Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/323830343a343034383a3a2f33322d3438203d3e20323635393439.roa
File:                     323830343a343034383a3a2f33322d3438203d3e20323635393439.roa (raw, json)
Hash identifier:          ECrl2P5+Vef4HFQtb4ebzb/D4W/8OExP0zrwcPR96ag=
Subject key identifier:   7A:58:B9:F1:5A:14:FF:4B:1A:AD:3E:A4:82:37:B9:1D:05:19:BD:FC
Certificate issuer:       /CN=9D31B039CC6FF1EADDCFF72BD0423CCEB6650695
Certificate serial:       64BDB080F982E8EA6A744A70C8125E1CA8F73149
Authority key identifier: 9D:31:B0:39:CC:6F:F1:EA:DD:CF:F7:2B:D0:42:3C:CE:B6:65:06:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D31B039CC6FF1EADDCFF72BD0423CCEB6650695.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/323830343a343034383a3a2f33322d3438203d3e20323635393439.roa
Signing time:             Tue 08 Sep 2026 19:00:03 +0000
ROA not before:           Tue 08 Sep 2026 18:55:03 +0000
ROA not after:            Tue 07 Sep 2027 19:00:03 +0000
asID:                     265949
IP address blocks:        2804:4048::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:bd:b0:80:f9:82:e8:ea:6a:74:4a:70:c8:12:5e:1c:a8:f7:31:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D31B039CC6FF1EADDCFF72BD0423CCEB6650695
        Validity
            Not Before: Sep  8 18:55:03 2026 GMT
            Not After : Sep  7 19:00:03 2027 GMT
        Subject: CN=7A58B9F15A14FF4B1AAD3EA48237B91D0519BDFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:0d:e3:29:81:fd:fa:f5:b5:d9:38:dd:fe:72:
                    6e:6d:3b:79:89:42:31:03:39:4e:99:aa:f1:5f:b6:
                    57:a8:96:22:4b:62:4f:12:9a:bb:50:aa:7c:68:73:
                    a5:09:32:d2:34:05:1c:59:b9:3b:ee:a6:38:e7:b0:
                    70:03:28:60:b4:a3:ab:a8:8b:a5:59:ea:b7:a4:58:
                    e9:d4:74:d4:2d:24:22:ef:f9:20:72:d2:8c:74:85:
                    fb:16:c9:d3:39:ac:93:ad:ee:cb:ad:0d:f8:48:8b:
                    26:63:cc:3b:92:16:b5:31:ad:e6:cb:c6:e7:c8:e9:
                    59:cc:c4:d7:fd:f1:6a:2e:ff:e8:3b:86:7e:37:1b:
                    59:3b:67:3e:1e:31:80:a9:83:0c:1e:92:73:04:1e:
                    11:3b:7a:72:5e:f5:b2:1a:a6:7e:36:bd:5b:b4:a8:
                    9b:6b:3a:4b:36:2f:a4:6a:bd:ae:07:24:b3:a2:48:
                    ea:4c:34:99:f6:fe:8a:62:0b:ce:5e:d2:78:8e:0c:
                    d6:fa:cb:eb:3d:dd:c4:63:37:9c:2b:2b:32:b2:c5:
                    a1:1d:52:20:6b:77:50:00:d7:52:50:69:cd:50:a0:
                    01:44:34:32:8a:c7:42:20:14:25:d3:a8:dc:ee:85:
                    25:36:6f:2a:d8:e7:15:4f:f1:96:dc:a3:a1:86:0f:
                    3a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:58:B9:F1:5A:14:FF:4B:1A:AD:3E:A4:82:37:B9:1D:05:19:BD:FC
            X509v3 Authority Key Identifier:
