Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/323830343a336261383a3a2f33322d3438203d3e20323636313633.roa
File:                     323830343a336261383a3a2f33322d3438203d3e20323636313633.roa (raw, json)
Hash identifier:          6bJG/aYr6Je/KokUDvqqYJZpB5yVsxR5vK0tdnO6Lqg=
Subject key identifier:   D4:4A:18:FF:D5:E3:1B:EE:5C:E5:2D:C5:48:2D:4E:5C:88:80:1E:11
Certificate issuer:       /CN=041B44A9F96A2E80EA192819BE9533FF7CE1F401
Certificate serial:       22E7FF7302C0AFEEFAE4F437E6D14C1BE7735758
Authority key identifier: 04:1B:44:A9:F9:6A:2E:80:EA:19:28:19:BE:95:33:FF:7C:E1:F4:01
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041B44A9F96A2E80EA192819BE9533FF7CE1F401.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/323830343a336261383a3a2f33322d3438203d3e20323636313633.roa
Signing time:             Mon 16 Mar 2026 21:13:08 +0000
ROA not before:           Mon 16 Mar 2026 21:08:08 +0000
ROA not after:            Mon 15 Mar 2027 21:13:08 +0000
asID:                     266163
IP address blocks:        2804:3ba8::/32 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:e7:ff:73:02:c0:af:ee:fa:e4:f4:37:e6:d1:4c:1b:e7:73:57:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=041B44A9F96A2E80EA192819BE9533FF7CE1F401
        Validity
            Not Before: Mar 16 21:08:08 2026 GMT
            Not After : Mar 15 21:13:08 2027 GMT
        Subject: CN=D44A18FFD5E31BEE5CE52DC5482D4E5C88801E11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:60:a3:cf:bd:52:cb:8e:df:96:cd:ab:c4:f5:
                    3c:89:ca:79:aa:4a:af:b1:19:60:15:d7:cc:5d:be:
                    71:86:2b:83:9e:c4:cb:74:0c:b9:02:c3:51:d1:5a:
                    b7:44:64:8f:bf:1a:2f:77:15:2e:11:83:31:ea:bb:
                    9a:96:ed:c0:9c:8c:73:e8:8f:03:4b:42:5a:7a:22:
                    69:8b:13:80:7e:e4:69:72:06:7c:74:c4:b2:97:3e:
                    f4:4a:a9:4f:53:c2:78:1f:ff:48:9f:df:f1:0d:9e:
                    4b:96:2a:31:bf:aa:50:66:3e:aa:90:d4:54:43:13:
                    2a:5a:c2:fb:f2:0a:7e:e6:53:a5:37:67:59:c7:3c:
                    92:74:5b:93:c0:c6:96:58:e9:ce:b8:c7:13:15:8d:
                    73:c6:09:4d:fb:88:e3:2c:2a:fe:93:54:3e:11:7a:
                    9b:b6:f0:d4:5e:9c:d9:71:3a:1c:69:64:00:ca:69:
                    9d:28:f3:09:ae:55:b1:bd:0a:cb:6d:2c:79:12:9f:
                    fe:fc:e9:3c:a7:1a:11:57:45:a0:18:b9:b3:88:49:
                    bf:72:28:02:bb:93:76:e8:b2:fe:32:7e:a0:5d:ef:
                    7e:57:67:e6:00:b0:cf:1f:f5:c6:54:79:12:6d:05:
                    55:64:65:90:69:ca:f0:ef:6c:48:87:bf:5f:ea:e8:
                    59:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:4A:18:FF:D5:E3:1B:EE:5C:E5:2D:C5:48:2D:4E:5C:88:80:1E:11
            X509v3 Authority Key Identifier:
                keyid:04:1B:44:A9:F9:6A:2E:80:EA:19:28:19:BE:95:33:FF:7C:E1:F4:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/041B44A9F96A2E80EA192819BE9533FF7CE1F401.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/041B44A9F96A2E80EA192819BE9533FF7CE1F401.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AJKPsTc5vWbC2khFjEyk2Bu5BBm3ztr5s1tngDwTtukb/0/323830343a336261383a3a2f33322d3438203d3e20323636313633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3ba8::/32

    Signature Algorithm: sha256WithRSAEncryption
         c6:12:77:ba:3a:e2:3a:d1:30:07:9b:3f:0d:6b:be:68:1e:ed:
         00:13:a1:c4:7e:bd:84:a8:0e:69:ec:6c:bf:8c:a7:c7:f7:9f:
         34:a6:d5:e8:6f:c4:73:60:51:5a:c0:a0:88:ae:48:aa:d6:24:
         2d:93:29:fb:f9:4c:6d:56:4e:00:6c:5a:cc:93:66:d8:f5:b9:
         fe:6e:eb:8b:ea:f6:9b:58:10:06:6d:0c:2c:a3:8f:44:67:db:
         2f:21:02:f6:f2:de:98:77:8c:c7:99:5d:33:36:bd:63:b9:ec:
         5c:11:2c:df:01:6c:b8:83:0d:f8:e0:7f:c0:b4:a2:8b:69:6d:
         e1:fd:4f:96:1e:33:d8:e2:d7:b1:30:63:cf:f1:86:a9:34:9f:
         e3:1b:40:4e:7a:6e:44:4c:c1:06:a4:a0:eb:ce:57:be:da:a4:
         5d:e7:47:20:e2:0a:d5:7d:bb:08:c6:91:92:61:7e:f6:b1:7a:
         c0:56:e9:a8:53:0f:03:5f:b1:f7:c8:7b:f3:f9:af:8b:af:06:
         26:2c:5d:8d:42:1f:20:4f:63:6b:2e:a4:56:d4:42:e9:b2:dd:
         7c:0a:ef:f2:43:79:50:e8:cc:df:fc:c8:83:fd:e0:0f:49:fa:
         14:79:88:08:ca:d0:33:76:b6:3d:da:6b:6e:69:c6:41:5c:43:
         15:73:f6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 02:22:00 2026 by rpki-client