Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/0/323830343a373734633a383030303a3a2f33332d3333203d3e20323731313639.roa
File:                     323830343a373734633a383030303a3a2f33332d3333203d3e20323731313639.roa (raw, json)
Hash identifier:          o6kDk6mKEkDWldouXgT2qAC27Xc6ZO4BA8c5RDhAJhs=
Subject key identifier:   0D:2D:F8:91:2B:3E:C2:A1:CB:2E:5E:4B:45:2B:99:CB:92:EB:E9:C1
Certificate issuer:       /CN=3361B8500E929AFEE58BD9E5708ACE056EEB73DB
Certificate serial:       102274F98FA4CDF76DF8D1094242A1BD2E2012D5
Authority key identifier: 33:61:B8:50:0E:92:9A:FE:E5:8B:D9:E5:70:8A:CE:05:6E:EB:73:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3361B8500E929AFEE58BD9E5708ACE056EEB73DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/0/323830343a373734633a383030303a3a2f33332d3333203d3e20323731313639.roa
Signing time:             Mon 21 Sep 2026 20:29:07 +0000
ROA not before:           Mon 21 Sep 2026 20:24:07 +0000
ROA not after:            Mon 20 Sep 2027 20:29:07 +0000
asID:                     271169
IP address blocks:        2804:774c:8000::/33 maxlen: 33
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:22:74:f9:8f:a4:cd:f7:6d:f8:d1:09:42:42:a1:bd:2e:20:12:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3361B8500E929AFEE58BD9E5708ACE056EEB73DB
        Validity
            Not Before: Sep 21 20:24:07 2026 GMT
            Not After : Sep 20 20:29:07 2027 GMT
        Subject: CN=0D2DF8912B3EC2A1CB2E5E4B452B99CB92EBE9C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6e:07:89:89:df:34:8c:b6:e1:6f:a0:19:70:
                    e7:cd:0c:f0:bc:66:51:a9:dc:9f:df:d1:9e:b9:01:
                    a3:2b:e4:26:3c:76:6b:a1:69:0d:e5:5e:f0:54:0f:
                    d3:24:b8:e7:39:70:b4:eb:26:6b:68:a7:fb:9e:7e:
                    58:96:81:ed:ad:2f:7d:70:03:e5:40:a4:3f:3e:d4:
                    9e:04:7a:d4:d6:47:8e:3e:cc:25:7c:41:e2:17:1c:
                    49:3a:c3:42:23:30:e9:7a:54:6c:d3:11:4b:b6:50:
                    15:e2:85:8f:20:94:f3:4d:a5:e4:99:2f:d9:aa:9c:
                    b6:57:8c:57:ed:7b:9b:a6:cd:24:3a:58:36:44:bd:
                    8b:47:e3:1d:38:88:f7:78:b9:31:c7:84:ae:31:23:
                    d0:69:71:24:eb:28:98:ee:34:4f:71:3b:45:fb:87:
                    9f:6e:e9:55:a4:3c:3c:b9:81:0f:ab:d5:93:a4:89:
                    ad:ac:8d:a8:2d:8e:d1:57:66:e1:a2:05:f9:19:b4:
                    70:0f:38:e9:0e:77:5b:a3:b8:86:0e:b0:e0:2d:3b:
                    aa:f8:7a:b9:c8:ee:dc:22:49:e2:f1:1e:6d:b7:41:
                    1d:1c:e7:0a:54:4f:5a:99:d8:fc:13:e2:f7:11:74:
                    12:e2:38:60:1d:d6:ca:ed:93:eb:12:57:b8:e6:ce:
                    8f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:2D:F8:91:2B:3E:C2:A1:CB:2E:5E:4B:45:2B:99:CB:92:EB:E9:C1
            X509v3 Authority Key Identifier:
                keyid:33:61:B8:50:0E:92:9A:FE:E5:8B:D9:E5:70:8A:CE:05:6E:EB:73:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/0/3361B8500E929AFEE58BD9E5708ACE056EEB73DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3361B8500E929AFEE58BD9E5708ACE056EEB73DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/0/323830343a373734633a383030303a3a2f33332d3333203d3e20323731313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:774c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         42:61:0d:63:99:ac:c6:b0:9b:e6:e4:a4:0d:9b:19:9b:33:a4:
         0d:ab:8f:4e:52:a9:2b:1b:7d:9d:89:60:66:c7:f3:16:0b:99:
         1f:21:31:ca:e4:da:d2:88:73:90:b4:46:be:0f:35:37:b7:9d:
         ee:57:8d:38:fc:a0:37:54:8d:31:5b:3b:61:05:15:78:58:0c:
         80:00:58:ff:9b:00:d7:7c:56:34:4c:c4:ac:ff:e9:2b:e4:07:
         13:07:5d:cc:99:1f:b1:74:b1:a0:37:f0:46:ba:d0:21:a6:64:
         0a:e6:b0:14:7f:e7:cf:42:cd:68:90:45:dc:b3:ae:11:9f:8f:
         d6:a2:4e:3b:b8:a0:e5:ec:6a:7b:90:8b:1d:c2:82:4f:ba:a4:
         9b:62:51:e1:f0:46:ee:d8:e5:25:7f:0e:3b:2e:a3:74:6a:4e:
         ef:93:cd:57:f9:cb:08:dd:ed:51:57:b9:20:a8:2d:0d:63:d3:
         c4:61:46:9a:02:ee:34:0d:6d:75:b9:24:3d:54:d5:ac:11:a7:
         57:13:a0:b2:ed:ba:5b:eb:10:6c:56:3d:b0:ec:73:c3:6b:bc:
         57:4f:8d:d5:0c:c5:c0:8a:f1:70:23:6f:40:62:a1:43:e5:28:
         9b:35:58:6d:f0:07:ec:d2:52:b7:5a:c7:50:2a:99:d6:ce:0b:
         e0:81:75:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----