Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3230302e3139362e3133372e302f32342d3234203d3e203631373736.roa
File:                     3230302e3139362e3133372e302f32342d3234203d3e203631373736.roa (raw, json)
Hash identifier:          Tt/fWNuShZgJypWcyNKKcRX2y2XFCQdqbqvX7yKz5Jg=
Subject key identifier:   5F:FE:F3:A8:BB:ED:B0:A8:CC:EB:88:EA:56:AD:56:EF:E4:A9:B6:F0
Certificate issuer:       /CN=994D499817907EB8F4D1290AD0C3115D0214B589
Certificate serial:       16E256B826837F1F337D207E8623DCE73D4EB3BA
Authority key identifier: 99:4D:49:98:17:90:7E:B8:F4:D1:29:0A:D0:C3:11:5D:02:14:B5:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/994D499817907EB8F4D1290AD0C3115D0214B589.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3230302e3139362e3133372e302f32342d3234203d3e203631373736.roa
Signing time:             Sun 02 Mar 2025 22:11:32 +0000
ROA not before:           Sun 02 Mar 2025 22:06:32 +0000
ROA not after:            Sun 01 Mar 2026 22:11:32 +0000
asID:                     61776
IP address blocks:        200.196.137.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:e2:56:b8:26:83:7f:1f:33:7d:20:7e:86:23:dc:e7:3d:4e:b3:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=994D499817907EB8F4D1290AD0C3115D0214B589
        Validity
            Not Before: Mar  2 22:06:32 2025 GMT
            Not After : Mar  1 22:11:32 2026 GMT
        Subject: CN=5FFEF3A8BBEDB0A8CCEB88EA56AD56EFE4A9B6F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d6:93:5c:af:76:15:75:e9:fb:f6:41:ff:ee:
                    3f:0d:1c:55:07:f8:c5:b6:9b:6e:1f:44:1f:f5:6c:
                    74:60:b8:8a:20:43:9c:81:37:24:8b:20:f4:20:9e:
                    4f:32:a8:ab:be:af:fd:88:7c:9a:52:77:d2:e9:d2:
                    9a:3b:0e:5a:49:4a:51:a2:8a:f6:f9:ee:db:69:71:
                    a8:d3:9a:d3:d3:d2:a0:78:db:b0:44:9e:5c:03:c8:
                    89:82:00:45:5b:e0:c4:f5:a2:ad:94:62:2f:9f:b7:
                    c1:86:68:33:f4:c6:e2:ca:9c:13:09:c0:0e:ed:4d:
                    4c:38:f3:0c:e4:fa:65:b8:01:77:c5:12:cd:74:31:
                    07:26:8b:ec:f4:8f:3a:ac:f8:ea:d9:f1:d8:56:e1:
                    c7:1e:8f:87:e7:4a:29:a8:82:38:f7:1e:fd:06:ca:
                    e5:40:27:9a:c2:b7:35:e2:9b:0a:19:66:5e:54:35:
                    ae:a5:ef:4f:c5:98:1e:bf:6e:16:52:ed:13:74:9a:
                    e1:8e:c5:2d:ba:9c:3d:73:c2:72:60:0a:1f:1e:6b:
                    96:d9:b1:15:55:3d:b3:a2:21:31:bf:2b:b7:30:07:
                    29:5e:7a:57:60:fa:d0:b1:6a:90:3e:ef:e4:b0:01:
                    96:20:75:61:bd:d4:d5:00:df:57:00:eb:26:00:2c:
                    4b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:FE:F3:A8:BB:ED:B0:A8:CC:EB:88:EA:56:AD:56:EF:E4:A9:B6:F0
            X509v3 Authority Key Identifier:
                keyid:99:4D:49:98:17:90:7E:B8:F4:D1:29:0A:D0:C3:11:5D:02:14:B5:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/994D499817907EB8F4D1290AD0C3115D0214B589.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/994D499817907EB8F4D1290AD0C3115D0214B589.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3230302e3139362e3133372e302f32342d3234203d3e203631373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.196.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:80:45:c8:8d:fb:08:37:95:30:0b:a3:0c:a7:f5:b0:88:98:
         fb:76:80:5f:ab:5d:c0:2a:f9:fb:96:b8:16:42:75:83:75:6e:
         68:36:15:37:6c:8f:b6:3c:79:d7:2c:67:2c:c6:a4:fb:47:57:
         47:42:06:9f:01:be:51:d1:dc:7a:94:a8:43:a6:87:e7:e7:67:
         a1:77:68:bc:e8:52:63:76:fc:1a:ae:93:7f:fe:8d:b4:61:63:
         6b:60:8b:dc:f8:ff:80:f9:d8:5b:c5:3d:4d:23:9c:59:83:60:
         ad:52:a6:35:87:10:d8:2a:72:42:e8:61:8b:2e:4a:37:93:89:
         31:f6:d9:98:f2:c4:2f:03:f0:c3:05:34:e6:85:bf:f0:65:8b:
         5b:f3:ab:12:86:5f:58:da:b9:57:67:45:ce:82:9b:0a:5e:bc:
         c0:35:89:7e:61:bd:2b:d3:ee:7c:ce:4a:5c:10:f4:79:c5:5a:
         35:9e:16:46:0e:ae:c1:a9:12:85:37:4e:df:0d:6b:4c:62:a4:
         c3:99:af:ea:b2:59:12:c7:d2:ba:a3:99:03:4c:fd:2b:01:83:
         8a:74:4a:95:88:d3:ce:4a:8d:4f:f2:89:5d:a9:ed:3f:42:ec:
         97:1b:0b:23:ef:14:9c:42:d3:9a:54:3c:0b:71:5a:b2:ca:9c:
         cb:54:25:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 22:44:03 2025 by rpki-client