Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/323830343a36343a3a2f33322d3438203d3e203237363933.roa
File:                     323830343a36343a3a2f33322d3438203d3e203237363933.roa (raw, json)
Hash identifier:          QnIS9bcVV03sDBAFPWTfwzo8dNJfQ3mms234G7ebnjk=
Subject key identifier:   7F:08:EB:3A:B0:65:88:A3:3F:E2:DE:28:CF:FE:0C:F9:0E:73:67:D6
Certificate issuer:       /CN=3345439099C79C13F583D2238E3BB7D0D60D6877
Certificate serial:       16882038A7879D23FB24836C07A67A5345B6928F
Authority key identifier: 33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/323830343a36343a3a2f33322d3438203d3e203237363933.roa
Signing time:             Sat 29 Aug 2026 23:32:53 +0000
ROA not before:           Sat 29 Aug 2026 23:27:53 +0000
ROA not after:            Sat 28 Aug 2027 23:32:53 +0000
asID:                     27693
IP address blocks:        2804:64::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:88:20:38:a7:87:9d:23:fb:24:83:6c:07:a6:7a:53:45:b6:92:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3345439099C79C13F583D2238E3BB7D0D60D6877
        Validity
            Not Before: Aug 29 23:27:53 2026 GMT
            Not After : Aug 28 23:32:53 2027 GMT
        Subject: CN=7F08EB3AB06588A33FE2DE28CFFE0CF90E7367D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:d1:78:7f:ae:79:37:61:7f:08:98:8f:86:af:
                    13:8c:62:3a:c9:dd:46:14:3e:44:5b:c8:d1:a6:b1:
                    d4:a8:21:f0:85:e0:ca:4b:45:e3:f0:f3:0f:28:b2:
                    1b:3d:84:b7:32:7a:af:98:cf:2a:07:c4:ba:24:78:
                    58:e8:0b:17:f1:20:3c:12:91:df:ea:a7:36:3f:0d:
                    34:3c:1b:84:71:6c:9b:2d:5b:0c:02:af:24:5e:e0:
                    91:bb:66:a8:3d:95:0b:f4:84:65:ce:74:aa:5f:1e:
                    bf:4c:81:2e:ae:90:ab:8a:62:e9:19:74:6a:c0:9a:
                    42:32:06:55:f4:2c:52:69:37:7b:94:7e:86:f8:28:
                    d5:1f:77:b9:d0:4d:65:48:53:6e:68:cc:ce:64:c4:
                    c0:7c:ef:fc:64:09:89:f7:56:20:5e:40:c5:fe:3b:
                    c3:31:f3:e4:f3:41:b0:47:04:7a:9d:2e:12:99:78:
                    e3:44:1a:2e:cc:16:1e:45:9e:2e:28:57:3e:7a:f1:
                    25:5b:ee:d2:55:05:e7:6f:ce:df:7f:71:76:ed:b1:
                    bd:ac:ba:2c:c2:41:62:dc:96:1d:0b:85:0d:d5:3a:
                    79:d1:1f:85:c6:9e:be:ac:a0:bc:de:fe:05:6b:d0:
                    60:f4:04:36:bf:93:68:4b:f6:4c:f3:ce:45:23:eb:
                    79:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:08:EB:3A:B0:65:88:A3:3F:E2:DE:28:CF:FE:0C:F9:0E:73:67:D6
            X509v3 Authority Key Identifier:
                keyid:33:45:43:90:99:C7:9C:13:F5:83:D2:23:8E:3B:B7:D0:D6:0D:68:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/3345439099C79C13F583D2238E3BB7D0D60D6877.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3345439099C79C13F583D2238E3BB7D0D60D6877.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6WLdZ5sBw63HDEvgQ7ACJtdYSQYFD41bdc1UfNiLfWW6/0/323830343a36343a3a2f33322d3438203d3e203237363933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:64::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:10:c2:6a:af:1d:b8:7d:2a:f2:8a:68:00:76:1a:d8:31:c6:
