Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/323830343a333963343a3a2f33322d313238203d3e20323636303439.roa
File:                     323830343a333963343a3a2f33322d313238203d3e20323636303439.roa (raw, json)
Hash identifier:          Lz58XLwHyKFEbESzIjG8wOQ8/QTpVl/5JZ6HXPRPszc=
Subject key identifier:   2B:A4:EB:A3:B5:8E:4E:13:BD:6B:19:7F:37:19:93:DF:87:E1:54:70
Certificate issuer:       /CN=995252A0A186A5AC771DA6040FEF634B469DC2E3
Certificate serial:       04920B1DABF7BAE31DAC7A531A71E3BC8CEDC8D1
Authority key identifier: 99:52:52:A0:A1:86:A5:AC:77:1D:A6:04:0F:EF:63:4B:46:9D:C2:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/995252A0A186A5AC771DA6040FEF634B469DC2E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/323830343a333963343a3a2f33322d313238203d3e20323636303439.roa
Signing time:             Wed 21 Oct 2026 18:12:50 +0000
ROA not before:           Wed 21 Oct 2026 18:07:50 +0000
ROA not after:            Wed 20 Oct 2027 18:12:50 +0000
asID:                     266049
IP address blocks:        2804:39c4::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:92:0b:1d:ab:f7:ba:e3:1d:ac:7a:53:1a:71:e3:bc:8c:ed:c8:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=995252A0A186A5AC771DA6040FEF634B469DC2E3
        Validity
            Not Before: Oct 21 18:07:50 2026 GMT
            Not After : Oct 20 18:12:50 2027 GMT
        Subject: CN=2BA4EBA3B58E4E13BD6B197F371993DF87E15470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:18:1d:1e:76:9b:11:a8:58:e8:af:59:c6:26:
                    ea:a5:f2:39:65:3f:40:e3:e1:98:b0:d1:06:42:1e:
                    be:bb:97:e7:40:3c:b5:bc:a7:98:4a:94:aa:e4:46:
                    bb:24:f2:2d:63:64:b5:8e:fb:5d:4f:f9:c0:3c:72:
                    ac:45:2e:fc:e9:dd:f2:ac:c3:16:05:c7:5b:2b:18:
                    91:ad:5c:57:ac:48:a7:e7:35:bd:14:71:32:81:44:
                    42:06:a5:6a:2b:ad:0d:0d:3d:b4:8a:52:4e:62:28:
                    8b:8f:79:a8:50:e6:97:8c:9c:38:47:a7:11:21:eb:
                    09:b5:a2:74:55:be:29:06:7d:30:3f:d4:7e:e9:36:
                    05:8e:e1:78:b8:dc:1c:82:10:9c:3e:70:33:a1:8b:
                    55:62:a4:f1:e1:d6:75:ac:15:a4:12:6c:20:1c:19:
                    67:71:33:f3:28:32:a8:4f:65:73:18:85:4f:95:a5:
                    44:5b:7b:f6:a8:d1:b8:9b:6d:50:7e:58:70:78:6f:
                    0e:68:a8:7e:53:9a:7e:c8:1f:fe:11:a8:6c:3a:47:
                    ae:a8:f8:3d:90:d4:4d:54:ee:f0:ef:78:ea:a2:3d:
                    ff:bc:ad:21:45:e4:6e:18:b6:61:20:1e:b1:5b:40:
                    cf:da:b8:5a:0b:7f:d3:b5:1a:5e:08:8b:0c:90:17:
                    e9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A4:EB:A3:B5:8E:4E:13:BD:6B:19:7F:37:19:93:DF:87:E1:54:70
            X509v3 Authority Key Identifier:
                keyid:99:52:52:A0:A1:86:A5:AC:77:1D:A6:04:0F:EF:63:4B:46:9D:C2:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/995252A0A186A5AC771DA6040FEF634B469DC2E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/995252A0A186A5AC771DA6040FEF634B469DC2E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Bm8TTRLLH25rfW8wmNLaZ4gaiGaPvPP6pBZFwY3dKr4/0/323830343a333963343a3a2f33322d313238203d3e20323636303439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:39c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         a9:f3:dd:86:03:16:e9:ae:35:86:47:b4:ae:77:77:ca:c5:25:
         74:22:db:ba:95:c6:18:c3:81:a8:60:0d:8c:09:01:c0:32:1c:
         ef:bb:f2:2f:ea:e3:63:6d:5b:93:2f:e1:80:b6:54:8e:27:2c:
         ba:5d:7e:92:89:45:4c:a9:95:4d:5b:d7:b6:8e:42:60:87:7d:
         a6:a8:4e:a4:c9:a6:68:05:77:63:4f:04:dc:3f:4c:6f:55:64:
         d4:c2:b8:de:b5:20:7b:18:e1:e6:d5:b0:7b:5e:53:a4:9d:c4:
         cd:c0:67:29:85:46:0f:00:f1:cc:ed:78:80:37:b3:c1:67:d7:
         d0:f4:cb:4d:d9:68:fe:a6:a9:6f:e8:18:9b:d8:f2:50:6b:64:
         5c:4c:03:2e:e6:69:d8:52:ad:b2:df:b9:e7:c0:47:eb:9a:ad:
         ae:78:b0:a4:26:37:64:ed:6a:1e:08:8f:98:65:62:cc:99:b5:
         3e:f6:27:77:84:16:b5:b0:fb:ad:cf:a8:d4:e8:93:04:52:c2:
         fc:22:4b:81:18:64:bc:a5:5a:78:0a:f0:70:86:35:cc:ca:d2:
         3a:d7:dd:43:6b:26:43:a3:42:ce:76:4a:63:ef:87:a0:0e:72:
         1c:47:a6:b3:3d:b2:e5:7e:9c:69:da:f2:ea:e1:4d:b0:04:8e:
         5c:42:3b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----