Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3134332e3230382e3133362e302f32342d3234203d3e203631373736.roa
File:                     3134332e3230382e3133362e302f32342d3234203d3e203631373736.roa (raw, json)
Hash identifier:          DlOYkyFuqsXq4L3W7CgQR9XrbzYg8tsqT7PMWRtJGFk=
Subject key identifier:   CF:F1:43:71:AC:21:C0:6B:8E:B4:89:90:69:30:4C:04:6E:1D:81:1B
Certificate issuer:       /CN=B8313253BF01E4DE6EDCCC6C0C414D035AF1E87E
Certificate serial:       47700915B08F5306140C327BCECDC71009DBE0CD
Authority key identifier: B8:31:32:53:BF:01:E4:DE:6E:DC:CC:6C:0C:41:4D:03:5A:F1:E8:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8313253BF01E4DE6EDCCC6C0C414D035AF1E87E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3134332e3230382e3133362e302f32342d3234203d3e203631373736.roa
Signing time:             Sun 06 Jul 2025 14:58:49 +0000
ROA not before:           Sun 06 Jul 2025 14:53:49 +0000
ROA not after:            Sun 05 Jul 2026 14:58:49 +0000
asID:                     61776
IP address blocks:        143.208.136.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:70:09:15:b0:8f:53:06:14:0c:32:7b:ce:cd:c7:10:09:db:e0:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8313253BF01E4DE6EDCCC6C0C414D035AF1E87E
        Validity
            Not Before: Jul  6 14:53:49 2025 GMT
            Not After : Jul  5 14:58:49 2026 GMT
        Subject: CN=CFF14371AC21C06B8EB4899069304C046E1D811B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:3c:e5:d1:0f:84:21:07:4d:e3:4c:e6:fd:d7:
                    ac:24:d5:18:50:4c:c7:e1:ca:6b:f5:0f:f3:ad:75:
                    45:1c:9e:11:40:6b:69:be:9e:1a:5b:6c:3e:81:b2:
                    f2:5b:21:68:3f:27:a6:9a:33:32:12:e2:b8:d8:4a:
                    b6:26:44:b0:1c:f5:06:5c:6c:87:62:77:54:59:3f:
                    31:7a:69:82:ab:f1:b0:02:24:2c:c7:58:27:2c:0c:
                    73:4b:65:b0:ac:55:0d:e4:c9:b8:53:9c:ba:0c:aa:
                    06:92:ec:b4:f2:b1:7a:d5:e4:3f:ac:b1:60:7b:4c:
                    c0:a3:d8:7b:3d:c5:07:f4:2c:43:4c:61:a6:97:8d:
                    7f:5b:21:01:70:ea:96:dd:9f:75:ea:6a:c5:a5:cb:
                    43:33:a2:2e:ae:f9:4c:8e:bf:4a:dc:7a:cb:9b:cd:
                    91:60:f5:62:3d:ca:2b:82:48:44:16:90:f8:05:a7:
                    8d:73:7e:ff:78:07:31:8f:80:2c:69:0b:62:76:35:
                    df:8c:97:30:86:c0:10:d3:3d:e3:8f:30:4b:25:15:
                    56:65:ed:8e:a6:01:32:a8:4d:f3:ec:41:0f:38:08:
                    8f:42:4a:af:dd:5c:db:e6:04:34:64:e5:a3:48:92:
                    e9:a3:f4:e5:0c:33:6b:a7:65:df:26:fa:d3:05:3e:
                    b8:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:F1:43:71:AC:21:C0:6B:8E:B4:89:90:69:30:4C:04:6E:1D:81:1B
            X509v3 Authority Key Identifier:
                keyid:B8:31:32:53:BF:01:E4:DE:6E:DC:CC:6C:0C:41:4D:03:5A:F1:E8:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/B8313253BF01E4DE6EDCCC6C0C414D035AF1E87E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8313253BF01E4DE6EDCCC6C0C414D035AF1E87E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3134332e3230382e3133362e302f32342d3234203d3e203631373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:57:6f:17:76:36:3b:40:60:7d:67:22:2b:8b:fa:e3:ba:30:
         83:7f:35:c8:b1:b5:24:fc:54:c6:fa:aa:28:28:1d:48:e0:d3:
         ce:f6:6b:24:b4:6b:c0:40:e1:f1:84:0b:ac:8a:e7:09:b8:77:
         df:d5:d4:95:eb:e6:0f:04:23:0a:0f:d4:44:d9:99:f4:37:e7:
         5b:6b:56:5b:40:25:fb:4c:6b:f4:a7:44:7b:78:d5:16:4e:02:
         a6:1d:a0:96:ef:9b:eb:65:21:97:df:e9:7c:de:27:4d:1e:4d:
         71:6e:5c:35:a3:e7:34:69:8a:81:8b:3e:c4:f5:51:c9:8a:b9:
         7a:f7:e5:8d:21:2f:cc:36:f6:01:fe:fa:7b:0b:c2:10:c8:09:
         5c:cb:c4:60:fd:64:f4:f3:f4:93:d9:90:b6:3c:79:62:f2:d2:
         80:ab:3e:10:07:1c:5f:19:d6:4c:81:ad:b5:4c:3e:57:58:5c:
         df:18:fa:e4:a1:f7:fd:9e:48:de:ea:3e:d0:be:6b:f6:0f:e1:
         c5:0a:13:97:f0:24:29:00:e8:8e:83:62:7e:35:83:46:d3:b0:
         b8:64:8f:10:04:f3:77:ca:13:82:fe:3d:6c:c5:2c:51:da:58:
         58:7c:eb:40:f6:94:fb:4e:e1:0e:b4:85:fb:2f:2e:91:03:79:
         4a:7d:11:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 25 12:54:17 2025 by rpki-client