Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a37333a3a2f34382d3438203d3e20323639353636.roa
File:                     323830343a363638383a37333a3a2f34382d3438203d3e20323639353636.roa (raw, json)
Hash identifier:          WgyRw9YE3EtRuJes+iYjs/7hgU3/LYLUCwSBmpY/Fuc=
Subject key identifier:   D8:64:8C:82:C3:1D:42:04:A6:04:58:E4:54:A9:D8:F5:F6:2F:62:EB
Certificate issuer:       /CN=AF703597CEAD8EC9E69E2A22E9BEA5D6DF147AE6
Certificate serial:       5F3002056DA609F28A2CC9682B150ACB202BAC2D
Authority key identifier: AF:70:35:97:CE:AD:8E:C9:E6:9E:2A:22:E9:BE:A5:D6:DF:14:7A:E6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF703597CEAD8EC9E69E2A22E9BEA5D6DF147AE6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a37333a3a2f34382d3438203d3e20323639353636.roa
Signing time:             Mon 23 Feb 2026 03:35:30 +0000
ROA not before:           Mon 23 Feb 2026 03:30:30 +0000
ROA not after:            Mon 22 Feb 2027 03:35:30 +0000
asID:                     269566
IP address blocks:        2804:6688:73::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:30:02:05:6d:a6:09:f2:8a:2c:c9:68:2b:15:0a:cb:20:2b:ac:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF703597CEAD8EC9E69E2A22E9BEA5D6DF147AE6
        Validity
            Not Before: Feb 23 03:30:30 2026 GMT
            Not After : Feb 22 03:35:30 2027 GMT
        Subject: CN=D8648C82C31D4204A60458E454A9D8F5F62F62EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c4:ad:c6:ec:d7:8f:e8:95:44:3d:81:9e:86:
                    69:a5:f1:d4:01:83:66:93:34:13:d5:ba:c7:58:d7:
                    9e:48:5a:89:1e:1f:08:cb:2b:c8:98:be:9b:a4:8e:
                    3a:b6:49:e0:7e:1e:7e:32:fa:57:10:c4:78:55:e6:
                    1c:16:61:67:ec:cd:a4:04:8d:78:69:d7:39:68:cc:
                    af:b6:5e:27:6e:64:46:c0:2f:9c:9a:1d:a8:2e:21:
                    26:22:95:7f:90:cb:ee:08:c3:99:5a:cb:9a:19:de:
                    f6:42:e0:6a:76:3e:58:05:83:3d:dc:11:a0:c5:05:
                    d3:99:7f:b4:00:0a:e0:1e:cb:5a:40:b6:c5:a0:40:
                    a6:a2:5b:e8:4c:12:8f:3c:d1:87:66:c0:b9:9d:72:
                    7b:fe:26:65:ba:28:b2:6f:b3:92:1e:19:15:55:60:
                    b7:f0:41:9a:8a:0f:f0:ef:df:45:6b:d6:d9:f0:73:
                    1d:61:af:96:3e:88:0a:d9:5a:a9:c1:5e:c0:ea:01:
                    32:c9:1d:6f:94:f4:59:92:ee:d1:ad:9c:dd:e1:a8:
                    b5:5b:9d:59:7c:a0:b1:19:d8:3c:d5:63:20:8b:d4:
                    d1:1c:83:59:dc:31:70:86:de:66:fb:ea:06:58:08:
                    14:31:6d:43:1b:6f:e2:9e:cc:eb:c8:37:ea:2f:3f:
                    ea:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:64:8C:82:C3:1D:42:04:A6:04:58:E4:54:A9:D8:F5:F6:2F:62:EB
            X509v3 Authority Key Identifier:
                keyid:AF:70:35:97:CE:AD:8E:C9:E6:9E:2A:22:E9:BE:A5:D6:DF:14:7A:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/AF703597CEAD8EC9E69E2A22E9BEA5D6DF147AE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/AF703597CEAD8EC9E69E2A22E9BEA5D6DF147AE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EfV7G1okT1vQtFbMQpgatDC9pthwAMUd8HUrvuEovE4K/0/323830343a363638383a37333a3a2f34382d3438203d3e20323639353636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6688:73::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:51:ce:df:f0:dd:a4:72:b6:c7:a9:71:36:36:c4:91:93:9d:
         72:94:86:d6:56:8d:9b:1c:0d:fe:07:fd:f9:bd:c2:30:1e:72:
         19:52:d3:0b:6d:84:17:15:d0:2c:c8:1b:72:e9:e3:7b:d4:c9:
         15:8b:44:6e:ce:4d:d8:38:44:64:95:ab:2b:6b:b9:54:b1:10:
         39:bf:9d:76:ba:8b:5f:60:b3:a3:96:98:3a:f8:87:47:c0:6f:
         4f:e2:2f:0b:96:95:fe:58:26:78:ac:71:66:34:d9:9c:29:67:
         cb:47:6e:3f:ee:d5:83:6d:38:8c:73:a1:e8:94:e4:56:ab:69:
         82:6e:d3:c2:7a:6d:e3:32:42:1e:40:a4:1e:c6:87:35:c6:c1:
         6d:66:7b:69:26:f5:2e:41:cc:39:95:51:4e:c7:fd:84:92:cb:
         a7:25:6f:d7:5c:18:e1:c8:47:0b:00:98:e3:7e:cf:49:42:0e:
         b6:0c:d6:bf:e3:ec:b1:da:28:c0:e4:02:81:1d:0d:f2:be:0b:
         e7:dd:b1:b9:f6:7e:9c:ed:e2:60:de:61:db:71:d6:db:d6:87:
         6f:1b:ae:e8:3c:a1:8b:2f:dd:50:a4:36:99:36:aa:93:89:14:
         49:1d:fe:51:28:43:d7:b8:c9:93:02:ba:f9:6c:60:d2:e0:71:
         45:e2:cc:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:32:23 2026 by rpki-client