Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BYiREBDafKEmP5YwX61ZiHa7w8a3REnHwF2L1homrRke/0/323830343a3565633a3a2f33322d313238203d3e203238313433.roa
File:                     323830343a3565633a3a2f33322d313238203d3e203238313433.roa (raw, json)
Hash identifier:          Gev46WD4CaoROLnUQ7wM2OQJqrh9/vf9+cZ8XFVtfJg=
Subject key identifier:   EC:0E:19:A2:23:06:F6:09:B6:59:BD:29:C1:F3:98:43:29:47:85:E5
Certificate issuer:       /CN=3B6FAA2ADB30433D1C1B2F5A84C4E59DD42CE472
Certificate serial:       3D37AA4D6EE1076A7C3DE8A629C146FE8FA05A8D
Authority key identifier: 3B:6F:AA:2A:DB:30:43:3D:1C:1B:2F:5A:84:C4:E5:9D:D4:2C:E4:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B6FAA2ADB30433D1C1B2F5A84C4E59DD42CE472.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BYiREBDafKEmP5YwX61ZiHa7w8a3REnHwF2L1homrRke/0/323830343a3565633a3a2f33322d313238203d3e203238313433.roa
Signing time:             Fri 22 May 2026 14:55:24 +0000
ROA not before:           Fri 22 May 2026 14:50:24 +0000
ROA not after:            Fri 21 May 2027 14:55:24 +0000
asID:                     28143
IP address blocks:        2804:5ec::/32 maxlen: 128
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:37:aa:4d:6e:e1:07:6a:7c:3d:e8:a6:29:c1:46:fe:8f:a0:5a:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B6FAA2ADB30433D1C1B2F5A84C4E59DD42CE472
        Validity
            Not Before: May 22 14:50:24 2026 GMT
            Not After : May 21 14:55:24 2027 GMT
        Subject: CN=EC0E19A22306F609B659BD29C1F39843294785E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b0:5a:58:bd:7d:a2:f4:a0:65:8e:56:0c:0b:
                    b4:83:11:b7:8d:b3:44:71:2b:b6:1d:d1:aa:ea:ea:
                    71:ee:b4:e1:c8:30:9b:f2:68:10:f7:c2:ac:c1:e1:
                    ed:d6:43:66:4b:d2:df:0d:9e:bb:a9:31:91:b1:35:
                    9b:95:2e:34:df:6e:d3:64:bc:a8:05:4c:bb:51:09:
                    43:3f:da:ea:01:71:75:3b:b2:6c:fb:94:62:44:14:
                    b6:05:bf:b0:d5:69:c6:56:7a:67:14:78:88:2e:4f:
                    e8:83:f2:53:c4:7c:50:84:67:f5:c5:1b:1c:7e:8a:
                    d5:b3:7c:89:4a:79:65:70:15:37:c2:7d:a5:30:fd:
                    d8:50:45:93:64:c6:85:b8:1a:0d:58:3c:a8:7a:ed:
                    5b:47:49:94:e4:10:f4:e8:4a:cf:a2:b1:c5:26:a3:
                    b9:7e:d3:14:e1:42:a6:d7:6a:fb:6a:72:d9:8c:ff:
                    4e:f4:06:14:d0:0e:13:dc:66:51:c6:ec:f9:47:6c:
                    e2:1c:4d:4a:9e:60:0b:95:41:42:a7:3d:6b:f7:77:
                    1c:c4:20:24:a1:09:77:33:ca:13:3c:03:c3:6e:8c:
                    11:08:1e:27:3b:88:8a:03:4d:e6:31:8a:d5:aa:f4:
                    40:b5:53:b2:44:dd:d1:4f:9d:27:4c:64:b1:50:1f:
                    d1:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:0E:19:A2:23:06:F6:09:B6:59:BD:29:C1:F3:98:43:29:47:85:E5
            X509v3 Authority Key Identifier:
                keyid:3B:6F:AA:2A:DB:30:43:3D:1C:1B:2F:5A:84:C4:E5:9D:D4:2C:E4:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BYiREBDafKEmP5YwX61ZiHa7w8a3REnHwF2L1homrRke/0/3B6FAA2ADB30433D1C1B2F5A84C4E59DD42CE472.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3B6FAA2ADB30433D1C1B2F5A84C4E59DD42CE472.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BYiREBDafKEmP5YwX61ZiHa7w8a3REnHwF2L1homrRke/0/323830343a3565633a3a2f33322d313238203d3e203238313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         94:f3:72:23:30:8f:08:ae:ac:b9:ad:c1:36:5f:ab:f9:74:7e:
         30:f1:0b:7b:0a:e2:51:7a:41:f8:c8:cc:55:b4:43:66:4b:4f:
         3d:fe:38:e5:02:dd:5e:e9:cc:36:b1:c0:67:cc:6f:90:7c:86:
         88:8a:39:81:3e:b6:18:cd:f6:0b:f8:67:22:6b:cf:c2:e8:1d:
         9d:02:7f:c4:33:2d:5c:cf:5b:80:3d:8b:77:ac:7c:5a:c9:06:
         db:12:9e:88:bf:3b:5c:66:83:7b:43:23:32:c2:e5:36:d3:a9:
         86:9d:b0:00:fe:00:c1:cf:6c:94:34:2f:3d:a1:48:81:4b:aa:
         09:2f:3e:9d:1c:13:db:be:2a:e7:50:a2:2f:5f:4c:57:9a:10:
         3b:f5:26:f9:b0:74:7a:4a:59:43:b6:b8:60:57:ea:18:1a:41:
         4a:c2:33:f3:05:7a:01:7f:44:c6:1c:e9:4b:f9:9c:89:25:66:
         89:a4:df:dc:53:c1:96:de:bd:d1:d7:a0:4d:ed:c1:e3:a0:7a:
         a2:74:5c:ab:99:b2:14:7f:2c:e5:08:fc:f3:13:d0:c1:ac:a5:
         5d:33:f9:6b:71:b5:58:8c:4d:7f:a5:f0:0a:b1:0d:aa:63:62:
         7f:df:5e:8f:fa:74:20:d5:98:87:74:4b:c7:a0:dc:35:0e:00:
         41:bf:b1:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:40:04 2026 by rpki-client