Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/6jgbAf35bWdVVwZDcf7wPAYARzYistD7TsRwMVFZtTMM/0/323830343a373239383a3a2f33322d3332203d3e20323730383633.roa
File:                     323830343a373239383a3a2f33322d3332203d3e20323730383633.roa (raw, json)
Hash identifier:          aFibfUyaBbhzwnxME/ffDP98mX3NgZmHFBim93UyouQ=
Subject key identifier:   7D:73:1F:3F:BE:99:0F:EB:01:24:07:D8:D7:B6:8D:C0:BB:91:6B:CE
Certificate issuer:       /CN=9856E6EC431EB6EF91607E2865CCEFB48EC91E18
Certificate serial:       3D88F24631BE77B83EE6E2843DC83FF0830F871E
Authority key identifier: 98:56:E6:EC:43:1E:B6:EF:91:60:7E:28:65:CC:EF:B4:8E:C9:1E:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9856E6EC431EB6EF91607E2865CCEFB48EC91E18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6jgbAf35bWdVVwZDcf7wPAYARzYistD7TsRwMVFZtTMM/0/323830343a373239383a3a2f33322d3332203d3e20323730383633.roa
Signing time:             Wed 26 Aug 2026 14:16:02 +0000
ROA not before:           Wed 26 Aug 2026 14:11:02 +0000
ROA not after:            Wed 25 Aug 2027 14:16:02 +0000
asID:                     270863
IP address blocks:        2804:7298::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:88:f2:46:31:be:77:b8:3e:e6:e2:84:3d:c8:3f:f0:83:0f:87:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9856E6EC431EB6EF91607E2865CCEFB48EC91E18
        Validity
            Not Before: Aug 26 14:11:02 2026 GMT
            Not After : Aug 25 14:16:02 2027 GMT
        Subject: CN=7D731F3FBE990FEB012407D8D7B68DC0BB916BCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:eb:fc:bb:15:02:0a:dc:8b:d6:0d:2b:57:9b:
                    e7:72:3d:b0:47:76:4b:d0:c0:be:f5:5f:6e:a6:3a:
                    05:96:ab:c9:5f:c8:4d:d4:3d:0c:b5:9c:fb:d5:f8:
                    3d:8a:26:7c:7d:b7:1e:86:a4:88:9a:17:f4:94:bd:
                    ba:04:20:da:d1:c1:b6:bb:91:e3:c8:e1:fb:18:2b:
                    8c:17:28:8e:c7:0c:19:09:6c:f1:e8:99:7b:23:e8:
                    df:2a:c5:33:9c:e0:96:8f:c4:a2:5a:9c:c0:76:a1:
                    2b:43:56:8b:4d:71:08:16:5b:44:f1:46:e8:a8:f5:
                    88:f4:fc:19:bc:18:3c:05:c1:64:e3:3a:c3:ca:a3:
                    fc:75:31:a5:ec:c8:4d:dd:9b:ca:2b:91:b3:2e:67:
                    62:1f:72:aa:b6:49:b9:83:0a:e1:37:94:c2:55:fa:
                    f4:4e:85:1e:3d:b6:db:6f:0c:96:28:80:66:06:03:
                    75:a7:35:4a:99:ec:aa:a7:d0:1e:23:46:9f:f4:33:
                    89:ea:0e:e8:51:86:2f:fe:88:41:bd:37:58:93:6b:
                    7b:74:22:81:19:88:98:60:58:6c:47:11:96:f9:25:
                    0e:ab:ba:2d:91:75:11:b9:0e:da:bd:92:98:81:11:
                    2d:2f:06:25:0d:e8:af:41:07:8c:d1:6a:ea:e3:c4:
                    20:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:73:1F:3F:BE:99:0F:EB:01:24:07:D8:D7:B6:8D:C0:BB:91:6B:CE
            X509v3 Authority Key Identifier:
                keyid:98:56:E6:EC:43:1E:B6:EF:91:60:7E:28:65:CC:EF:B4:8E:C9:1E:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6jgbAf35bWdVVwZDcf7wPAYARzYistD7TsRwMVFZtTMM/0/9856E6EC431EB6EF91607E2865CCEFB48EC91E18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9856E6EC431EB6EF91607E2865CCEFB48EC91E18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6jgbAf35bWdVVwZDcf7wPAYARzYistD7TsRwMVFZtTMM/0/323830343a373239383a3a2f33322d3332203d3e20323730383633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7298::/32

    Signature Algorithm: sha256WithRSAEncryption
         c3:87:e8:f4:43:e3:15:b7:53:c8:b3:48:ee:e1:e3:70:8f:1f:
         7f:94:1d:21:72:c5:b2:54:c7:8a:eb:ed:27:07:43:78:45:d1:
         02:8a:06:4f:36:0d:df:16:bc:2d:54:db:24:31:f9:ce:bb:2b:
         3d:ba:90:ca:2b:6c:41:27:1f:66:57:d7:6e:ac:ff:91:f3:95:
         52:90:33:61:2c:39:ab:5c:bf:3d:79:66:f0:82:4a:54:69:fd:
         77:f5:01:ae:4f:b8:1f:f1:7f:05:5c:b1:d0:05:55:36:60:a2:
         0a:e3:f3:96:42:db:d8:11:f1:b0:e2:08:94:69:37:f7:70:a9:
         1a:25:e8:bf:41:7c:f7:8e:c4:bb:71:66:95:55:ae:4d:05:88:
         96:f1:55:f3:a1:79:d4:41:99:2f:e5:70:e0:43:5f:74:7f:f7:
         e8:94:4a:c6:31:92:15:d8:fe:ed:61:12:8a:ee:26:43:56:89:
         6c:6c:a1:7a:0e:98:39:63:ab:66:08:5d:27:2f:0f:6f:12:06:
         3b:e7:fe:36:0a:cc:62:15:b1:04:71:22:d4:63:98:04:04:82:
         2f:12:3b:dd:bb:99:03:e7:82:5b:18:97:5c:02:58:89:17:b3:
         03:d9:7e:ed:1c:f1:13:59:dd:73:8a:54:ff:dd:53:b0:c9:36:
         fd:75:6e:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----