Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a3139363a3a2f34382d3438203d3e20323635393139.roa
File:                     323830343a336664383a3139363a3a2f34382d3438203d3e20323635393139.roa (raw, json)
Hash identifier:          zOz8klPu8xBl0OnAUDiKs7LwcLdG4IkKjGGDfaiE5fw=
Subject key identifier:   93:F2:39:0B:38:9B:30:F7:50:28:E4:9F:87:83:01:68:8C:4C:B2:82
Certificate issuer:       /CN=D4C1800777B6B27702B6747E148FA0063550B046
Certificate serial:       06479628113AFD60A6347A2EB0652BD9D99415FA
Authority key identifier: D4:C1:80:07:77:B6:B2:77:02:B6:74:7E:14:8F:A0:06:35:50:B0:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4C1800777B6B27702B6747E148FA0063550B046.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a3139363a3a2f34382d3438203d3e20323635393139.roa
Signing time:             Thu 17 Sep 2026 13:50:51 +0000
ROA not before:           Thu 17 Sep 2026 13:45:51 +0000
ROA not after:            Thu 16 Sep 2027 13:50:51 +0000
asID:                     265919
IP address blocks:        2804:3fd8:196::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:47:96:28:11:3a:fd:60:a6:34:7a:2e:b0:65:2b:d9:d9:94:15:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4C1800777B6B27702B6747E148FA0063550B046
        Validity
            Not Before: Sep 17 13:45:51 2026 GMT
            Not After : Sep 16 13:50:51 2027 GMT
        Subject: CN=93F2390B389B30F75028E49F878301688C4CB282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:00:7c:8f:8f:76:3f:2a:1a:a8:b7:f4:98:1f:
                    02:5a:df:34:6a:64:c8:9b:61:5e:d0:96:88:47:8f:
                    7c:8b:92:6b:a9:3f:ab:d0:c3:2d:0f:06:de:59:ee:
                    e0:a3:df:eb:37:87:d3:e1:e0:71:b3:85:a2:85:0a:
                    7a:8b:7a:4f:56:b4:93:e8:7c:a8:b3:6a:f1:91:08:
                    75:ae:29:bc:86:14:b9:e3:ef:66:32:43:29:1d:e9:
                    be:0e:ea:ee:52:c9:ea:6b:8f:ff:58:cd:48:ad:65:
                    aa:81:79:24:3b:9f:18:b0:bc:95:34:09:55:87:72:
                    21:c3:f9:60:1d:3e:c6:55:b5:7f:e4:fb:db:04:96:
                    2f:ee:a0:2b:0b:9a:b7:4d:f3:bd:0b:8c:d5:e2:37:
                    42:f3:99:75:00:bd:87:a2:54:f3:d0:d4:fe:54:21:
                    a7:04:72:d7:08:12:f0:23:55:7a:72:15:08:12:41:
                    6a:46:ef:f6:6f:57:b8:9c:28:cd:e1:82:52:2b:95:
                    d6:e2:3b:2b:10:94:22:17:68:92:96:c9:a7:6b:ae:
                    5c:00:53:01:95:8b:63:b1:a9:83:3b:23:d1:8d:77:
                    88:ba:d1:bc:d3:06:2a:3f:95:3e:2a:8a:9e:ac:6c:
                    f7:89:0e:59:9d:90:cd:15:96:2a:f8:5f:8a:38:a5:
                    2a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:F2:39:0B:38:9B:30:F7:50:28:E4:9F:87:83:01:68:8C:4C:B2:82
            X509v3 Authority Key Identifier:
                keyid:D4:C1:80:07:77:B6:B2:77:02:B6:74:7E:14:8F:A0:06:35:50:B0:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/D4C1800777B6B27702B6747E148FA0063550B046.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4C1800777B6B27702B6747E148FA0063550B046.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a3139363a3a2f34382d3438203d3e20323635393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3fd8:196::/48

    Signature Algorithm: sha256WithRSAEncryption
         b3:76:63:06:75:d7:5d:e7:a2:52:b4:e8:b8:da:86:8a:95:f0:
         24:4d:bc:78:ac:98:64:f8:4b:30:4a:f8:7e:74:0f:e0:f9:f8:
         dc:12:58:e0:e7:eb:b9:fe:30:ea:41:f5:cc:e1:69:97:13:20:
         a8:90:07:90:c0:60:07:e6:c4:69:d0:01:64:ed:5d:7e:b2:50:
         24:62:ad:d8:fc:e0:31:1c:1c:61:e7:e0:8a:2a:dd:28:4c:b6:
         9c:22:9f:1b:bf:e5:bd:77:1d:aa:df:81:d4:32:dc:38:31:36:
         f3:16:1c:c9:a6:a1:dc:97:b6:c7:36:c3:a6:74:5a:86:53:38:
         7a:b2:70:9c:3e:f4:0a:34:fd:dc:99:d9:2f:af:31:91:e1:92:
         d0:f7:c4:b2:1f:63:4d:96:99:c8:58:b3:45:9b:96:e2:09:60:
         20:e4:0e:d3:e3:73:ad:10:dc:62:bb:75:40:6a:0c:bc:0a:dc:
         76:92:5a:ff:55:ad:4f:51:7c:fa:56:46:a3:98:68:e8:36:bd:
         4b:b1:01:eb:ad:e4:d3:e6:42:cc:36:cb:57:e0:a2:dd:b3:ac:
         a6:f6:62:0e:4d:3e:24:32:f3:74:0a:6f:08:49:b1:9a:ab:13:
         de:f8:70:76:53:5e:0b:ce:b3:a4:28:39:a8:c5:27:6a:eb:5f:
         6e:94:e7:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----