Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/323830343a313361343a3a2f33322d313238203d3e20323633353433.roa
File:                     323830343a313361343a3a2f33322d313238203d3e20323633353433.roa (raw, json)
Hash identifier:          tXEVMBeNKKQOFj+9LK/OOJrAPYZ5LcaH3Q3l0AVoHVk=
Subject key identifier:   97:B1:6E:86:D3:2A:9C:E6:EE:75:5E:7D:9B:20:12:66:D1:99:E9:38
Certificate issuer:       /CN=B3C0ECC43363690F72F949D611EE62DCF8942568
Certificate serial:       1743F4E6528B567C66FB2627FC641E1CE42A5C86
Authority key identifier: B3:C0:EC:C4:33:63:69:0F:72:F9:49:D6:11:EE:62:DC:F8:94:25:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C0ECC43363690F72F949D611EE62DCF8942568.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/323830343a313361343a3a2f33322d313238203d3e20323633353433.roa
Signing time:             Wed 02 Sep 2026 14:31:26 +0000
ROA not before:           Wed 02 Sep 2026 14:26:26 +0000
ROA not after:            Wed 01 Sep 2027 14:31:26 +0000
asID:                     263543
IP address blocks:        2804:13a4::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:43:f4:e6:52:8b:56:7c:66:fb:26:27:fc:64:1e:1c:e4:2a:5c:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3C0ECC43363690F72F949D611EE62DCF8942568
        Validity
            Not Before: Sep  2 14:26:26 2026 GMT
            Not After : Sep  1 14:31:26 2027 GMT
        Subject: CN=97B16E86D32A9CE6EE755E7D9B201266D199E938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cc:34:5f:f1:05:11:14:29:cb:65:b1:5f:f6:
                    1a:ea:55:47:46:99:f7:97:f7:ce:f1:d7:36:ca:c3:
                    19:70:fa:83:77:87:c6:52:4e:a9:6a:c2:f4:19:d6:
                    fd:82:2a:75:5e:c5:86:98:98:b7:12:4b:93:22:93:
                    ab:ed:43:01:de:53:e7:96:41:e8:29:ae:dc:5f:16:
                    de:84:03:cd:f7:e5:06:60:7d:c4:18:76:bd:4f:65:
                    23:ef:49:c5:78:23:61:ab:73:e1:87:3d:f6:1d:49:
                    44:b3:72:1d:19:c6:d5:e0:5c:33:c6:45:38:a4:1e:
                    f0:3d:48:1f:03:5f:35:9c:5f:6d:53:8a:08:b2:cb:
                    5b:88:2a:82:c3:ee:05:51:e4:c8:1b:25:95:0f:a3:
                    32:1f:a4:18:85:ba:3c:99:86:03:83:cc:e9:aa:47:
                    6a:35:0b:9f:f0:64:30:a1:59:60:9e:1d:4e:bf:33:
                    15:22:bf:f8:38:24:1d:a9:59:e2:8a:a8:04:4c:68:
                    52:cc:b6:58:76:c2:8d:5c:00:04:1e:3a:43:8d:27:
                    9b:42:2b:3b:b0:f7:d5:be:10:28:a9:c9:0d:bf:3a:
                    ba:49:31:a6:34:e7:17:d4:b2:37:3c:50:43:8b:03:
                    34:fb:f7:4a:9d:83:e9:56:cd:2a:2d:3a:db:04:5b:
                    37:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:B1:6E:86:D3:2A:9C:E6:EE:75:5E:7D:9B:20:12:66:D1:99:E9:38
            X509v3 Authority Key Identifier:
