Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/2cjVmpjDJStVtzYBqnUS2R5QNAGUAsKFEYgFy6Mvan8x/0/323830343a383133303a3a2f33322d3332203d3e20323732343338.roa
File:                     323830343a383133303a3a2f33322d3332203d3e20323732343338.roa (raw, json)
Hash identifier:          XDyIoIutOH45Y/J+mH/o27RJOXJJmy7avcTL1bOOmZ0=
Subject key identifier:   DD:3B:8E:4D:56:0F:50:B3:73:D2:1D:43:9E:4C:61:B4:7C:7D:AF:D7
Certificate issuer:       /CN=6D64053D58B5FF5A1CB92BED9F689082B79B556B
Certificate serial:       4672805878EBC9E4700A356BF9100E15B41DE29A
Authority key identifier: 6D:64:05:3D:58:B5:FF:5A:1C:B9:2B:ED:9F:68:90:82:B7:9B:55:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D64053D58B5FF5A1CB92BED9F689082B79B556B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2cjVmpjDJStVtzYBqnUS2R5QNAGUAsKFEYgFy6Mvan8x/0/323830343a383133303a3a2f33322d3332203d3e20323732343338.roa
Signing time:             Sun 20 Sep 2026 22:16:48 +0000
ROA not before:           Sun 20 Sep 2026 22:11:48 +0000
ROA not after:            Sun 19 Sep 2027 22:16:48 +0000
asID:                     272438
IP address blocks:        2804:8130::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:72:80:58:78:eb:c9:e4:70:0a:35:6b:f9:10:0e:15:b4:1d:e2:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D64053D58B5FF5A1CB92BED9F689082B79B556B
        Validity
            Not Before: Sep 20 22:11:48 2026 GMT
            Not After : Sep 19 22:16:48 2027 GMT
        Subject: CN=DD3B8E4D560F50B373D21D439E4C61B47C7DAFD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d9:52:2b:64:8f:a2:b8:28:6e:e6:ec:95:02:
                    16:f4:b7:21:2b:8b:7a:dd:69:f8:d1:37:6c:14:8a:
                    6f:f1:29:2a:f4:6c:6d:a4:72:c2:cf:5c:b4:a1:3d:
                    24:a7:86:51:7a:67:b2:67:d1:48:e2:29:3a:e4:d8:
                    05:aa:ef:2e:5e:bd:97:c7:82:f0:94:38:b1:cb:59:
                    cd:fe:f4:78:c4:00:7b:de:53:a9:96:33:ff:f5:47:
                    c1:74:59:a3:37:63:0c:d9:75:11:2a:3b:66:f0:21:
                    4d:fb:4b:dc:85:06:b0:30:e2:51:47:17:c9:55:d7:
                    86:3d:98:c3:d7:4f:d2:51:f4:47:a0:18:56:d3:42:
                    05:13:70:d6:dc:39:51:7d:23:b6:15:f6:c8:7c:43:
                    fb:1f:20:d2:60:f6:a0:38:5a:48:6d:95:e2:b3:31:
                    51:19:07:dd:e6:bc:1e:ef:ec:12:23:e0:72:2e:01:
                    2d:96:45:fe:4d:0e:67:49:95:bb:98:6e:b9:f5:39:
                    11:ef:f2:95:54:65:ae:d2:d3:ba:4e:44:63:3e:e6:
                    d0:9f:25:9e:87:62:44:40:d1:83:b4:5f:2c:68:e0:
                    3a:06:22:eb:c4:b2:58:2b:f3:76:2e:44:53:a7:eb:
                    48:e9:9c:7a:e1:e9:d0:75:f4:4f:63:07:01:ac:e3:
                    01:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:3B:8E:4D:56:0F:50:B3:73:D2:1D:43:9E:4C:61:B4:7C:7D:AF:D7
            X509v3 Authority Key Identifier:
                keyid:6D:64:05:3D:58:B5:FF:5A:1C:B9:2B:ED:9F:68:90:82:B7:9B:55:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2cjVmpjDJStVtzYBqnUS2R5QNAGUAsKFEYgFy6Mvan8x/0/6D64053D58B5FF5A1CB92BED9F689082B79B556B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6D64053D58B5FF5A1CB92BED9F689082B79B556B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2cjVmpjDJStVtzYBqnUS2R5QNAGUAsKFEYgFy6Mvan8x/0/323830343a383133303a3a2f33322d3332203d3e20323732343338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8130::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:a0:2b:b9:43:a0:d1:a6:27:cd:ab:6a:43:91:b4:a7:b8:8b:
         20:30:c6:7d:a9:1e:cb:b9:56:3e:31:a4:1e:cd:29:15:ec:64:
         83:5a:56:ad:2f:33:2c:35:e7:5e:4a:6d:aa:90:ad:b0:30:e2:
         1c:df:3f:89:98:a6:1f:3d:df:0d:76:41:5f:6f:0d:a7:2b:6f:
         0c:09:ff:4c:10:9f:1b:32:f5:8f:b2:b2:d7:ac:81:5e:c9:2b:
         96:92:1a:4b:0b:77:36:66:35:48:b3:fc:f9:8f:c8:6e:69:84:
         99:1b:56:8e:df:a9:c8:06:c6:73:04:9a:bc:ee:c1:bf:13:41:
         7f:30:7f:7b:fe:80:e2:1e:70:1e:e0:de:49:f4:bc:c2:a7:2e:
         e6:e3:de:41:37:72:ee:c1:13:c3:2d:93:65:a3:5e:b6:b4:cc:
         8f:00:72:8d:84:d3:93:a1:0b:00:42:0f:af:e6:f3:af:57:89:
         b2:dd:81:f0:ba:55:aa:de:4c:79:d2:f1:54:c0:ce:68:8c:95:
         c4:d7:6c:81:c7:41:56:ce:38:e5:c0:8f:7f:16:0c:4c:16:a5:
         0e:96:b9:63:8a:4e:db:c3:c1:b5:89:86:64:e7:95:ed:12:68:
         bc:e5:8a:68:fe:44:5d:23:5f:0b:15:7d:55:f6:cc:8b:9a:5b:
         8e:8f:a0:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----