Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/323830343a333564343a3a2f33322d3332203d3e20323636333039.roa
File:                     323830343a333564343a3a2f33322d3332203d3e20323636333039.roa (raw, json)
Hash identifier:          eHMh/ctUhyhMldjz0BeQMWyOuIbcUjDfY7nHZnK2Mgk=
Subject key identifier:   F5:3A:07:37:09:66:C8:BB:9C:64:CC:B9:4E:C3:40:E4:69:34:1E:50
Certificate issuer:       /CN=68040AEB3AC98B5FF3C03D98E901AB8177343C76
Certificate serial:       4A03B56828188F503F33168411AB75A9E52F3121
Authority key identifier: 68:04:0A:EB:3A:C9:8B:5F:F3:C0:3D:98:E9:01:AB:81:77:34:3C:76
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68040AEB3AC98B5FF3C03D98E901AB8177343C76.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/323830343a333564343a3a2f33322d3332203d3e20323636333039.roa
Signing time:             Mon 24 Aug 2026 13:57:26 +0000
ROA not before:           Mon 24 Aug 2026 13:52:26 +0000
ROA not after:            Mon 23 Aug 2027 13:57:26 +0000
asID:                     266309
IP address blocks:        2804:35d4::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:03:b5:68:28:18:8f:50:3f:33:16:84:11:ab:75:a9:e5:2f:31:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68040AEB3AC98B5FF3C03D98E901AB8177343C76
        Validity
            Not Before: Aug 24 13:52:26 2026 GMT
            Not After : Aug 23 13:57:26 2027 GMT
        Subject: CN=F53A07370966C8BB9C64CCB94EC340E469341E50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9b:da:7d:e4:10:46:e2:5f:43:2d:37:76:06:
                    50:5d:64:7e:3c:83:df:6a:99:2c:e5:e4:78:26:12:
                    23:7b:f3:ab:a9:4c:1d:ea:f5:be:07:e4:e2:80:ee:
                    d7:b5:82:b8:04:99:f9:ab:ce:b0:7b:ca:ba:66:04:
                    3c:57:9e:20:3a:79:56:5c:e0:2e:78:a0:b7:51:53:
                    38:79:a7:59:ce:eb:fc:63:80:0c:fd:94:8e:6f:67:
                    a3:71:86:ee:62:65:d4:ef:73:bf:c2:82:f3:54:06:
                    b4:99:c5:b6:72:ad:ca:9e:73:41:a7:ad:34:1e:7e:
                    fc:3b:dd:28:62:07:4c:72:f8:17:fd:9c:9f:83:c5:
                    74:9c:83:d7:e6:e6:bf:e3:43:ff:b5:a3:42:d2:9c:
                    d5:2f:ba:28:46:98:fa:37:3d:d1:ab:15:2b:97:bd:
                    e1:8a:45:de:e6:a3:c5:43:55:1a:cf:63:1d:b5:39:
                    dc:66:d4:fc:c3:18:44:bf:c6:dd:5b:68:f4:40:4c:
                    d6:d4:ce:88:11:de:43:e7:ff:40:20:69:e6:d1:13:
                    ac:cf:a7:74:79:bd:4d:af:44:9c:a3:45:40:58:aa:
                    7c:ce:7b:e1:d2:11:d7:01:e1:3a:47:9f:7b:13:cf:
                    cb:10:27:ee:2d:b7:c4:e0:48:ee:a7:5c:52:f6:76:
                    72:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:3A:07:37:09:66:C8:BB:9C:64:CC:B9:4E:C3:40:E4:69:34:1E:50
            X509v3 Authority Key Identifier:
                keyid:68:04:0A:EB:3A:C9:8B:5F:F3:C0:3D:98:E9:01:AB:81:77:34:3C:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/68040AEB3AC98B5FF3C03D98E901AB8177343C76.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/68040AEB3AC98B5FF3C03D98E901AB8177343C76.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5aFo8YkVq85FNo5z7voQArZ2LwFCp7Gxj613eH8Pnqz9/0/323830343a333564343a3a2f33322d3332203d3e20323636333039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:35d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         0b:18:c3:fb:dc:9b:a7:e9:1a:0d:60:f8:20:c5:f2:90:c2:37:
         71:ac:dd:28:53:1f:ef:b6:07:d6:e0:96:59:79:84:e8:60:c4:
         cc:fa:d0:67:3d:4f:f9:e6:12:03:fd:1d:9f:99:de:88:f0:75:
         99:d4:c0:0a:d3:4e:4f:9a:47:89:06:22:30:7b:a6:e8:6a:79:
         29:48:e7:32:9b:c1:8a:5e:63:20:eb:39:d9:92:bb:18:e1:5f:
         87:b9:42:49:91:17:f1:d4:ff:49:47:8b:86:2d:d0:a7:19:0e:
         f8:97:63:7c:3b:1c:82:db:1a:f8:4a:b9:b3:43:9c:df:b9:c2:
         2b:3f:1e:fe:43:ac:5a:bf:c2:97:84:76:84:51:a2:28:bc:dd:
         46:66:c3:13:df:a8:aa:e7:5e:c3:22:8c:1a:73:8b:ce:7c:75:
         53:65:db:4a:02:6a:7b:92:3c:d5:b2:72:31:c2:ec:ea:88:f3:
         ac:29:0f:3b:50:e9:7d:ed:55:48:7a:64:a6:9f:c6:3d:f8:66:
         ee:62:0c:1c:32:8e:2f:b1:00:ef:bd:4f:5d:97:da:d9:36:c9:
         d8:87:17:bd:7b:ba:4e:6c:66:d0:41:d4:f4:4f:04:8d:6e:5f:
         20:26:32:c0:07:70:1e:23:1d:da:57:56:5f:41:ef:df:62:8e:
         37:ce:01:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----