Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/323830343a333564343a3a2f33332d3333203d3e20323636333039.roa
File:                     323830343a333564343a3a2f33332d3333203d3e20323636333039.roa (raw, json)
Hash identifier:          7bGbZEYsNwNybynj+s5RaK/6oYiRBuLp64OUCtawAMQ=
Subject key identifier:   AD:F9:3F:57:0E:84:3E:E6:00:2F:14:B6:EA:68:AE:98:D1:7F:51:08
Certificate issuer:       /CN=68040AEB3AC98B5FF3C03D98E901AB8177343C76
Certificate serial:       0CB21799592BCA6CA8C6AC0D90D75818FC5530E9
Authority key identifier: 68:04:0A:EB:3A:C9:8B:5F:F3:C0:3D:98:E9:01:AB:81:77:34:3C:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68040AEB3AC98B5FF3C03D98E901AB8177343C76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/323830343a333564343a3a2f33332d3333203d3e20323636333039.roa
Signing time:             Mon 24 Aug 2026 13:57:26 +0000
ROA not before:           Mon 24 Aug 2026 13:52:26 +0000
ROA not after:            Mon 23 Aug 2027 13:57:26 +0000
asID:                     266309
IP address blocks:        2804:35d4::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:b2:17:99:59:2b:ca:6c:a8:c6:ac:0d:90:d7:58:18:fc:55:30:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68040AEB3AC98B5FF3C03D98E901AB8177343C76
        Validity
            Not Before: Aug 24 13:52:26 2026 GMT
            Not After : Aug 23 13:57:26 2027 GMT
        Subject: CN=ADF93F570E843EE6002F14B6EA68AE98D17F5108
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:aa:d6:f5:71:a3:06:78:0e:73:2c:48:58:7b:
                    a1:18:f8:c3:94:ae:d1:98:78:5b:81:d8:3f:22:5d:
                    48:89:86:19:04:31:3f:8b:1e:49:6d:d6:87:a3:a7:
                    d7:3e:56:c7:df:ac:28:5d:cf:43:90:ae:dc:52:ec:
                    7e:56:4b:1f:dc:e4:b7:fc:c3:b5:f8:c2:c3:8d:c9:
                    69:7b:02:d1:45:56:22:5c:b9:ad:a1:5f:28:10:94:
                    ad:44:75:db:a4:0e:0d:f1:2a:b8:e9:70:6e:8b:53:
                    b5:0a:48:62:ca:62:75:86:d6:e9:87:3c:f0:eb:83:
                    80:69:85:bc:f8:a1:77:e4:02:e0:a9:9f:7b:b6:f0:
                    2f:26:3f:8b:35:7c:4f:45:34:d2:2a:09:df:b2:e3:
                    70:3e:8f:2a:25:88:0f:5c:c0:b6:90:6e:03:61:dc:
                    15:cf:84:dd:aa:70:fa:6f:00:d7:be:7a:df:36:d2:
                    76:fc:e2:cd:82:89:e3:9f:03:3a:49:22:f8:c9:f0:
                    dc:b8:1b:9e:54:da:8a:d1:c0:a3:35:33:2f:81:6f:
                    49:e2:85:f2:41:fa:f8:00:58:86:89:c2:8b:b6:03:
                    19:be:66:07:f7:b4:c6:d2:e1:c9:69:c4:f8:d2:6e:
                    bb:dd:c6:2f:e6:7e:d1:e4:b7:a5:2b:86:14:66:10:
                    00:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F9:3F:57:0E:84:3E:E6:00:2F:14:B6:EA:68:AE:98:D1:7F:51:08
            X509v3 Authority Key Identifier:
                keyid:68:04:0A:EB:3A:C9:8B:5F:F3:C0:3D:98:E9:01:AB:81:77:34:3C:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68040AEB3AC98B5FF3C03D98E901AB8177343C76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/323830343a333564343a3a2f33332d3333203d3e20323636333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:35d4::/33

    Signature Algorithm: sha256WithRSAEncryption
         c7:cb:14:95:ff:d2:22:15:84:09:90:80:0f:4e:9d:b2:24:1a:
         7e:c8:11:bb:ac:16:16:52:60:6e:96:93:b9:eb:16:a2:80:c9:
         0e:18:6a:b2:9a:92:c8:bd:5a:2c:7c:1a:c7:ee:73:76:51:8d:
         a6:60:86:f1:e9:fa:38:6a:cf:6f:22:c6:9b:6d:59:35:8b:90:
         74:f2:2c:db:ca:2c:b5:eb:44:6e:11:ec:bc:19:e1:46:4a:f7:
         c5:02:27:85:3a:38:97:00:6c:58:5f:fe:d6:99:01:4c:e7:26:
         3c:d9:33:52:96:41:60:47:4f:88:89:41:3f:3e:a3:57:f5:0f:
         bf:e4:53:69:5d:20:54:e7:32:9b:3e:05:9a:87:41:49:f1:f3:
         94:02:36:09:cd:44:0d:7d:59:68:96:82:a4:17:ff:8a:31:00:
         4c:6b:45:a9:f5:c9:28:55:8c:f8:d4:b6:e9:0c:14:5d:50:6c:
         2d:ef:6b:f3:01:ff:8f:84:80:bc:e9:98:0a:0a:4a:d6:2a:10:
         f1:4f:ab:d4:ae:47:e5:70:c8:bf:24:86:da:4b:21:e5:58:9b:
         34:f2:f6:7b:fa:31:a8:4a:2e:10:ab:76:35:8c:6f:37:f7:7f:
         63:1b:49:28:d8:79:cd:67:54:e6:78:2a:a8:a0:8a:6f:b8:e7:
         f4:52:1e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----