                keyid:B3:C0:EC:C4:33:63:69:0F:72:F9:49:D6:11:EE:62:DC:F8:94:25:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/B3C0ECC43363690F72F949D611EE62DCF8942568.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B3C0ECC43363690F72F949D611EE62DCF8942568.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7JcUsaEFkztyNquaETnt6ky4NsFTihgL5539qVcGrmWy/0/323830343a313361343a3a2f33322d313238203d3e20323633353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:13a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         a0:30:64:a1:bd:e7:3f:bc:5b:cb:98:6d:b0:2a:99:94:de:6e:
         f5:52:6b:a3:b4:03:40:c0:83:ea:00:bb:b4:86:ca:ef:aa:e3:
         93:03:07:9e:3d:31:c5:17:4a:37:2f:18:87:72:9a:3a:93:f0:
         29:53:8a:8a:b3:59:38:6f:2d:c7:91:3d:3b:47:9e:5b:fe:e3:
         17:8c:cc:5b:64:29:d9:a7:5a:b2:4a:a7:ef:e4:71:ef:6c:8f:
         ed:d6:6c:2a:d0:2a:3d:ae:7d:d4:85:7a:a1:1f:79:a8:57:e8:
         78:cd:70:71:02:48:40:fb:93:49:73:b0:3e:40:18:a0:9f:61:
         18:71:d0:11:39:71:84:e5:c4:c2:f9:f3:7e:81:f4:ea:05:4d:
         9c:2b:ef:b4:ae:b3:56:68:69:78:8a:f9:98:81:cd:5c:bb:da:
         4d:b9:bb:e3:d3:0f:4e:70:0d:b1:51:ed:c0:0a:03:7d:57:fd:
         b5:44:7e:70:72:b3:94:88:16:68:76:80:28:6b:64:09:38:f2:
         b9:5d:af:d5:00:c8:8c:67:e6:8a:17:50:a5:03:50:81:25:df:
         91:8e:0b:e3:f8:2a:0d:bb:c2:17:ac:6c:d6:46:a2:41:af:a3:
         7d:13:b9:db:80:2a:53:16:f9:91:1a:2f:66:93:93:8e:eb:7f:
         2f:e4:e9:7c
-----BEGIN CERTIFICATE-----
MIIFSDCCBDCgAwIBAgIUF0P05lKLVnxm+yYn/GQeHOQqXIYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjNDMEVDQzQzMzYzNjkwRjcyRjk0OUQ2MTFFRTYyRENG
ODk0MjU2ODAeFw0yNjA5MDIxNDI2MjZaFw0yNzA5MDExNDMxMjZaMDMxMTAvBgNV
BAMTKDk3QjE2RTg2RDMyQTlDRTZFRTc1NUU3RDlCMjAxMjY2RDE5OUU5MzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9zDRf8QURFCnLZbFf9hrqVUdG
mfeX987x1zbKwxlw+oN3h8ZSTqlqwvQZ1v2CKnVexYaYmLcSS5Mik6vtQwHeU+eW
QegprtxfFt6EA8335QZgfcQYdr1PZSPvScV4I2Grc+GHPfYdSUSzch0ZxtXgXDPG
RTikHvA9SB8DXzWcX21Tigiyy1uIKoLD7gVR5MgbJZUPozIfpBiFujyZhgODzOmq
R2o1C5/wZDChWWCeHU6/MxUiv/g4JB2pWeKKqARMaFLMtlh2wo1cAAQeOkONJ5tC
Kzuw99W+ECipyQ2/OrpJMaY05xfUsjc8UEOLAzT790qdg+lWzSotOtsEWzeRAgMB
AAGjggJSMIICTjAdBgNVHQ4EFgQUl7FuhtMqnObudV59myASZtGZ6TgwHwYDVR0j
BBgwFoAUs8DsxDNjaQ9y+UnWEe5i3PiUJWgwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vN0pjVXNhRUZrenR5TnF1YUVUbnQ2a3k0TnNGVGloZ0w1NTM5cVZjR3Jt
V3kvMC9CM0MwRUNDNDMzNjM2OTBGNzJGOTQ5RDYxMUVFNjJEQ0Y4OTQyNTY4LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0IzQzBFQ0M0MzM2MzY5MEY3
MkY5NDlENjExRUU2MkRDRjg5NDI1NjguY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzdKY1VzYUVGa3p0eU5xdWFFVG50Nmt5NE5zRlRpaGdMNTUzOXFWY0dybVd5LzAv
MzIzODMwMzQzYTMxMzM2MTM0M2EzYTJmMzMzMjJkMzEzMjM4MjAzZDNlMjAzMjM2
MzMzNTM0MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIAYIKwYBBQUH
AQcBAf8EETAPMA0EAgACMAcDBQAoBBOkMA0GCSqGSIb3DQEBCwUAA4IBAQCgMGSh
vec/vFvLmG2wKpmU3m71UmujtANAwIPqALu0hsrvquOTAweePTHFF0o3LxiHcpo6
k/ApU4qKs1k4by3HkT07R55b/uMXjMxbZCnZp1qySqfv5HHvbI/t1mwq0Co9rn3U
hXqhH3moV+h4zXBxAkhA+5NJc7A+QBign2EYcdAROXGE5cTC+fN+gfTqBU2cK++0
rrNWaGl4ivmYgc1cu9pNubvj0w9OcA2xUe3ACgN9V/21RH5wcrOUiBZodoAoa2QJ
OPK5Xa/VAMiMZ+aKF1ClA1CBJd+Rjgvj+CoNu8IXrGzWRqJBr6N9E7nbgCpTFvmR
Gi9mk5OO638v5Ol8
-----END CERTIFICATE-----