Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/323830343a333564343a383030303a3a2f33332d3333203d3e20323636333039.roa
File:                     323830343a333564343a383030303a3a2f33332d3333203d3e20323636333039.roa (raw, json)
Hash identifier:          ZXi1Xe9nLhbn9OL3ibJSn3bTIkfHaubiBKMnqsxDXVE=
Subject key identifier:   89:F4:A6:4E:D3:22:F9:C4:69:8F:02:5A:D6:EA:62:15:07:C0:60:39
Certificate issuer:       /CN=68040AEB3AC98B5FF3C03D98E901AB8177343C76
Certificate serial:       3BF9A3F490F39FFBB14215609C90685668451BCB
Authority key identifier: 68:04:0A:EB:3A:C9:8B:5F:F3:C0:3D:98:E9:01:AB:81:77:34:3C:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68040AEB3AC98B5FF3C03D98E901AB8177343C76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/323830343a333564343a383030303a3a2f33332d3333203d3e20323636333039.roa
Signing time:             Mon 24 Aug 2026 13:57:26 +0000
ROA not before:           Mon 24 Aug 2026 13:52:26 +0000
ROA not after:            Mon 23 Aug 2027 13:57:26 +0000
asID:                     266309
IP address blocks:        2804:35d4:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:f9:a3:f4:90:f3:9f:fb:b1:42:15:60:9c:90:68:56:68:45:1b:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68040AEB3AC98B5FF3C03D98E901AB8177343C76
        Validity
            Not Before: Aug 24 13:52:26 2026 GMT
            Not After : Aug 23 13:57:26 2027 GMT
        Subject: CN=89F4A64ED322F9C4698F025AD6EA621507C06039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:af:d8:12:09:cf:28:f8:f2:d5:11:41:5f:2b:
                    48:a6:87:9e:de:53:28:64:a4:18:92:18:14:8d:ae:
                    23:e9:c8:9e:16:fd:25:c8:24:8b:6a:91:13:cd:7f:
                    9b:dd:8e:e7:aa:d4:f3:40:3e:71:62:41:f0:c1:43:
                    01:1d:f2:29:0e:4e:2f:33:c5:52:4f:93:d5:c7:a0:
                    e0:f0:ae:00:88:c3:94:f0:d1:47:7f:b6:ad:39:f1:
                    d3:7f:01:62:75:ab:b4:e3:37:e8:78:31:8a:c7:7b:
                    2c:4d:34:91:34:91:52:92:22:0e:3e:7c:02:01:30:
                    d6:53:c7:2f:c0:e4:f4:a8:91:73:c6:f9:49:f1:de:
                    d5:63:9b:c3:62:0a:23:ee:3e:03:15:f4:0c:27:3c:
                    99:fa:d3:08:0f:f2:08:55:53:5e:c4:b0:4f:5a:84:
                    44:45:00:be:57:4a:23:cc:b5:ca:2f:e9:7c:23:8d:
                    92:e7:ef:b6:fa:6e:f7:ff:af:1c:c5:d4:9e:a3:2a:
                    da:8f:52:44:b6:67:70:64:a5:dd:8c:ca:21:aa:e5:
                    5c:3c:a8:94:30:17:65:c1:bd:4d:5b:78:36:4a:f2:
                    b7:7f:0a:25:96:df:95:93:14:2b:5e:02:10:71:1a:
                    44:80:80:f1:00:1f:f4:ee:d4:c5:81:49:59:b5:e6:
                    bb:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:F4:A6:4E:D3:22:F9:C4:69:8F:02:5A:D6:EA:62:15:07:C0:60:39
            X509v3 Authority Key Identifier:
