o8MDHJ
bM1WfY2CjSttHSmozeWflD+XddS1MG7m3AFNZ3tLdXQGyaWMoqPzFOADOWeLX7++
0POITKTCTiS8NKiEypqxZdPwKWk51CA1QhISP7VqHMr5mAGBBEDMqb+oXa5n1KJt
yi2oQwGdUStKi66EWoGLM6m4GW5rty6Vpev2Fu9cO+C/CyzfycX43YJ1u27XYLph
64hH/pOKdQ==
-----END CERTIFICATE-----