Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3137313a3a2f34382d3438203d3e20323732373130.roa
File:                     323830343a383737343a3137313a3a2f34382d3438203d3e20323732373130.roa (raw, json)
Hash identifier:          hAD9MLlDr8euNws76IpYMM9lqbTSzKohFgiQ9WB4Wgs=
Subject key identifier:   D2:37:9A:C9:8E:8B:98:D9:73:EF:3E:E1:02:4A:77:E7:C0:73:2B:35
Certificate issuer:       /CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
Certificate serial:       68A894AA37BEE78B4952F315DBB1513E024F049B
Authority key identifier: B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3137313a3a2f34382d3438203d3e20323732373130.roa
Signing time:             Thu 08 Oct 2026 02:44:30 +0000
ROA not before:           Thu 08 Oct 2026 02:39:30 +0000
ROA not after:            Thu 07 Oct 2027 02:44:30 +0000
asID:                     272710
IP address blocks:        2804:8774:171::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:a8:94:aa:37:be:e7:8b:49:52:f3:15:db:b1:51:3e:02:4f:04:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5D37E22EB8E5668F093546E634B55B0A780D24F
        Validity
            Not Before: Oct  8 02:39:30 2026 GMT
            Not After : Oct  7 02:44:30 2027 GMT
        Subject: CN=D2379AC98E8B98D973EF3EE1024A77E7C0732B35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8d:cc:87:2d:7b:49:4e:2e:be:26:5f:78:13:
                    4a:e3:ae:61:8b:bc:69:c8:04:68:37:1b:0b:75:f4:
                    7e:2a:b9:38:6e:26:54:07:d1:fe:ac:14:57:63:18:
                    c5:7b:6f:70:6a:0b:0d:d5:fa:33:b0:db:30:aa:ca:
                    85:a8:74:1d:0f:1d:83:91:90:f4:96:8f:30:d4:1b:
                    b0:56:76:6e:24:98:55:b3:66:0e:d0:6b:c8:dc:2b:
                    99:62:f9:78:e1:bd:ca:18:e9:33:af:99:37:79:08:
                    1f:e1:06:a0:af:db:cd:81:5a:b2:c2:34:ef:26:e8:
                    cf:b7:06:b3:8d:6c:74:0a:c0:60:38:b1:85:e3:71:
                    ca:c9:0b:d5:b1:10:0c:5c:72:3b:07:61:b7:02:73:
                    98:b2:bd:21:0a:94:a4:a0:e9:ed:82:96:bc:d0:e1:
                    f8:b7:1d:4e:e3:3b:5d:57:e9:6a:e3:3b:84:99:5e:
                    42:d2:fb:46:4c:e8:00:ef:e5:b7:b7:43:63:9e:61:
                    1c:61:50:6e:94:91:d3:54:e2:02:39:73:c0:91:66:
                    05:0c:72:32:16:fb:a7:c4:e7:5c:4d:10:4a:89:9b:
                    f4:4a:bb:b5:80:b7:68:02:e6:ce:b5:b2:47:8e:9a:
                    e2:21:2a:2f:fc:80:6a:fe:10:f9:8c:b3:17:35:89:
                    83:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:37:9A:C9:8E:8B:98:D9:73:EF:3E:E1:02:4A:77:E7:C0:73:2B:35
            X509v3 Authority Key Identifier:
                keyid:B5:D3:7E:22:EB:8E:56:68:F0:93:54:6E:63:4B:55:B0:A7:80:D2:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/B5D37E22EB8E5668F093546E634B55B0A780D24F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B5D37E22EB8E5668F093546E634B55B0A780D24F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FDFSuSEMXJrdWBGVqEbh4ZS1dt9mAPFdnRBMVq2uA3dR/0/323830343a383737343a3137313a3a2f34382d3438203d3e20323732373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8774:171::/48

    Signature Algorithm: sha256WithRSAEncryption
         ae:f6:a7:2d:dc:7f:63:67:ae:fe:d0:00:21:fd:c8:c0:85:53:
         0f:8a:29:f5:74:ac:5b:3e:cd:84:2a:eb:53:c4:8a:8c:87:b1:
         ce:75:5d:1e:d6:4d:f2:6b:2c:b6:c7:c6:30:f5:f8:0e:41:c1:
         c3:b5:e5:8c:20:c6:89:e5:fb:b8:9d:1f:9b:8c:a0:5b:17:6e:
         2a:6c:8d:a7:05:4c:35:27:7a:34:99:04:de:db:29:1f:b7:76:
         cd:14:b7:b7:af:1b:6d:84:5a:21:b4:e9:7c:2a:a3:a1:07:89:
         72:1f:b3:9b:5c:70:ec:2e:61:23:3b:3a:d8:75:ff:f3:62:a8:
         7f:22:e0:f5:0b:62:73:78:3a:9d:e5:1d:98:39:43:9a:98:a7:
         5e:eb:fa:02:89:7c:cc:4e:d3:7e:82:8a:c8:cf:fe:9f:e7:89:
         d9:91:83:fc:c3:28:b4:64:c4:1c:87:d7:0e:1a:ca:f4:16:7f:
         8a:5c:7c:bc:2f:3a:55:64:b6:81:83:cc:5a:fa:49:06:5e:b6:
         39:10:c4:b6:61:47:b4:c4:48:72:6d:28:16:f7:fe:89:e4:ef:
         c4:d2:bf:27:a3:c2:2d:51:17:a6:20:c0:a6:f6:a3:68:0e:96:
         26:69:a8:9a:81:97:53:65:52:c5:99:c5:11:ee:fb:55:97:be:
         56:34:20:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----