Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/323830343a353764303a3a2f33322d3438203d3e20323638303838.roa
File:                     323830343a353764303a3a2f33322d3438203d3e20323638303838.roa (raw, json)
Hash identifier:          Z22x3jHa30rt4HcUEQtomMiHmgJYeN0dKA5/K8X8X4Y=
Subject key identifier:   52:D0:FE:BC:66:83:AC:D9:1C:48:24:D6:3B:01:97:C5:B7:5C:49:D1
Certificate issuer:       /CN=DD3997EA624B2747F06E77D914122EADEC4D0B7D
Certificate serial:       139A998CCAAB67C566F6F18209967D082A7A31F5
Authority key identifier: DD:39:97:EA:62:4B:27:47:F0:6E:77:D9:14:12:2E:AD:EC:4D:0B:7D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD3997EA624B2747F06E77D914122EADEC4D0B7D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/323830343a353764303a3a2f33322d3438203d3e20323638303838.roa
Signing time:             Mon 14 Sep 2026 14:08:01 +0000
ROA not before:           Mon 14 Sep 2026 14:03:01 +0000
ROA not after:            Mon 13 Sep 2027 14:08:01 +0000
asID:                     268088
IP address blocks:        2804:57d0::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:9a:99:8c:ca:ab:67:c5:66:f6:f1:82:09:96:7d:08:2a:7a:31:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD3997EA624B2747F06E77D914122EADEC4D0B7D
        Validity
            Not Before: Sep 14 14:03:01 2026 GMT
            Not After : Sep 13 14:08:01 2027 GMT
        Subject: CN=52D0FEBC6683ACD91C4824D63B0197C5B75C49D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8c:52:e5:9d:83:b4:db:c8:31:3a:15:a1:cc:
                    97:d6:a8:b6:7e:16:ae:e6:57:22:e7:77:f4:ec:3d:
                    b6:fd:d5:f1:e3:cc:55:b1:9c:d7:e8:e7:65:09:e4:
                    33:93:c3:3d:0a:e7:2f:5b:1a:0f:93:65:52:52:31:
                    db:16:c5:5f:e6:0a:37:e6:2d:c3:30:72:ff:bf:69:
                    d1:21:0a:0f:eb:17:a0:a3:6d:30:dc:4a:aa:2c:98:
                    b8:22:23:db:e1:2d:65:66:29:02:10:fe:61:d4:67:
                    05:2f:3c:66:f6:d4:2e:27:46:27:6f:60:1c:33:2f:
                    70:de:19:ce:77:60:c9:66:59:c1:c3:70:da:fd:eb:
                    75:35:ad:df:58:b5:fc:b0:37:ed:1d:b7:38:14:40:
                    c3:e3:51:85:3e:8c:fa:1b:8b:94:5e:f7:fb:c3:db:
                    d7:02:55:d7:9d:87:54:a8:3c:89:d2:f1:07:d5:b1:
                    6c:0d:a6:67:94:a1:46:a5:56:e3:b9:d3:85:4a:88:
                    12:84:78:7a:8b:6f:ba:6f:81:a5:2b:7d:e7:ae:ea:
                    c3:23:61:64:60:e2:07:fc:79:ae:47:e9:45:33:15:
                    0d:55:bb:86:db:5b:2c:a5:0d:d3:e2:5b:89:0c:57:
                    d2:b5:df:4a:da:26:58:55:02:c8:6d:e5:6d:49:25:
                    b4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D0:FE:BC:66:83:AC:D9:1C:48:24:D6:3B:01:97:C5:B7:5C:49:D1
            X509v3 Authority Key Identifier:
                keyid:DD:39:97:EA:62:4B:27:47:F0:6E:77:D9:14:12:2E:AD:EC:4D:0B:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/DD3997EA624B2747F06E77D914122EADEC4D0B7D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DD3997EA624B2747F06E77D914122EADEC4D0B7D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DvxrUCmnYeTkh1QDjProGtBP33EWnAWi4BEFBKtMxruE/0/323830343a353764303a3a2f33322d3438203d3e20323638303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:57d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:71:c2:91:83:90:4f:45:da:90:80:c7:55:7d:dc:9c:67:56:
         79:a0:c9:aa:57:34:5f:05:d7:15:e5:a2:e4:26:73:21:5c:84:
         e6:e4:b5:6f:cd:60:4a:b5:2e:06:ef:85:17:0c:66:e2:12:7d:
         c4:25:e7:3b:1d:00:44:4c:27:a8:3a:8f:1a:43:24:2f:eb:73:
         bc:03:2f:42:44:22:cb:eb:ca:81:16:ad:a8:63:11:dd:4d:01:
         f0:90:74:0e:3c:5c:f5:08:e2:e5:8c:8f:d2:27:2a:85:57:70:
         b0:e7:fb:ac:ef:c6:78:ba:6f:db:7b:46:14:9f:36:1b:00:02:
         e9:7a:62:92:5c:d8:d3:2b:87:8e:45:f2:7d:c2:10:e1:87:c7:
         c4:19:28:44:08:80:24:b2:8c:07:f0:65:a5:ed:bf:1d:5e:59:
         87:d0:59:cf:f6:3a:53:93:7a:17:0a:40:a0:5a:c1:73:60:30:
         b5:14:da:4d:69:68:9e:c6:08:5d:61:fc:0c:84:9b:3a:9b:e9:
         47:19:21:20:d5:5b:35:b8:80:01:a9:45:f3:f8:0e:56:38:5c:
         5c:fe:50:fb:2f:49:a0:6d:ee:1b:c8:55:4f:a7:60:26:4b:0a:
         df:c9:9e:d5:c6:06:8f:f3:80:9c:90:57:8b:5a:0f:dc:7b:17:
         a3:5f:0d:7b
-----BEGIN CERTIFICATE-----
MIIFRjCCBC6gAwIBAgIUE5qZjMqrZ8Vm9vGCCZZ9CCp6MfUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREQzOTk3RUE2MjRCMjc0N0YwNkU3N0Q5MTQxMjJFQURF
QzREMEI3RDAeFw0yNjA5MTQxNDAzMDFaFw0yNzA5MTMxNDA4MDFaMDMxMTAvBgNV
BAMTKDUyRDBGRUJDNjY4M0FDRDkxQzQ4MjRENjNCMDE5N0M1Qjc1QzQ5RDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDejFLlnYO028gxOhWhzJfWqLZ+
Fq7mVyLnd/TsPbb91fHjzFWxnNfo52UJ5DOTwz0K5y9bGg+TZVJSMdsWxV/mCjfm
LcMwcv+/adEhCg/rF6CjbTDcSqosmLgiI9vhLWVmKQIQ/mHUZwUvPGb21C4nRidv
YBwzL3DeGc53YMlmWcHDcNr963U1rd9YtfywN+0dtzgUQMPjUYU+jPobi5Re9/vD
29cCVdedh1SoPInS8QfVsWwNpmeUoUalVuO504VKiBKEeHqLb7pvgaUrfeeu6sMj
YWRg4gf8ea5H6UUzFQ1Vu4bbWyylDdPiW4kMV9K130raJlhVAsht5W1JJbSpAgMB
AAGjggJQMIICTDAdBgNVHQ4EFgQUUtD+vGaDrNkcSCTWOwGXxbdcSdEwHwYDVR0j
BBgwFoAU3TmX6mJLJ0fwbnfZFBIurexNC30wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vRHZ4clVDbW5ZZVRraDFRRGpQcm9HdEJQMzNFV25BV2k0QkVGQkt0TXhy
dUUvMC9ERDM5OTdFQTYyNEIyNzQ3RjA2RTc3RDkxNDEyMkVBREVDNEQwQjdELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0REMzk5N0VBNjI0QjI3NDdG
MDZFNzdEOTE0MTIyRUFERUM0RDBCN0QuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0R2eHJVQ21uWWVUa2gxUURqUHJvR3RCUDMzRVduQVdpNEJFRkJLdE14cnVFLzAv
MzIzODMwMzQzYTM1Mzc2NDMwM2EzYTJmMzMzMjJkMzQzODIwM2QzZTIwMzIzNjM4
MzAzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUFBwEH
AQH/BBEwDzANBAIAAjAHAwUAKARX0DANBgkqhkiG9w0BAQsFAAOCAQEApHHCkYOQ
T0XakIDHVX3cnGdWeaDJqlc0XwXXFeWi5CZzIVyE5uS1b81gSrUuBu+FFwxm4hJ9
xCXnOx0AREwnqDqPGkMkL+tzvAMvQkQiy+vKgRatqGMR3U0B8JB0Djxc9Qji5YyP
0icqhVdwsOf7rO/GeLpv23tGFJ82GwAC6XpiklzY0yuHjkXyfcIQ4YfHxBkoRAiA
JLKMB/Blpe2/HV5Zh9BZz/Y6U5N6FwpAoFrBc2AwtRTaTWlonsYIXWH8DISbOpvp
RxkhINVbNbiAAalF8/gOVjhcXP5Q+y9JoG3uG8hVT6dgJksK38me1cYGj/OAnJBX
i1oP3HsXo18New==
-----END CERTIFICATE-----