Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3230302e3139362e3133362e302f32342d3234203d3e203631373736.roa
File:                     3230302e3139362e3133362e302f32342d3234203d3e203631373736.roa (raw, json)
Hash identifier:          yHR/TN6P38n0eRjUwhlywV8JmCcNy5ZJGLJ/qOSwfF0=
Subject key identifier:   3A:51:E7:01:94:61:8E:50:40:00:8A:41:54:FD:29:1E:99:58:EF:CC
Certificate issuer:       /CN=B8313253BF01E4DE6EDCCC6C0C414D035AF1E87E
Certificate serial:       76321E06D1E40A64DDB8EB7FC28E14A283DC7C66
Authority key identifier: B8:31:32:53:BF:01:E4:DE:6E:DC:CC:6C:0C:41:4D:03:5A:F1:E8:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8313253BF01E4DE6EDCCC6C0C414D035AF1E87E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3230302e3139362e3133362e302f32342d3234203d3e203631373736.roa
Signing time:             Sun 06 Jul 2025 14:58:49 +0000
ROA not before:           Sun 06 Jul 2025 14:53:49 +0000
ROA not after:            Sun 05 Jul 2026 14:58:49 +0000
asID:                     61776
IP address blocks:        200.196.136.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:32:1e:06:d1:e4:0a:64:dd:b8:eb:7f:c2:8e:14:a2:83:dc:7c:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8313253BF01E4DE6EDCCC6C0C414D035AF1E87E
        Validity
            Not Before: Jul  6 14:53:49 2025 GMT
            Not After : Jul  5 14:58:49 2026 GMT
        Subject: CN=3A51E70194618E5040008A4154FD291E9958EFCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a9:30:bc:e0:3d:c7:12:ee:e6:8f:54:bf:0c:
                    ca:50:87:ef:01:bc:ae:73:e7:74:65:19:a3:31:d5:
                    ed:40:06:8f:f0:90:97:5f:4e:43:88:0d:a3:b3:fe:
                    6f:0c:cd:91:f7:3f:c2:55:99:c7:6c:c2:6e:72:39:
                    e0:d7:ff:f3:42:07:74:70:15:d3:91:88:5b:28:75:
                    a7:58:4d:64:93:9f:08:34:0c:75:fc:95:46:05:ba:
                    af:46:d1:9a:e1:72:a8:44:d3:db:2c:a2:30:fb:18:
                    83:41:42:df:c8:8b:74:2c:ed:25:ac:06:74:a2:91:
                    45:63:ef:8d:52:34:26:2e:74:79:e3:82:cf:2f:56:
                    b9:93:e0:bd:98:72:4a:aa:05:f7:ad:05:ee:2d:c7:
                    81:5b:20:8b:cd:41:a7:e4:6a:e0:96:ce:dd:af:92:
                    51:72:ad:99:52:09:fc:33:55:35:e5:b4:0f:e4:95:
                    45:e6:14:0b:01:3f:5d:b9:7f:97:13:be:93:a7:ad:
                    26:a5:56:08:fe:78:01:c9:92:17:e6:4d:d3:88:2e:
                    07:3e:bb:59:74:6c:52:89:f7:83:1d:2a:2a:d7:e7:
                    10:ec:d9:0a:6c:d7:43:34:a3:6f:35:ea:85:8d:81:
                    c8:d3:01:20:97:5c:bb:3d:6c:4a:f4:46:4d:81:d0:
                    b2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:51:E7:01:94:61:8E:50:40:00:8A:41:54:FD:29:1E:99:58:EF:CC
            X509v3 Authority Key Identifier:
