Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a383030303a3a2f34382d3438203d3e20323635393139.roa
File:                     323830343a336664383a383030303a3a2f34382d3438203d3e20323635393139.roa (raw, json)
Hash identifier:          V7FC2Bl6EZhE+2Ct5JUYmXUZxiRES05PXXXgyFQhwPM=
Subject key identifier:   72:77:C5:14:EE:91:22:E9:D2:28:88:19:4D:E3:1D:38:9F:EE:0E:BA
Certificate issuer:       /CN=D4C1800777B6B27702B6747E148FA0063550B046
Certificate serial:       6E05A2D1530DA636C4F0FEA2C30228ED9C82B388
Authority key identifier: D4:C1:80:07:77:B6:B2:77:02:B6:74:7E:14:8F:A0:06:35:50:B0:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4C1800777B6B27702B6747E148FA0063550B046.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a383030303a3a2f34382d3438203d3e20323635393139.roa
Signing time:             Thu 17 Sep 2026 13:50:50 +0000
ROA not before:           Thu 17 Sep 2026 13:45:50 +0000
ROA not after:            Thu 16 Sep 2027 13:50:50 +0000
asID:                     265919
IP address blocks:        2804:3fd8:8000::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:05:a2:d1:53:0d:a6:36:c4:f0:fe:a2:c3:02:28:ed:9c:82:b3:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4C1800777B6B27702B6747E148FA0063550B046
        Validity
            Not Before: Sep 17 13:45:50 2026 GMT
            Not After : Sep 16 13:50:50 2027 GMT
        Subject: CN=7277C514EE9122E9D22888194DE31D389FEE0EBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ac:e6:51:8f:f0:f4:02:ff:61:3d:44:53:c3:
                    68:dd:4d:e3:57:f6:32:fc:23:bb:3d:9d:d4:db:24:
                    7f:ee:64:f6:54:0c:f0:dd:d1:41:ef:d2:b4:cc:0e:
                    9d:f0:09:fd:48:8f:3f:bb:fc:fc:74:c6:71:14:38:
                    b6:85:49:85:73:9c:2c:61:1b:9a:03:f9:39:91:39:
                    70:c2:dc:e0:24:00:b7:ae:3d:9d:97:01:a7:a2:34:
                    ea:e0:3c:31:55:82:a1:c1:6a:83:b1:6b:7e:65:bc:
                    d8:ad:27:09:f2:3e:18:a3:e8:45:a4:14:09:35:f4:
                    b0:79:74:0d:8a:a9:96:f6:80:f7:a3:e1:a1:fc:80:
                    e8:a7:ec:2e:c7:25:cc:b3:49:c4:ee:b4:cb:b0:9f:
                    da:0c:17:d7:03:15:44:dc:13:94:b6:48:69:ea:6b:
                    34:f5:4d:6d:00:23:d0:af:c5:ec:45:1b:ce:8f:68:
                    6a:72:36:0c:4f:03:b1:b1:ab:ab:14:aa:7b:0c:71:
                    e3:18:9f:f2:b9:66:86:db:60:07:17:d7:a3:34:90:
                    01:ca:ec:38:ff:71:03:78:6d:49:7b:a5:f7:81:31:
                    8a:71:8e:96:57:e2:60:4f:43:2a:59:b4:e2:82:6c:
                    86:7e:09:c8:5b:d7:1b:3e:48:27:4c:8a:58:43:9e:
                    39:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:77:C5:14:EE:91:22:E9:D2:28:88:19:4D:E3:1D:38:9F:EE:0E:BA
            X509v3 Authority Key Identifier:
                keyid:D4:C1:80:07:77:B6:B2:77:02:B6:74:7E:14:8F:A0:06:35:50:B0:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/D4C1800777B6B27702B6747E148FA0063550B046.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D4C1800777B6B27702B6747E148FA0063550B046.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a383030303a3a2f34382d3438203d3e20323635393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3fd8:8000::/48

    Signature Algorithm: sha256WithRSAEncryption
         6c:02:f4:fb:67:81:26:86:17:a2:72:aa:d8:97:84:b4:89:7b:
         76:89:08:e9:04:2b:be:56:55:f5:0c:c4:f6:12:6f:db:3f:5f:
         9e:3b:06:1b:4f:94:b6:c6:79:8b:e5:b4:d2:ce:d0:b5:d9:9c:
         d4:80:3e:3b:a1:ae:69:97:57:bb:9e:b7:21:5f:f1:1d:0d:3f:
         7b:cd:81:5c:4e:ac:e7:54:25:14:33:c5:34:fc:35:a1:1a:53:
         88:61:f6:2f:bb:fe:f9:3d:65:b9:77:6d:af:24:f5:ee:1d:a0:
         97:da:e7:71:57:c3:8e:84:47:15:e4:98:f6:2b:29:85:8a:23:
         cc:6f:b9:f9:71:d4:bb:fd:c6:03:2a:7a:1f:18:4f:8e:36:9d:
         70:34:f3:9b:a4:a8:f3:42:6f:52:9b:09:6a:ca:dc:89:af:34:
         3c:96:97:55:06:c0:b8:72:1f:ac:62:f3:4a:e1:19:5f:34:b6:
         dd:74:c9:83:1c:53:18:88:e5:4f:f2:f8:5f:23:fc:36:e4:33:
         f1:57:c2:4d:16:ec:09:a0:13:2e:9b:67:d7:dd:43:0e:b0:a6:
         ed:55:08:30:22:84:3f:0a:f1:7a:3e:92:c9:d7:da:17:62:31:
         54:cb:8f:7a:65:df:ea:66:dc:4c:56:ce:60:e1:d1:51:20:f8:
         41:83:0a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----