                keyid:9D:31:B0:39:CC:6F:F1:EA:DD:CF:F7:2B:D0:42:3C:CE:B6:65:06:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/9D31B039CC6FF1EADDCFF72BD0423CCEB6650695.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D31B039CC6FF1EADDCFF72BD0423CCEB6650695.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9wAW9gmXSmo2se5bPkDTiL5VE3z7oXUAehaCK2gzWeZ/0/323830343a343034383a3a2f33322d3438203d3e20323635393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4048::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:c2:85:67:0a:dd:a0:83:7a:d3:fb:3c:f7:65:f1:b0:5a:16:
         eb:24:00:29:9b:95:e2:31:52:92:8b:56:0c:cf:12:03:60:f0:
         14:fa:de:13:bc:24:1a:82:89:a5:c9:0a:f6:61:10:c6:e1:f9:
         cd:62:3a:98:55:18:dd:cc:98:9c:79:15:2c:ea:3a:cb:e8:59:
         d4:24:b6:73:f0:b9:5f:4f:fd:25:1a:20:ac:5e:46:06:c5:66:
         03:35:48:5e:2f:3f:d4:02:c8:aa:38:66:8c:28:30:94:fa:1d:
         4f:8f:58:de:4b:2c:dc:4c:c1:0b:c1:0e:40:c2:3d:05:63:92:
         06:64:14:ff:5f:b5:26:d2:b7:3f:86:70:18:07:a6:f0:d1:a4:
         b1:5f:0d:23:a9:46:ac:e3:b4:35:e9:f2:83:d6:12:8e:63:cd:
         3f:22:bc:73:91:fd:91:7a:b6:d6:ec:e0:3a:a1:84:72:a9:1c:
         9b:42:96:6b:fa:64:b1:bf:94:da:9c:70:be:14:40:98:d4:e1:
         c9:31:3e:17:26:93:99:6f:8f:c8:4f:cd:d0:46:c0:b3:ba:33:
         da:07:75:df:0b:25:a8:1f:7a:ef:e1:d0:8e:dc:50:75:f1:73:
         7e:fc:4b:0c:8d:33:d2:7d:b0:3a:37:94:ad:5e:d4:65:2d:e6:
         c7:d4:87:76
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUZL2wgPmC6OpqdEpwyBJeHKj3MUkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUQzMUIwMzlDQzZGRjFFQUREQ0ZGNzJCRDA0MjNDQ0VC
NjY1MDY5NTAeFw0yNjA5MDgxODU1MDNaFw0yNzA5MDcxOTAwMDNaMDMxMTAvBgNV
BAMTKDdBNThCOUYxNUExNEZGNEIxQUFEM0VBNDgyMzdCOTFEMDUxOUJERkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnDeMpgf369bXZON3+cm5tO3mJ
QjEDOU6ZqvFftleoliJLYk8SmrtQqnxoc6UJMtI0BRxZuTvupjjnsHADKGC0o6uo
i6VZ6rekWOnUdNQtJCLv+SBy0ox0hfsWydM5rJOt7sutDfhIiyZjzDuSFrUxrebL
xufI6VnMxNf98Wou/+g7hn43G1k7Zz4eMYCpgwweknMEHhE7enJe9bIapn42vVu0
qJtrOks2L6Rqva4HJLOiSOpMNJn2/opiC85e0niODNb6y+s93cRjN5wrKzKyxaEd
UiBrd1AA11JQac1QoAFENDKKx0IgFCXTqNzuhSU2byrY5xVP8Zbco6GGDzrpAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUeli58VoU/0sarT6kgje5HQUZvfwwHwYDVR0j
BBgwFoAUnTGwOcxv8erdz/cr0EI8zrZlBpUwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRDl3QVc5Z21YU21vMnNlNWJQa0RUaUw1VkUzejdvWFVBZWhhQ0syZ3pX
ZVovMC85RDMxQjAzOUNDNkZGMUVBRERDRkY3MkJEMDQyM0NDRUI2NjUwNjk1LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzlEMzFCMDM5Q0M2RkYxRUFE
RENGRjcyQkQwNDIzQ0NFQjY2NTA2OTUuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0Q5d0FXOWdtWFNtbzJzZTViUGtEVGlMNVZFM3o3b1hVQWVoYUNLMmd6V2VaLzAv
MzIzODMwMzQzYTM0MzAzNDM4M2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM1
MzkzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARASDANBgkqhkiG9w0BAQsFAAOCAQEAWcKFZwrd
oIN60/s892XxsFoW6yQAKZuV4jFSkotWDM8SA2DwFPreE7wkGoKJpckK9mEQxuH5
zWI6mFUY3cyYnHkVLOo6y+hZ1CS2c/C5X0/9JRogrF5GBsVmAzVIXi8/1ALIqjhm
jCgwlPodT49Y3kss3EzBC8EOQMI9BWOSBmQU/1+1JtK3P4ZwGAem8NGksV8NI6lG
rOO0Nenyg9YSjmPNPyK8c5H9kXq21uzgOqGEcqkcm0KWa/pksb+U2pxwvhRAmNTh
yTE+FyaTmW+PyE/N0EbAs7oz2gd13wslqB967+HQjtxQdfFzfvxLDI0z0n2wOjeU
rV7UZS3mx9SHdg==
-----END CERTIFICATE-----