Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/9Jntmgh3CAPNBCL9EALqgi6ffxESBTypqRrVfqixHCsj/0/323830343a346362303a3a2f33322d313238203d3e20323637333835.roa
File:                     323830343a346362303a3a2f33322d313238203d3e20323637333835.roa (raw, json)
Hash identifier:          +X3Qr/tDdnz/RRxIAEkoXfaOZNnDse/b9aChMP4msGg=
Subject key identifier:   04:8F:65:72:C6:A0:42:ED:16:7F:31:8A:60:DA:18:A5:A8:0B:A9:DF
Certificate issuer:       /CN=6A5B16AEC8348B57904C412B6C3890934D8DB104
Certificate serial:       23E37DC70F70832B746DC9D1768A5E180E504B35
Authority key identifier: 6A:5B:16:AE:C8:34:8B:57:90:4C:41:2B:6C:38:90:93:4D:8D:B1:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A5B16AEC8348B57904C412B6C3890934D8DB104.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Jntmgh3CAPNBCL9EALqgi6ffxESBTypqRrVfqixHCsj/0/323830343a346362303a3a2f33322d313238203d3e20323637333835.roa
Signing time:             Thu 03 Sep 2026 18:54:32 +0000
ROA not before:           Thu 03 Sep 2026 18:49:32 +0000
ROA not after:            Thu 02 Sep 2027 18:54:32 +0000
asID:                     267385
IP address blocks:        2804:4cb0::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:e3:7d:c7:0f:70:83:2b:74:6d:c9:d1:76:8a:5e:18:0e:50:4b:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A5B16AEC8348B57904C412B6C3890934D8DB104
        Validity
            Not Before: Sep  3 18:49:32 2026 GMT
            Not After : Sep  2 18:54:32 2027 GMT
        Subject: CN=048F6572C6A042ED167F318A60DA18A5A80BA9DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:70:25:b5:18:45:75:50:db:da:70:f9:07:be:
                    35:98:5d:7d:7c:76:4e:93:2a:40:6d:80:5c:a3:d0:
                    cb:df:3b:29:1e:9f:99:ca:61:03:6a:a7:5a:cf:32:
                    9a:1d:38:9b:1b:a8:05:60:a6:da:41:43:de:ee:56:
                    0f:48:f2:62:84:77:dc:f8:a5:14:61:f8:c1:80:f1:
                    8b:97:b1:65:d1:9f:85:f9:cd:f2:de:5f:e0:d8:7f:
                    9f:a2:94:2f:69:42:cd:26:c0:bf:34:b7:30:31:26:
                    f5:2c:12:a1:d4:51:67:80:b9:57:1d:a6:5a:c6:83:
                    c4:46:ea:71:d2:ce:b2:b2:26:25:7f:b1:d2:5d:5d:
                    77:43:7e:77:31:a3:b2:87:c1:a6:e7:b2:d9:62:df:
                    57:01:e0:d0:f0:f1:2c:af:e1:ed:4e:c6:40:41:66:
                    45:09:16:62:b6:23:d7:08:3a:f3:f5:e3:eb:5c:c8:
                    31:07:38:22:6b:8a:e2:8a:d1:e3:0d:ee:16:bd:51:
                    03:02:1b:d2:19:47:c2:3c:6e:a7:0c:35:81:89:46:
                    f8:28:98:34:76:3d:a7:e9:bf:87:8c:2e:b7:7c:dc:
                    7d:74:30:21:e5:e7:93:c5:00:fe:36:aa:19:ec:0e:
                    13:c7:0e:5e:41:39:ba:cb:4d:34:66:22:84:16:95:
                    d7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:8F:65:72:C6:A0:42:ED:16:7F:31:8A:60:DA:18:A5:A8:0B:A9:DF
            X509v3 Authority Key Identifier:
                keyid:6A:5B:16:AE:C8:34:8B:57:90:4C:41:2B:6C:38:90:93:4D:8D:B1:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Jntmgh3CAPNBCL9EALqgi6ffxESBTypqRrVfqixHCsj/0/6A5B16AEC8348B57904C412B6C3890934D8DB104.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A5B16AEC8348B57904C412B6C3890934D8DB104.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Jntmgh3CAPNBCL9EALqgi6ffxESBTypqRrVfqixHCsj/0/323830343a346362303a3a2f33322d313238203d3e20323637333835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4cb0::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:94:55:9f:6b:98:fc:f9:bc:96:3d:44:af:9b:e6:06:27:00:
         46:e3:76:c0:04:b4:2e:cb:3e:79:da:77:d1:e1:21:b7:2c:8a:
         39:79:9c:7d:b3:50:eb:cc:c6:b4:81:2d:24:70:9e:3e:1c:de:
         b3:af:57:8e:af:05:ce:79:df:c2:fb:c1:c4:e8:4e:ad:ea:15:
         a7:4c:67:1f:e1:06:f7:6f:05:66:01:66:e9:a2:36:10:fb:74:
         ed:da:22:32:72:cc:df:7e:5d:69:9b:d9:cd:1d:b7:8a:9a:79:
         dc:55:08:af:68:e1:d9:d2:03:f5:f3:f0:fa:07:b5:7f:51:a3:
         f0:e5:17:34:a3:98:cb:fa:04:17:d2:f3:f0:31:1e:d6:4f:d1:
         4d:e6:80:a3:09:4a:3b:00:63:94:b5:75:cc:e2:fd:af:82:97:
         64:f6:dd:5c:99:59:37:b3:8c:a4:29:36:1c:df:a1:75:82:65:
         2b:fd:75:92:95:03:6b:3e:26:9c:62:ba:62:03:e0:c9:d1:08:
         b3:91:17:c5:3b:8f:bc:53:a8:c5:dd:39:b1:d0:35:f3:c3:71:
         9c:6e:51:c8:fd:35:5c:22:08:dd:41:43:00:c2:ef:5a:34:90:
         a2:dd:5d:97:30:79:72:5d:44:25:4d:2b:78:c9:75:08:05:6f:
         0f:8f:28:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----