Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/323830343a323639343a3a2f33322d3332203d3e20323633383430.roa
File:                     323830343a323639343a3a2f33322d3332203d3e20323633383430.roa (raw, json)
Hash identifier:          JT0BFVWkpSPNO8IruYDwfeE6aJ6r/fz0yzUz0DWktgc=
Subject key identifier:   58:FF:9D:40:9D:F8:19:2A:7F:21:04:5B:B2:51:98:83:94:28:DF:7D
Certificate issuer:       /CN=8BD0AE50AE9C7458A7B24238D7C6703D707DA35D
Certificate serial:       6B370693049C42D8B66015BE4CB7BC887A367D6C
Authority key identifier: 8B:D0:AE:50:AE:9C:74:58:A7:B2:42:38:D7:C6:70:3D:70:7D:A3:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BD0AE50AE9C7458A7B24238D7C6703D707DA35D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/323830343a323639343a3a2f33322d3332203d3e20323633383430.roa
Signing time:             Thu 01 Oct 2026 21:00:33 +0000
ROA not before:           Thu 01 Oct 2026 20:55:33 +0000
ROA not after:            Thu 30 Sep 2027 21:00:33 +0000
asID:                     263840
IP address blocks:        2804:2694::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:37:06:93:04:9c:42:d8:b6:60:15:be:4c:b7:bc:88:7a:36:7d:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BD0AE50AE9C7458A7B24238D7C6703D707DA35D
        Validity
            Not Before: Oct  1 20:55:33 2026 GMT
            Not After : Sep 30 21:00:33 2027 GMT
        Subject: CN=58FF9D409DF8192A7F21045BB25198839428DF7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5d:74:74:c1:b0:a3:e6:db:e3:35:68:39:8f:
                    90:ab:b7:04:dd:1b:da:7c:f9:31:84:a0:31:cd:ce:
                    e3:e8:60:3e:35:53:cd:76:86:f5:bf:8e:14:c2:a0:
                    50:88:ad:bb:b4:f0:ef:2a:b7:a8:94:ce:bc:a5:03:
                    98:ed:f7:c1:07:b7:14:ab:d7:03:8f:f9:a0:ce:a8:
                    9c:36:79:a1:0f:ee:33:66:b9:5e:29:3e:47:6b:63:
                    4d:d8:d1:2f:22:9a:b1:43:53:2e:9e:67:33:b2:57:
                    72:6f:9e:6b:fb:41:ec:b4:ca:c8:bd:75:46:77:56:
                    ff:b9:1a:b6:ea:0c:2f:91:6b:06:be:d3:85:ef:d2:
                    a1:c0:e6:48:8a:e1:e0:32:19:8a:10:3d:b0:67:1c:
                    1e:c1:3c:b4:36:ba:9a:20:13:43:9d:6b:60:bb:ca:
                    2c:8a:e6:12:63:19:ab:08:8d:0c:99:76:2b:1e:be:
                    64:6c:38:ab:7a:80:09:60:0b:af:7c:c5:65:1b:8a:
                    24:dc:46:f3:b2:40:c1:21:e9:4c:e1:1a:28:99:e6:
                    8f:ef:43:44:2a:34:95:b2:e6:8d:c9:10:8a:00:d3:
                    a0:1e:7d:77:6a:c3:60:af:85:45:6f:9e:77:e3:cd:
                    c7:f8:c6:24:ba:79:f4:fa:5d:f9:20:82:af:c0:a7:
                    1d:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:FF:9D:40:9D:F8:19:2A:7F:21:04:5B:B2:51:98:83:94:28:DF:7D
            X509v3 Authority Key Identifier:
                keyid:8B:D0:AE:50:AE:9C:74:58:A7:B2:42:38:D7:C6:70:3D:70:7D:A3:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/8BD0AE50AE9C7458A7B24238D7C6703D707DA35D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BD0AE50AE9C7458A7B24238D7C6703D707DA35D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AoCDxt1tAKZD6qPUgcY4t6kuT5P4oNYuMBbh9ZHm4DV/0/323830343a323639343a3a2f33322d3332203d3e20323633383430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2694::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:0e:c8:ed:3e:bd:4a:c9:d3:22:ab:83:43:69:08:f2:af:ea:
         69:01:69:02:e1:93:88:8d:b8:b7:86:d3:d2:e1:ae:06:f1:00:
         ad:7c:da:b8:68:d5:60:9b:6e:7c:e9:b4:ac:47:3d:04:9c:ee:
         12:51:53:83:bc:2d:8d:7d:45:af:60:95:70:b6:9f:82:3d:ed:
         8b:cc:46:f5:81:47:6e:0e:5c:e5:45:57:d4:5f:fc:49:2a:42:
         ae:82:51:9a:ea:4d:59:82:5c:9d:81:b3:51:b3:9c:97:31:44:
         33:6c:54:b7:fe:88:70:2b:fb:4a:f2:2d:02:d0:f2:a0:3c:6f:
         52:0c:a4:ea:2b:6b:7f:d5:77:b6:89:8b:2c:03:3f:45:fd:c0:
         9d:0b:28:83:69:e5:4a:5b:fb:87:af:c3:4e:d1:eb:a7:7a:eb:
         41:4f:7d:94:3f:03:8b:53:48:0a:02:32:a1:df:23:f4:a9:7f:
         c8:ed:fb:99:00:69:54:10:eb:e1:32:1f:89:4a:d2:ba:9f:f0:
         5a:2c:5a:52:fd:b3:c3:4e:8d:e9:42:49:b9:4c:01:69:1f:da:
         df:60:b9:f7:4a:40:36:b4:25:0a:b9:df:c0:6c:2c:b4:35:d0:
         e8:61:52:b7:ac:87:2a:1c:e0:9e:0f:ba:59:68:69:b0:5b:a5:
         56:d9:fb:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----