Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/323830343a326636383a3a2f33322d3332203d3e20323634383839.roa
File:                     323830343a326636383a3a2f33322d3332203d3e20323634383839.roa (raw, json)
Hash identifier:          EpRzr+C7WaEov88fp7BdrOm3ReFVmdFOn+mFwHMuGis=
Subject key identifier:   98:06:09:D3:83:2D:F4:A5:95:2C:55:A7:36:E8:F9:31:EE:BE:FA:00
Certificate issuer:       /CN=BF3D2960951229F60429923820F4643A4958DB73
Certificate serial:       4DAB5194E18BC8C421DF0E3D60D76CF6B7C02DA6
Authority key identifier: BF:3D:29:60:95:12:29:F6:04:29:92:38:20:F4:64:3A:49:58:DB:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF3D2960951229F60429923820F4643A4958DB73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/323830343a326636383a3a2f33322d3332203d3e20323634383839.roa
Signing time:             Wed 27 Aug 2025 16:51:36 +0000
ROA not before:           Wed 27 Aug 2025 16:46:36 +0000
ROA not after:            Wed 26 Aug 2026 16:51:36 +0000
asID:                     264889
IP address blocks:        2804:2f68::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:ab:51:94:e1:8b:c8:c4:21:df:0e:3d:60:d7:6c:f6:b7:c0:2d:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF3D2960951229F60429923820F4643A4958DB73
        Validity
            Not Before: Aug 27 16:46:36 2025 GMT
            Not After : Aug 26 16:51:36 2026 GMT
        Subject: CN=980609D3832DF4A5952C55A736E8F931EEBEFA00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f5:a6:e2:6e:c1:db:35:53:67:e3:be:52:ed:
                    7f:49:e8:ec:3f:00:1d:71:74:5b:42:8e:2f:6d:e0:
                    26:f3:6a:cd:ba:38:79:1b:b6:ca:69:6f:2b:5c:1c:
                    0a:2b:69:db:90:ac:90:20:37:20:ec:e3:01:04:b8:
                    ab:1e:76:d1:19:00:11:48:d4:71:70:e9:78:d6:87:
                    9b:11:97:ae:a0:26:81:7d:55:86:bd:c7:55:2b:06:
                    37:8e:36:db:af:f2:4f:68:c7:0b:cb:87:29:44:62:
                    aa:7a:4c:db:48:7c:c2:c5:50:f2:2f:7d:11:d0:e7:
                    de:39:1b:6b:12:dc:08:f2:1f:73:1b:e0:13:b1:a0:
                    07:2a:6b:7c:25:6e:e5:cc:19:bd:61:94:9d:b0:20:
                    ff:ef:6c:d2:3f:7c:3d:d9:57:34:18:d0:6b:80:0a:
                    c7:2c:06:6b:a1:50:e1:71:36:b5:f9:47:d6:b0:68:
                    40:91:3b:ec:1d:36:62:4c:07:24:43:09:73:91:06:
                    ec:56:9a:c8:ac:64:96:2a:5d:be:48:86:f3:46:14:
                    29:5f:50:24:cd:5b:2d:cb:a7:41:3e:ff:4b:4f:2e:
                    22:f2:50:80:18:98:e0:12:5f:d4:26:bb:17:f1:cd:
                    ff:d4:3e:24:e6:d0:f7:86:4a:67:c4:74:4e:ef:a4:
                    e3:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:06:09:D3:83:2D:F4:A5:95:2C:55:A7:36:E8:F9:31:EE:BE:FA:00
            X509v3 Authority Key Identifier:
                keyid:BF:3D:29:60:95:12:29:F6:04:29:92:38:20:F4:64:3A:49:58:DB:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/BF3D2960951229F60429923820F4643A4958DB73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/BF3D2960951229F60429923820F4643A4958DB73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BX7hhif3qcXxGNYkSSHLrfqs2ysp2M3cYY9hWmSC332u/0/323830343a326636383a3a2f33322d3332203d3e20323634383839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f68::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:36:94:30:fe:fe:55:4d:89:97:3f:ad:f4:56:67:da:69:6f:
         8d:9a:c9:7a:1a:cf:38:5b:dc:95:d7:15:42:48:40:24:0d:13:
         14:03:6e:00:08:ac:e9:a2:3c:72:a0:0e:31:fb:c7:8f:0c:61:
         6e:74:35:cb:e6:eb:ff:6e:41:82:27:0e:35:7b:37:28:96:f2:
         0f:77:9f:28:ce:d3:a1:b5:79:06:f0:c0:72:17:cc:48:e6:e0:
         31:7c:f8:c8:e9:dc:ed:76:dd:93:3c:ef:69:c9:5d:f8:1d:1a:
         f6:25:7a:46:97:7e:f6:a4:4f:ec:70:ec:26:1d:41:b0:e6:df:
         d3:a1:64:9b:cf:dc:8e:c2:11:5a:f4:a9:98:ab:d3:cd:49:e3:
         be:52:d1:35:7f:87:3a:ce:36:45:69:61:fc:e5:4c:5a:5f:b3:
         b4:ae:2c:b5:a4:49:dd:47:a3:18:db:ef:25:8e:22:c2:b2:af:
         17:55:ba:00:12:88:b9:ee:81:f6:6a:79:c4:f1:5f:19:53:43:
         c3:59:be:b7:04:9d:cb:b8:8b:9f:0d:b1:7c:3b:01:de:56:b7:
         0c:21:3d:6f:57:c0:98:7d:27:90:f7:c9:73:50:64:9d:3c:03:
         7b:d6:e6:9a:4e:84:28:77:f6:4b:9f:6d:34:0f:db:9d:79:7a:
         c6:9d:8d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 20 07:40:02 2025 by rpki-client