Route Origin Authorization

$ rpki-client -vvvf rpki-repo.registro.br/repo/Hg8b4LUqwdBLasLP72NqvkFmuHFAfUQ2ekVWEMR2Dzgf/0/323830343a383531633a3a2f33322d3334203d3e20323732353538.roa
File:                     323830343a383531633a3a2f33322d3334203d3e20323732353538.roa (raw, json)
Hash identifier:          sG7Ogm9AYJ1zna0kTEtr7KTZjVM+pG6Wk/fLMdrbQOQ=
Subject key identifier:   73:30:8A:B6:6C:AE:EE:E7:CC:16:24:06:E7:B7:4B:EA:F1:69:3E:10
Certificate issuer:       /CN=07241680FEE2F7BCF74488ECA4DCB067EEFD02FE
Certificate serial:       58EF4BE108D9F3745E7312AC41F8E36601490DC3
Authority key identifier: 07:24:16:80:FE:E2:F7:BC:F7:44:88:EC:A4:DC:B0:67:EE:FD:02:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07241680FEE2F7BCF74488ECA4DCB067EEFD02FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Hg8b4LUqwdBLasLP72NqvkFmuHFAfUQ2ekVWEMR2Dzgf/0/323830343a383531633a3a2f33322d3334203d3e20323732353538.roa
Signing time:             Wed 16 Sep 2026 12:21:48 +0000
ROA not before:           Wed 16 Sep 2026 12:16:48 +0000
ROA not after:            Wed 15 Sep 2027 12:21:48 +0000
asID:                     272558
IP address blocks:        2804:851c::/32 maxlen: 34
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:ef:4b:e1:08:d9:f3:74:5e:73:12:ac:41:f8:e3:66:01:49:0d:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07241680FEE2F7BCF74488ECA4DCB067EEFD02FE
        Validity
            Not Before: Sep 16 12:16:48 2026 GMT
            Not After : Sep 15 12:21:48 2027 GMT
        Subject: CN=73308AB66CAEEEE7CC162406E7B74BEAF1693E10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f8:5e:b7:57:ec:e3:1d:cd:c3:fc:06:c1:2b:
                    9e:eb:9f:bb:69:34:50:73:f6:48:ce:fd:5e:c3:cd:
                    4f:0f:d8:98:cc:28:16:88:4b:39:7f:b4:a9:f6:7f:
                    40:bc:cd:4c:20:3d:98:d3:ea:3f:24:90:2b:ee:91:
                    03:92:55:69:95:54:5e:d3:ca:4b:85:08:1e:d8:e0:
                    ba:8a:97:e4:0d:a8:47:a7:9b:61:b5:0b:04:64:67:
                    b4:e7:23:d6:0c:8d:94:15:19:34:01:5b:1d:2f:6e:
                    4d:37:fa:37:74:6a:56:82:8c:86:4a:c2:0c:a1:7f:
                    10:ab:19:66:f3:e6:40:d4:e2:0e:a0:d2:ac:b7:ac:
                    63:14:37:6a:eb:37:55:45:a1:b5:13:4e:24:b2:58:
                    78:ab:45:2c:0c:ea:f5:97:55:c7:70:39:97:99:e7:
                    3f:da:8c:65:12:66:4b:7b:e5:25:1e:37:b9:80:6d:
                    6d:f8:15:01:89:c5:c9:e0:3d:8b:bb:84:dd:69:3a:
                    43:6c:5b:e9:11:af:78:55:94:1c:2a:52:9b:1d:db:
                    82:1a:10:bf:25:7c:b8:29:79:dc:3e:38:24:52:a3:
                    b5:c9:51:c4:a5:08:8f:19:10:8d:ce:8d:1a:df:20:
                    d3:fa:b6:bd:f0:88:63:83:77:06:a2:d3:ac:45:05:
                    83:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:30:8A:B6:6C:AE:EE:E7:CC:16:24:06:E7:B7:4B:EA:F1:69:3E:10
            X509v3 Authority Key Identifier:
                keyid:07:24:16:80:FE:E2:F7:BC:F7:44:88:EC:A4:DC:B0:67:EE:FD:02:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Hg8b4LUqwdBLasLP72NqvkFmuHFAfUQ2ekVWEMR2Dzgf/0/07241680FEE2F7BCF74488ECA4DCB067EEFD02FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/07241680FEE2F7BCF74488ECA4DCB067EEFD02FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Hg8b4LUqwdBLasLP72NqvkFmuHFAfUQ2ekVWEMR2Dzgf/0/323830343a383531633a3a2f33322d3334203d3e20323732353538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:851c::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:11:d4:1d:b2:a3:99:3d:9c:60:90:91:e3:e5:0e:5b:57:68:
         76:aa:98:52:0c:25:7e:f8:f9:d5:7e:3d:c5:55:a5:2d:45:90:
         24:e2:80:7c:82:e9:ff:49:fc:8a:8e:7a:3a:3f:d0:a7:53:e3:
         33:10:ca:54:b7:b5:53:0d:38:4e:3f:67:28:35:13:e3:1e:51:
         7d:47:67:39:4c:11:05:6c:b0:c4:9f:10:9e:d0:af:3f:0f:92:
         b3:f6:ab:67:30:64:34:62:be:96:af:04:4e:79:32:3c:a0:9b:
         a9:63:b7:0d:69:b2:ee:53:44:3b:5e:84:90:32:c0:6a:60:f4:
         eb:39:4b:50:cf:e4:42:b0:ca:00:21:ef:51:d5:02:c1:d5:f9:
         06:92:29:b7:dc:45:38:ab:6f:87:23:66:95:ef:b8:d6:46:80:
         41:36:89:d0:5d:7c:e7:e0:43:ef:ca:5f:f2:d8:74:7b:65:53:
         57:e2:3b:8b:9b:4c:16:1e:33:68:67:d0:4b:ce:2f:80:85:cd:
         75:6d:1c:d7:9f:bb:ae:d9:f2:fb:a8:49:2a:83:60:18:c2:d0:
         6c:11:a4:5c:c8:ba:b2:90:7e:3b:9c:4c:09:89:dc:57:f5:68:
         68:ab:9e:cc:25:83:0d:fb:1c:5f:3e:8d:1e:d2:bf:34:1a:ac:
         0b:ac:f0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----