Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3230302e3139362e3133372e302f32342d3234203d3e203631373736.roa
File:                     3230302e3139362e3133372e302f32342d3234203d3e203631373736.roa (raw, json)
Hash identifier:          m5qLh/Stjl6OUA/2Yy6eqQj50/uyPJ38IMreltU9CAs=
Subject key identifier:   DD:D4:D7:2A:E3:4D:B1:78:61:FC:4E:1C:AE:31:B6:89:DC:7B:14:CE
Certificate issuer:       /CN=B8313253BF01E4DE6EDCCC6C0C414D035AF1E87E
Certificate serial:       4377936FCF87CA459D21575B265472648FB4F4BE
Authority key identifier: B8:31:32:53:BF:01:E4:DE:6E:DC:CC:6C:0C:41:4D:03:5A:F1:E8:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8313253BF01E4DE6EDCCC6C0C414D035AF1E87E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3230302e3139362e3133372e302f32342d3234203d3e203631373736.roa
Signing time:             Sun 06 Jul 2025 14:58:44 +0000
ROA not before:           Sun 06 Jul 2025 14:53:44 +0000
ROA not after:            Sun 05 Jul 2026 14:58:44 +0000
asID:                     61776
IP address blocks:        200.196.137.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:77:93:6f:cf:87:ca:45:9d:21:57:5b:26:54:72:64:8f:b4:f4:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8313253BF01E4DE6EDCCC6C0C414D035AF1E87E
        Validity
            Not Before: Jul  6 14:53:44 2025 GMT
            Not After : Jul  5 14:58:44 2026 GMT
        Subject: CN=DDD4D72AE34DB17861FC4E1CAE31B689DC7B14CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:05:2d:75:11:59:cb:3b:58:d0:e7:50:6b:e2:
                    ff:49:b1:57:3f:b5:98:bd:72:fb:ba:a1:72:96:d1:
                    85:bd:9d:a7:d5:f8:9e:77:9d:24:df:ee:c5:93:49:
                    43:e1:12:4a:45:25:69:0c:95:78:b6:b3:50:e1:6d:
                    75:1d:e0:fb:8c:5f:03:92:a2:fe:f1:c6:a9:70:d6:
                    8d:13:4b:b6:73:6e:41:74:cf:65:5b:a6:18:96:bc:
                    4d:46:d8:ef:7a:0d:b7:89:d6:38:3b:bb:e2:1e:a9:
                    be:b7:2e:53:db:a4:5e:73:2b:eb:b4:14:3c:90:71:
                    0c:e1:fe:93:bc:ba:a4:3e:f0:b6:c6:58:ca:23:22:
                    10:41:eb:53:70:4a:9b:c1:95:84:68:b5:98:dc:28:
                    27:6a:83:2f:01:ce:6c:d3:07:b4:d7:a1:8b:1e:d8:
                    89:97:c1:a1:1a:a0:e4:36:98:91:ed:2c:ac:09:62:
                    30:d9:b4:61:a6:eb:19:c8:9e:d5:cc:b9:7d:e9:a1:
                    42:dc:aa:4e:ee:cc:df:90:d3:0b:99:07:e2:54:9d:
                    ea:d4:77:bc:b5:eb:e3:f7:e7:4b:91:f3:9c:1c:04:
                    c4:e4:34:70:b8:56:2e:6d:96:3c:ad:68:23:9e:e9:
                    aa:22:7a:c4:f0:3f:f1:57:25:50:1b:e8:eb:39:0d:
                    8a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:D4:D7:2A:E3:4D:B1:78:61:FC:4E:1C:AE:31:B6:89:DC:7B:14:CE
            X509v3 Authority Key Identifier:
                keyid:B8:31:32:53:BF:01:E4:DE:6E:DC:CC:6C:0C:41:4D:03:5A:F1:E8:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/B8313253BF01E4DE6EDCCC6C0C414D035AF1E87E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8313253BF01E4DE6EDCCC6C0C414D035AF1E87E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3230302e3139362e3133372e302f32342d3234203d3e203631373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.196.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:e5:2b:d5:0b:e2:3a:95:f2:95:c6:e9:b3:2a:b5:f1:c6:d2:
         a6:95:19:a3:a0:dd:fb:af:5a:96:68:c7:10:5e:e1:98:85:49:
         68:57:1a:d9:d1:3a:23:10:75:a4:e3:fb:6d:49:44:23:b4:1c:
         0a:70:cd:05:df:60:c5:69:ee:f6:fb:93:40:be:da:8f:56:ba:
         b0:f3:19:9a:73:ae:ba:f4:87:fd:e0:be:33:ba:34:42:27:f7:
         9a:ed:6d:62:df:fb:47:31:44:f9:fd:0c:ac:2e:21:f5:27:dc:
         e0:75:31:c4:44:5c:67:86:4b:70:bc:d1:f9:c7:62:fb:62:00:
         db:4c:86:f2:b9:7a:ff:ea:2a:54:37:04:ce:93:5a:da:3e:89:
         6e:2f:bd:b3:f1:d0:57:33:b1:2f:b4:7c:ae:f3:e9:5d:a6:af:
         eb:a8:1d:ea:e8:aa:fb:0b:1b:9c:c5:d7:db:62:32:de:6d:55:
         e3:90:b9:51:1e:e7:00:5d:47:b7:fe:27:8b:cb:9f:e1:4f:73:
         d0:15:35:22:76:67:89:2b:34:e6:02:97:ac:e7:50:2e:4c:95:
         c0:50:5f:dc:06:c0:4d:4e:93:cb:fd:51:8e:c5:99:57:df:11:
         79:65:d9:aa:91:d8:91:b6:c4:4e:52:37:d6:74:0f:90:af:ee:
         d4:0f:fe:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 15:20:15 2025 by rpki-client