Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/323830343a343732383a383030303a3a2f33332d3333203d3e20323637303335.roa
File:                     323830343a343732383a383030303a3a2f33332d3333203d3e20323637303335.roa (raw, json)
Hash identifier:          Ncwa9bqg34wBpheVHuohXznYw9GPtsYFZ8t9hxYyays=
Subject key identifier:   6C:B0:18:C3:40:AD:FC:DA:3A:FD:25:BD:D4:5B:F4:E9:48:88:65:65
Certificate issuer:       /CN=2663AFA82E4602B5A7902552CC8E4A3120909A6F
Certificate serial:       3DDAC8C4E85F4558C1FDDDAF6097CE6A3E339DF4
Authority key identifier: 26:63:AF:A8:2E:46:02:B5:A7:90:25:52:CC:8E:4A:31:20:90:9A:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2663AFA82E4602B5A7902552CC8E4A3120909A6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/323830343a343732383a383030303a3a2f33332d3333203d3e20323637303335.roa
Signing time:             Fri 02 Oct 2026 19:20:33 +0000
ROA not before:           Fri 02 Oct 2026 19:15:33 +0000
ROA not after:            Fri 01 Oct 2027 19:20:33 +0000
asID:                     267035
IP address blocks:        2804:4728:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:da:c8:c4:e8:5f:45:58:c1:fd:dd:af:60:97:ce:6a:3e:33:9d:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2663AFA82E4602B5A7902552CC8E4A3120909A6F
        Validity
            Not Before: Oct  2 19:15:33 2026 GMT
            Not After : Oct  1 19:20:33 2027 GMT
        Subject: CN=6CB018C340ADFCDA3AFD25BDD45BF4E948886565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:60:1f:2e:24:07:7e:06:34:17:02:5b:0b:55:
                    bd:09:ab:38:75:88:f6:96:b2:be:39:28:c0:de:65:
                    9e:86:fd:1e:1e:e8:c0:bc:9e:ae:da:ef:a8:a1:70:
                    7c:68:79:6f:e7:16:05:85:ef:b6:2f:7d:16:a0:37:
                    01:f6:e4:eb:5f:ae:4b:fc:18:14:16:86:91:2f:64:
                    c7:c0:52:d8:76:a7:1a:04:f0:ba:00:16:15:4a:f8:
                    ab:bb:a7:f5:7d:eb:ad:97:68:48:87:18:e0:1c:05:
                    9d:51:33:45:6e:fa:b8:53:3d:d1:ca:a6:61:2a:2a:
                    d5:66:ac:0a:0c:7b:11:bc:23:8d:c5:36:49:cf:c2:
                    4c:46:38:19:af:06:56:f0:6d:58:86:39:b9:ad:b7:
                    c6:0b:0a:7c:a4:55:a0:f8:30:48:3d:96:53:e1:fd:
                    fe:c4:2a:1a:da:5d:f9:d7:04:b2:be:aa:fe:45:e5:
                    17:72:07:34:37:7e:fb:eb:9c:6d:42:7f:68:cc:91:
                    08:e3:c0:22:dd:68:c0:a5:54:eb:26:30:b0:81:e0:
                    c9:d6:05:57:d7:9e:29:00:a0:50:bd:79:61:19:8c:
                    4a:60:b6:26:19:c1:f1:01:22:75:39:77:32:f9:cd:
                    20:49:f6:81:24:78:d8:cf:88:27:34:e9:4a:82:7c:
                    61:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:B0:18:C3:40:AD:FC:DA:3A:FD:25:BD:D4:5B:F4:E9:48:88:65:65
            X509v3 Authority Key Identifier:
                keyid:26:63:AF:A8:2E:46:02:B5:A7:90:25:52:CC:8E:4A:31:20:90:9A:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/2663AFA82E4602B5A7902552CC8E4A3120909A6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2663AFA82E4602B5A7902552CC8E4A3120909A6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/YJnRBUoLVrgV6vKoL7miUpgq5oLKknLdYFy4hidU3E6/0/323830343a343732383a383030303a3a2f33332d3333203d3e20323637303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4728:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         bc:46:33:ce:b6:27:b3:3b:eb:f0:34:db:1a:8d:16:de:f5:c0:
         7c:28:a2:c7:56:a4:86:93:26:85:de:f2:90:db:5d:e1:c7:27:
         5d:6d:82:0e:22:26:d9:7a:0f:89:06:64:99:61:6a:8a:ce:29:
         cc:e3:4c:4f:16:ea:28:0d:05:f4:9b:e4:2f:6b:a0:d1:75:c6:
         78:ee:c2:18:ad:ae:3f:6a:52:ad:04:78:90:e1:57:bd:c0:8b:
         4e:ad:b4:3a:e0:59:e6:93:35:cd:24:78:e3:a0:3f:00:72:89:
         97:62:34:39:9e:4e:d7:42:8a:63:7d:b4:0a:e7:e7:84:e3:aa:
         bb:d2:43:57:41:c2:a7:12:a0:49:0a:4f:c2:95:8c:9b:e6:6b:
         96:8e:c1:2b:9c:bf:c5:78:4c:37:19:8b:43:ab:91:19:fd:63:
         7e:f5:03:cc:ac:c6:30:d0:0c:27:7c:06:5a:93:c5:23:b9:c7:
         32:a8:9e:9f:f8:23:19:e2:65:44:10:19:3b:75:1c:1e:a6:24:
         24:a3:e1:d3:2a:ea:20:09:bc:08:89:c2:64:34:0a:af:ec:bd:
         3a:53:92:a8:cd:36:90:f1:b6:dc:6f:20:fc:93:4a:12:2b:e1:
         a0:3a:5f:7a:13:96:a5:a5:5e:5b:37:59:ed:c7:9f:08:87:f9:
         7c:a7:76:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----