Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/0/323830343a6665303a313838303a3a2f34312d3431203d3e20323633303439.roa
File:                     323830343a6665303a313838303a3a2f34312d3431203d3e20323633303439.roa (raw, json)
Hash identifier:          QEoCgn/n2h6XxpkkGo2scVi360te67ctduexAzRB86Q=
Subject key identifier:   D7:2E:DD:60:9B:5A:18:24:81:F0:4E:59:2B:21:A8:41:18:1E:60:BB
Certificate issuer:       /CN=8884216B4D19579BDCC46ED354EA9FD9F44859AA
Certificate serial:       3F1CC3E818F51B7D8C71C5F4853F33480BAEC4AB
Authority key identifier: 88:84:21:6B:4D:19:57:9B:DC:C4:6E:D3:54:EA:9F:D9:F4:48:59:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8884216B4D19579BDCC46ED354EA9FD9F44859AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/0/323830343a6665303a313838303a3a2f34312d3431203d3e20323633303439.roa
Signing time:             Mon 29 Jun 2026 14:48:24 +0000
ROA not before:           Mon 29 Jun 2026 14:43:24 +0000
ROA not after:            Mon 28 Jun 2027 14:48:24 +0000
asID:                     263049
IP address blocks:        2804:fe0:1880::/41 maxlen: 41
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:1c:c3:e8:18:f5:1b:7d:8c:71:c5:f4:85:3f:33:48:0b:ae:c4:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8884216B4D19579BDCC46ED354EA9FD9F44859AA
        Validity
            Not Before: Jun 29 14:43:24 2026 GMT
            Not After : Jun 28 14:48:24 2027 GMT
        Subject: CN=D72EDD609B5A182481F04E592B21A841181E60BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d2:25:cc:26:5d:ba:06:52:1f:e9:80:3b:8c:
                    44:a1:74:51:d8:29:25:a0:63:b3:3e:2f:15:e4:79:
                    2a:9e:95:b5:29:da:44:f7:19:c9:f5:fd:64:1b:80:
                    ca:f1:6b:5d:d3:c1:52:ee:af:9f:49:47:b0:37:c8:
                    47:86:4c:59:e1:f3:85:ad:31:65:3e:c4:07:b9:1f:
                    80:30:b1:50:52:a4:bb:6b:30:8d:e6:8c:e2:ab:a6:
                    2b:65:9e:c7:ce:b2:77:38:71:a9:1c:75:2d:df:6b:
                    fb:ef:ca:84:6c:19:1c:95:e0:2e:c9:44:3e:5d:ff:
                    00:fa:ee:dd:c6:d8:11:4e:ee:21:60:13:cd:c4:b7:
                    c2:00:6e:4d:9f:c7:0c:9a:ec:5b:ed:13:24:35:f1:
                    c4:58:e5:d8:2a:37:39:34:4e:be:24:54:e6:39:2b:
                    f6:ff:23:02:d8:9e:d2:44:c3:95:8b:58:8d:25:60:
                    8e:34:05:4d:b7:c8:ec:59:0e:3a:b5:84:d5:b6:b2:
                    0c:68:8d:01:22:8c:bd:e1:d6:f3:3c:e7:ad:b9:e8:
                    0a:aa:f0:e1:7a:d9:7a:db:99:ac:2f:c9:ad:0a:c7:
                    50:57:85:25:62:21:fe:15:6f:26:7a:0d:36:2e:06:
                    bc:51:b2:85:bd:32:5d:e7:d4:d6:97:a2:95:c9:27:
                    91:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:2E:DD:60:9B:5A:18:24:81:F0:4E:59:2B:21:A8:41:18:1E:60:BB
            X509v3 Authority Key Identifier:
                keyid:88:84:21:6B:4D:19:57:9B:DC:C4:6E:D3:54:EA:9F:D9:F4:48:59:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/0/8884216B4D19579BDCC46ED354EA9FD9F44859AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8884216B4D19579BDCC46ED354EA9FD9F44859AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HdFLpsnvFN8nJM2N58MsS3H7QhzWwJcG64FLKUhXjttQ/0/323830343a6665303a313838303a3a2f34312d3431203d3e20323633303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fe0:1880::/41

    Signature Algorithm: sha256WithRSAEncryption
         25:74:83:49:0b:ca:cd:50:29:51:66:13:58:d8:cc:6e:79:0c:
         ff:8a:90:87:8a:67:d4:a1:db:77:31:d2:70:53:05:e2:d0:69:
         2d:a6:0a:20:f4:89:07:6e:68:dc:05:d7:cb:ee:da:c8:d7:fe:
         53:b0:03:96:21:27:91:1c:22:5d:a5:de:a7:86:42:a5:1b:0a:
         10:5a:37:bd:9b:b9:9a:e7:a3:38:b9:2e:9f:6e:ba:94:0f:db:
         ec:d4:4b:51:d1:5f:b3:8b:98:cf:2e:21:0e:5f:56:82:71:c7:
         b8:80:49:65:51:57:d4:44:b8:ae:1b:9c:b0:e6:b3:ca:c0:66:
         e7:54:d1:5a:84:ec:bb:b2:43:19:6b:da:b2:98:f3:e5:af:74:
         90:12:0c:5a:7d:58:ce:d1:c7:c0:df:ca:83:56:e6:02:14:53:
         18:21:de:f4:45:f1:0b:de:ba:40:81:3e:cd:a6:26:ab:1d:e3:
         b2:06:1c:c2:d2:9a:2d:0e:f6:05:4e:9c:f4:47:34:ad:02:1d:
         cc:27:30:3e:22:15:ba:9e:b5:43:c6:ce:99:dc:60:00:42:73:
         3c:cc:7d:12:86:5b:fa:e1:0c:8b:58:ee:38:35:1f:3d:ec:28:
         0e:86:ba:1d:d5:6e:79:14:29:93:82:f1:ee:67:c4:3f:27:74:
         eb:2d:9d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----