                keyid:B8:31:32:53:BF:01:E4:DE:6E:DC:CC:6C:0C:41:4D:03:5A:F1:E8:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/B8313253BF01E4DE6EDCCC6C0C414D035AF1E87E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8313253BF01E4DE6EDCCC6C0C414D035AF1E87E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3230302e3139362e3133362e302f32342d3234203d3e203631373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.196.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         70:e7:ad:18:4e:13:6a:fb:42:09:62:82:13:eb:d3:97:6c:80:
         00:d4:26:c8:f5:cd:a2:48:98:9f:30:40:fe:58:26:1e:f1:85:
         5d:0e:d8:2c:bc:6d:47:88:ae:68:4a:42:7c:dc:ff:19:a9:bb:
         5e:85:19:61:42:32:10:25:3b:1e:ef:49:6d:02:0b:10:68:01:
         f1:7c:62:87:8f:18:1d:14:8e:52:97:bf:fc:ab:17:24:1b:bf:
         5b:64:36:7c:d3:e8:f4:84:ef:a8:17:43:33:c1:71:76:35:19:
         eb:23:bb:43:e7:a1:5a:d2:ef:f9:1c:2d:2d:23:ca:d3:d2:ad:
         55:c9:87:f6:f0:68:88:0a:cc:00:7b:7e:40:66:9d:0e:f9:7c:
         1b:79:41:a3:9d:34:30:57:2f:79:33:72:a2:4a:07:27:fd:31:
         f0:1c:b6:ee:98:5d:70:1a:49:33:ae:fd:41:ab:9a:cf:52:4b:
         c7:cf:50:35:1b:7b:0f:76:0e:46:1f:80:ba:ff:90:00:ea:7d:
         f5:d6:36:05:54:14:cc:e7:bd:c0:b5:ee:6b:f5:1b:2e:c8:90:
         b4:1b:27:17:b8:f3:1d:c0:19:82:9c:df:15:c0:1c:fe:c7:73:
         90:02:31:81:b6:36:b5:87:ba:18:e4:0a:69:d2:24:c7:bb:95:
         33:bd:47:9f
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdjIeBtHkCmTduOt/wo4UooPcfGYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjgzMTMyNTNCRjAxRTRERTZFRENDQzZDMEM0MTREMDM1
QUYxRTg3RTAeFw0yNTA3MDYxNDUzNDlaFw0yNjA3MDUxNDU4NDlaMDMxMTAvBgNV
BAMTKDNBNTFFNzAxOTQ2MThFNTA0MDAwOEE0MTU0RkQyOTFFOTk1OEVGQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+qTC84D3HEu7mj1S/DMpQh+8B
vK5z53RlGaMx1e1ABo/wkJdfTkOIDaOz/m8MzZH3P8JVmcdswm5yOeDX//NCB3Rw
FdORiFsodadYTWSTnwg0DHX8lUYFuq9G0ZrhcqhE09ssojD7GINBQt/Ii3Qs7SWs
BnSikUVj741SNCYudHnjgs8vVrmT4L2YckqqBfetBe4tx4FbIIvNQafkauCWzt2v
klFyrZlSCfwzVTXltA/klUXmFAsBP125f5cTvpOnrSalVgj+eAHJkhfmTdOILgc+
u1l0bFKJ94MdKirX5xDs2Qps10M0o2816oWNgcjTASCXXLs9bEr0Rk2B0LJ1AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUOlHnAZRhjlBAAIpBVP0pHplY78wwHwYDVR0j
BBgwFoAUuDEyU78B5N5u3MxsDEFNA1rx6H4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOE1BeW1WOTg5c1g4a3FKU2ZLUGFXdkZKYVZHTGl2alliblQ5UnRXQXRS
cWYvMC9CODMxMzI1M0JGMDFFNERFNkVEQ0NDNkMwQzQxNEQwMzVBRjFFODdFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I4MzEzMjUzQkYwMUU0REU2
RURDQ0M2QzBDNDE0RDAzNUFGMUU4N0UuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhNQXltVjk4OXNYOGtxSlNmS1BhV3ZGSmFWR0xpdmpZYm5UOVJ0V0F0UnFmLzAv
MzIzMDMwMmUzMTM5MzYyZTMxMzMzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2
MzEzNzM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADIxIgwDQYJKoZIhvcNAQELBQADggEBAHDnrRhO
E2r7QglighPr05dsgADUJsj1zaJImJ8wQP5YJh7xhV0O2Cy8bUeIrmhKQnzc/xmp
u16FGWFCMhAlOx7vSW0CCxBoAfF8YoePGB0UjlKXv/yrFyQbv1tkNnzT6PSE76gX
QzPBcXY1Gesju0PnoVrS7/kcLS0jytPSrVXJh/bwaIgKzAB7fkBmnQ75fBt5QaOd
NDBXL3kzcqJKByf9MfActu6YXXAaSTOu/UGrms9SS8fPUDUbew92DkYfgLr/kADq
ffXWNgVUFMznvcC17mv1Gy7IkLQbJxe48x3AGYKc3xXAHP7Hc5ACMYG2NrWHuhjk
CmnSJMe7lTO9R58=
-----END CERTIFICATE-----
Generated at Fri Jul 25 12:53:23 2025 by rpki-client