         21:27:08:39:60:6d:24:9b:a2:73:43:96:79:8e:d9:86:95:03:
         df:b5:77:0e:03:f3:8e:1d:ed:a0:f9:3b:5b:03:4a:a6:9d:ca:
         07:b7:ce:0c:e6:80:9e:d7:c1:a9:5e:36:76:c3:2b:08:44:14:
         30:f3:f2:b8:79:7d:99:39:a1:d3:22:3e:9a:4a:67:56:8a:d4:
         92:7f:62:2b:95:54:39:82:18:cc:c9:61:34:25:37:02:86:7e:
         fb:8f:06:27:2d:0d:bd:7d:98:a1:a3:54:be:cf:6c:14:68:24:
         01:8c:ef:3f:c4:26:a9:95:a4:c0:e9:80:1e:7a:74:48:01:4f:
         6d:67:64:b7:99:da:f2:78:35:e8:22:94:b4:a7:f6:bf:25:03:
         b1:ae:2c:db:48:4b:44:78:81:06:fb:44:ac:bc:85:b3:c2:52:
         1e:16:a8:b1:02:9a:b2:46:61:f3:51:62:7a:66:57:df:f3:57:
         c1:5a:6c:be:11:b2:0f:05:be:b6:3a:e8:e2:44:9a:af:5e:a7:
         41:d1:be:a1:19:3a:a1:33:5a:48:e2:d9:db:08:cd:51:f5:2f:
         ba:a2:4c:74:ca:d8:92:10:7d:62:1e:8e:3f:84:22:56:21:ec:
         5b:b6:59:a2
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUFoggOKeHnSP7JINsB6Z6U0W2ko8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzM0NTQzOTA5OUM3OUMxM0Y1ODNEMjIzOEUzQkI3RDBE
NjBENjg3NzAeFw0yNjA4MjkyMzI3NTNaFw0yNzA4MjgyMzMyNTNaMDMxMTAvBgNV
BAMTKDdGMDhFQjNBQjA2NTg4QTMzRkUyREUyOENGRkUwQ0Y5MEU3MzY3RDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs0Xh/rnk3YX8ImI+GrxOMYjrJ
3UYUPkRbyNGmsdSoIfCF4MpLRePw8w8oshs9hLcyeq+YzyoHxLokeFjoCxfxIDwS
kd/qpzY/DTQ8G4RxbJstWwwCryRe4JG7Zqg9lQv0hGXOdKpfHr9MgS6ukKuKYukZ
dGrAmkIyBlX0LFJpN3uUfob4KNUfd7nQTWVIU25ozM5kxMB87/xkCYn3ViBeQMX+
O8Mx8+TzQbBHBHqdLhKZeONEGi7MFh5Fni4oVz568SVb7tJVBedvzt9/cXbtsb2s
uizCQWLclh0LhQ3VOnnRH4XGnr6soLze/gVr0GD0BDa/k2hL9kzzzkUj63knAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUfwjrOrBliKM/4t4oz/4M+Q5zZ9YwHwYDVR0j
BBgwFoAUM0VDkJnHnBP1g9Ijjju30NYNaHcwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNldMZFo1c0J3NjNIREV2Z1E3QUNKdGRZU1FZRkQ0MWJkYzFVZk5pTGZX
VzYvMC8zMzQ1NDM5MDk5Qzc5QzEzRjU4M0QyMjM4RTNCQjdEMEQ2MEQ2ODc3LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzMzNDU0MzkwOTlDNzlDMTNG
NTgzRDIyMzhFM0JCN0QwRDYwRDY4NzcuY2VyMIGmBggrBgEFBQcBCwSBmTCBljCB
kwYIKwYBBQUHMAuGgYZyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzZXTGRaNXNCdzYzSERFdmdRN0FDSnRkWVNRWUZENDFiZGMxVWZOaUxmV1c2LzAv
MzIzODMwMzQzYTM2MzQzYTNhMmYzMzMyMmQzNDM4MjAzZDNlMjAzMjM3MzYzOTMz
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEw
DzANBAIAAjAHAwUAKAQAZDANBgkqhkiG9w0BAQsFAAOCAQEAJxDCaq8duH0q8opo
AHYa2DHGIScIOWBtJJuic0OWeY7ZhpUD37V3DgPzjh3toPk7WwNKpp3KB7fODOaA
ntfBqV42dsMrCEQUMPPyuHl9mTmh0yI+mkpnVorUkn9iK5VUOYIYzMlhNCU3AoZ+
+48GJy0NvX2YoaNUvs9sFGgkAYzvP8QmqZWkwOmAHnp0SAFPbWdkt5na8ng16CKU
tKf2vyUDsa4s20hLRHiBBvtErLyFs8JSHhaosQKaskZh81FiemZX3/NXwVpsvhGy
DwW+tjro4kSar16nQdG+oRk6oTNaSOLZ2wjNUfUvuqJMdMrYkhB9Yh6OP4QiViHs
W7ZZog==
-----END CERTIFICATE-----