Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/323830343a343163343a383030303a3a2f33342d3334203d3e20323637343535.roa
File:                     323830343a343163343a383030303a3a2f33342d3334203d3e20323637343535.roa (raw, json)
Hash identifier:          QWKwEw+O2WkDhU1k2IcV3NvXohCoSDhpyHT5siGeD6Q=
Subject key identifier:   1F:2D:C5:70:D1:58:89:60:19:A0:5F:BB:5B:F8:46:16:98:76:E7:24
Certificate issuer:       /CN=DF1D3ECDE0155405528EE1ECA39CE318FD143A1A
Certificate serial:       1067B305E9C5B772039869D46C89024FF054465D
Authority key identifier: DF:1D:3E:CD:E0:15:54:05:52:8E:E1:EC:A3:9C:E3:18:FD:14:3A:1A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF1D3ECDE0155405528EE1ECA39CE318FD143A1A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/323830343a343163343a383030303a3a2f33342d3334203d3e20323637343535.roa
Signing time:             Tue 13 Oct 2026 19:19:50 +0000
ROA not before:           Tue 13 Oct 2026 19:14:50 +0000
ROA not after:            Tue 12 Oct 2027 19:19:50 +0000
asID:                     267455
IP address blocks:        2804:41c4:8000::/34 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:67:b3:05:e9:c5:b7:72:03:98:69:d4:6c:89:02:4f:f0:54:46:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF1D3ECDE0155405528EE1ECA39CE318FD143A1A
        Validity
            Not Before: Oct 13 19:14:50 2026 GMT
            Not After : Oct 12 19:19:50 2027 GMT
        Subject: CN=1F2DC570D158896019A05FBB5BF846169876E724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6c:0b:ac:67:e8:6d:93:7c:51:85:9f:0b:a6:
                    67:f0:77:37:e1:a3:8c:96:47:63:52:48:cd:82:7a:
                    3b:ef:4c:86:1f:28:03:23:7b:fc:73:d5:e4:4a:b9:
                    f8:7e:c4:95:7b:2c:88:95:aa:31:c3:e9:ae:c9:53:
                    27:17:0b:62:59:ce:bc:78:33:1f:af:13:e2:fb:66:
                    ca:a6:c4:3b:47:ac:55:2d:a4:09:79:11:86:3f:92:
                    c2:95:8c:c7:e4:69:f8:5d:85:48:88:a6:c4:b2:62:
                    8f:4d:a6:39:7c:75:06:a9:22:b3:69:8d:ac:b4:c2:
                    41:ad:a8:54:4f:1d:78:10:2f:ed:1c:4b:ae:f5:04:
                    4c:94:e4:c2:95:4c:72:96:5c:e6:5b:ff:97:bb:27:
                    0f:12:c9:24:f1:da:b5:b9:37:8a:e5:12:c4:d8:d1:
                    94:56:c7:c6:af:cf:95:6c:6a:4d:20:63:5f:b9:05:
                    5e:48:ac:55:d4:71:60:53:5e:d0:3b:f0:04:93:7d:
                    1b:23:54:08:01:91:59:51:84:b0:a8:cf:86:ea:b7:
                    c2:f0:12:7a:d4:59:36:5d:f1:74:e1:92:e5:1e:1f:
                    06:72:5b:ad:78:c0:b7:9b:42:e8:f3:98:0b:8d:37:
                    76:f1:cd:59:7e:c5:44:35:ac:b5:69:09:a3:fd:47:
                    b4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:2D:C5:70:D1:58:89:60:19:A0:5F:BB:5B:F8:46:16:98:76:E7:24
            X509v3 Authority Key Identifier:
                keyid:DF:1D:3E:CD:E0:15:54:05:52:8E:E1:EC:A3:9C:E3:18:FD:14:3A:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/DF1D3ECDE0155405528EE1ECA39CE318FD143A1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/DF1D3ECDE0155405528EE1ECA39CE318FD143A1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/323830343a343163343a383030303a3a2f33342d3334203d3e20323637343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41c4:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         6b:27:79:eb:7c:2f:03:93:d6:ec:a0:84:42:21:60:c0:37:77:
         9a:81:1c:f3:d4:3c:26:f6:42:65:d3:2f:b0:8c:c2:c2:06:05:
         d7:58:db:66:91:8e:fb:2a:dd:95:9a:21:7c:69:b7:1c:f4:fb:
         62:45:89:98:0d:46:62:0e:39:9a:b4:52:7e:13:2d:ca:3d:21:
         a0:74:58:13:c3:eb:4b:4e:74:95:8e:4e:a7:92:a5:b8:95:6c:
         a1:29:7c:65:18:f8:f5:77:c6:cf:4f:0f:73:6d:80:69:26:da:
         bc:09:93:60:df:ef:9d:89:30:2a:4c:b9:ce:f6:61:a9:99:40:
         ad:1a:25:f7:5d:18:ca:2e:bc:fd:93:e8:84:bd:72:6e:0e:a4:
         bf:20:4b:ea:28:64:f8:de:1c:16:d3:85:0d:26:b4:ce:6d:c9:
         8e:ad:54:f6:7a:b5:74:9c:03:b9:d8:fd:08:d5:95:97:a1:ab:
         c1:a0:da:55:1a:3b:99:68:4e:3d:93:0c:93:27:73:60:30:37:
         ce:44:af:1b:e5:17:c8:a3:a9:99:2e:95:11:f5:b2:25:de:59:
         ba:58:37:ca:84:39:86:ca:3f:3a:e1:ad:36:58:8e:90:9c:3c:
         e5:8b:16:30:16:ff:57:df:ed:85:8b:25:13:3a:06:5b:2c:05:
         55:e0:c6:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----