                keyid:68:04:0A:EB:3A:C9:8B:5F:F3:C0:3D:98:E9:01:AB:81:77:34:3C:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68040AEB3AC98B5FF3C03D98E901AB8177343C76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/323830343a333564343a383030303a3a2f33332d3333203d3e20323636333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:35d4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         22:fe:54:07:89:c1:4a:f9:ee:fe:e0:e6:f6:85:14:0f:b4:de:
         4f:58:fe:e8:a7:40:9e:8e:a3:5a:2c:4e:4d:1b:ae:d4:d6:93:
         84:e8:87:42:68:6e:2a:d8:24:7b:e5:78:68:18:6e:dd:1e:e2:
         54:45:d0:60:3a:61:8f:ee:44:8c:2b:ab:04:e1:de:c7:21:61:
         0f:dc:fd:ef:7b:f8:7e:65:f9:0b:f2:81:a8:ed:d6:1c:00:86:
         af:56:49:99:10:a2:ad:54:a9:fd:41:27:26:46:2d:c6:dd:59:
         7a:fb:47:a1:3d:ed:f6:67:fd:87:98:d2:bb:e5:7e:4f:75:04:
         65:58:11:17:7d:cb:05:cb:f6:f8:15:fd:95:23:17:04:9a:20:
         f5:00:a7:b7:3b:f2:42:5a:7b:a8:62:a2:04:fe:06:cd:17:c1:
         42:1e:1d:cd:e6:6b:26:4c:70:0b:bc:59:da:8a:7c:e2:86:21:
         39:72:ae:d2:da:f4:62:86:2d:d4:ab:ec:d2:9d:93:f1:98:fb:
         08:3d:d0:54:a6:ba:15:45:be:ba:25:fe:10:4f:b0:a3:4d:87:
         04:97:47:d4:58:6f:0f:fa:09:03:08:0c:74:74:22:34:55:1c:
         c6:33:78:fe:1c:99:16:15:6e:80:44:d4:6a:ed:ab:fb:a8:8d:
         de:f0:7a:3a
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgIUO/mj9JDzn/uxQhVgnJBoVmhFG8swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjgwNDBBRUIzQUM5OEI1RkYzQzAzRDk4RTkwMUFCODE3
NzM0M0M3NjAeFw0yNjA4MjQxMzUyMjZaFw0yNzA4MjMxMzU3MjZaMDMxMTAvBgNV
BAMTKDg5RjRBNjRFRDMyMkY5QzQ2OThGMDI1QUQ2RUE2MjE1MDdDMDYwMzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvr9gSCc8o+PLVEUFfK0imh57e
UyhkpBiSGBSNriPpyJ4W/SXIJItqkRPNf5vdjueq1PNAPnFiQfDBQwEd8ikOTi8z
xVJPk9XHoODwrgCIw5Tw0Ud/tq058dN/AWJ1q7TjN+h4MYrHeyxNNJE0kVKSIg4+
fAIBMNZTxy/A5PSokXPG+Unx3tVjm8NiCiPuPgMV9AwnPJn60wgP8ghVU17EsE9a
hERFAL5XSiPMtcov6XwjjZLn77b6bvf/rxzF1J6jKtqPUkS2Z3Bkpd2MyiGq5Vw8
qJQwF2XBvU1beDZK8rd/CiWW35WTFCteAhBxGkSAgPEAH/Tu1MWBSVm15rt/AgMB
AAGjggJbMIICVzAdBgNVHQ4EFgQUifSmTtMi+cRpjwJa1upiFQfAYDkwHwYDVR0j
BBgwFoAUaAQK6zrJi1/zwD2Y6QGrgXc0PHYwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNWFGbzhZa1ZxODVGTm81ejd2b1FBcloyTHdGQ3A3R3hqNjEzZUg4UG5x
ejkvMC82ODA0MEFFQjNBQzk4QjVGRjNDMDNEOThFOTAxQUI4MTc3MzQzQzc2LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzY4MDQwQUVCM0FDOThCNUZG
M0MwM0Q5OEU5MDFBQjgxNzczNDNDNzYuY2VyMIG2BggrBgEFBQcBCwSBqTCBpjCB
owYIKwYBBQUHMAuGgZZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzVhRm84WWtWcTg1Rk5vNXo3dm9RQXJaMkx3RkNwN0d4ajYxM2VIOFBucXo5LzAv
MzIzODMwMzQzYTMzMzU2NDM0M2EzODMwMzAzMDNhM2EyZjMzMzMyZDMzMzMyMDNk
M2UyMDMyMzYzNjMzMzAzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwDgQCAAIwCAMGBygENdSAMA0GCSqGSIb3DQEBCwUA
A4IBAQAi/lQHicFK+e7+4Ob2hRQPtN5PWP7op0CejqNaLE5NG67U1pOE6IdCaG4q
2CR75XhoGG7dHuJURdBgOmGP7kSMK6sE4d7HIWEP3P3ve/h+ZfkL8oGo7dYcAIav
VkmZEKKtVKn9QScmRi3G3Vl6+0ehPe32Z/2HmNK75X5PdQRlWBEXfcsFy/b4Ff2V
IxcEmiD1AKe3O/JCWnuoYqIE/gbNF8FCHh3N5msmTHALvFnainzihiE5cq7S2vRi
hi3Uq+zSnZPxmPsIPdBUproVRb66Jf4QT7CjTYcEl0fUWG8P+gkDCAx0dCI0VRzG
M3j+HJkWFW6ARNRq7av7qI3e8Ho6
-----END CERTIFICATE-----