Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6PzVQGyBtccM5D2HNZu82V1VPcjHKWHeYC33fcdWWaYc/0/323830343a326365383a3a2f33322d3438203d3e20323635323530.roa
File:                     323830343a326365383a3a2f33322d3438203d3e20323635323530.roa (raw, json)
Hash identifier:          KiDQWQ9Pf5fWRaVjr1/W2VVn2n0goqWkzqaQ0ow4o18=
Subject key identifier:   55:16:95:B9:F5:F3:33:DA:74:12:48:3C:54:43:56:36:E4:1B:43:6C
Certificate issuer:       /CN=053D74E9BF1F0C52107831B1B5BF2CBBE7A2F0FE
Certificate serial:       3857F7BA000B2EA6004B9421E40CC11B2B3EF0D2
Authority key identifier: 05:3D:74:E9:BF:1F:0C:52:10:78:31:B1:B5:BF:2C:BB:E7:A2:F0:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/053D74E9BF1F0C52107831B1B5BF2CBBE7A2F0FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6PzVQGyBtccM5D2HNZu82V1VPcjHKWHeYC33fcdWWaYc/0/323830343a326365383a3a2f33322d3438203d3e20323635323530.roa
Signing time:             Wed 16 Sep 2026 17:34:40 +0000
ROA not before:           Wed 16 Sep 2026 17:29:40 +0000
ROA not after:            Wed 15 Sep 2027 17:34:40 +0000
asID:                     265250
IP address blocks:        2804:2ce8::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:57:f7:ba:00:0b:2e:a6:00:4b:94:21:e4:0c:c1:1b:2b:3e:f0:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=053D74E9BF1F0C52107831B1B5BF2CBBE7A2F0FE
        Validity
            Not Before: Sep 16 17:29:40 2026 GMT
            Not After : Sep 15 17:34:40 2027 GMT
        Subject: CN=551695B9F5F333DA7412483C54435636E41B436C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5d:fa:48:ff:ec:d6:dc:64:64:d7:d2:1b:89:
                    64:41:6a:c9:77:31:de:3b:c0:4f:fc:78:6d:aa:f1:
                    4f:51:4a:03:c7:13:b1:67:14:7d:80:29:81:07:f3:
                    3c:eb:65:ba:a9:fe:23:38:b0:2d:dc:b2:46:27:35:
                    64:79:d1:f1:a7:05:b9:ce:37:06:81:a7:32:2d:a7:
                    7f:de:ea:5e:96:55:4f:9c:31:50:16:74:53:bd:44:
                    1a:16:d5:f5:24:bf:4c:40:30:b3:07:79:1a:d1:ec:
                    25:bc:b6:f0:3c:fa:d0:27:05:6b:80:e3:93:b3:8f:
                    66:b8:37:3e:26:d2:45:c0:a2:2a:46:0c:3a:27:56:
                    e9:42:3c:32:6a:ce:cc:24:0c:4a:ef:82:dd:4c:f8:
                    c5:71:a8:01:e8:85:84:96:6b:3a:33:01:e0:3a:e6:
                    17:65:32:e9:7c:31:80:01:31:eb:53:89:56:ee:01:
                    3d:1e:99:6f:52:18:30:3f:9d:4a:25:2f:ef:d3:c9:
                    32:13:e2:88:17:81:c0:e1:35:95:4b:1d:d4:a1:d6:
                    e5:84:87:16:8c:96:55:52:d1:b2:79:f7:a6:54:b5:
                    60:c4:96:24:41:bd:df:ab:bc:3d:1f:f1:8c:6d:c0:
                    18:76:79:35:4f:cb:2c:50:32:79:71:98:d2:24:ed:
                    84:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:16:95:B9:F5:F3:33:DA:74:12:48:3C:54:43:56:36:E4:1B:43:6C
            X509v3 Authority Key Identifier:
                keyid:05:3D:74:E9:BF:1F:0C:52:10:78:31:B1:B5:BF:2C:BB:E7:A2:F0:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6PzVQGyBtccM5D2HNZu82V1VPcjHKWHeYC33fcdWWaYc/0/053D74E9BF1F0C52107831B1B5BF2CBBE7A2F0FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/053D74E9BF1F0C52107831B1B5BF2CBBE7A2F0FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6PzVQGyBtccM5D2HNZu82V1VPcjHKWHeYC33fcdWWaYc/0/323830343a326365383a3a2f33322d3438203d3e20323635323530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ce8::/32

    Signature Algorithm: sha256WithRSAEncryption
         51:1b:f2:0c:49:92:f4:cb:18:0e:fc:d1:14:9b:c9:0f:22:5d:
         6a:dd:f2:ab:34:dc:98:5b:8c:c2:70:a1:e7:a3:0b:c5:86:32:
         f3:66:d4:02:a9:47:2d:e5:a4:d4:f0:df:e4:89:cc:5b:de:e7:
         6f:64:a7:05:a9:62:63:18:85:cd:c4:bb:4c:70:4f:94:d8:53:
         ac:dd:fb:a7:85:59:6f:44:99:85:c9:40:b4:97:90:24:14:a7:
         f9:56:84:be:53:b7:ca:bd:d3:c2:7a:bc:4b:d9:cb:4c:86:c3:
         4c:92:a1:25:26:5e:b8:b4:ab:e7:78:ea:9f:28:f9:02:6b:64:
         12:99:72:f5:45:c3:07:91:e5:3f:d2:eb:f7:f9:56:87:87:3d:
         74:a2:40:c4:31:91:72:d7:b3:f8:01:84:5a:d0:7c:22:ee:97:
         ba:66:a4:24:8b:ec:27:b3:67:d5:95:ab:d7:ef:f2:96:92:cc:
         03:64:9a:0e:0a:6d:c2:61:f2:9e:d0:37:a6:21:da:75:8d:6a:
         a6:ed:c5:e1:ea:92:c9:48:d3:f0:8a:08:21:41:dd:02:e6:22:
         e8:02:5f:7b:3c:a9:16:91:50:48:47:4e:fe:24:26:ce:f6:93:
         30:5f:a3:c3:2f:8f:03:66:81:88:dd:af:b3:00:b5:a0:06:29:
         77:f3:9c:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----