Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3230302e3139362e3133392e302f32342d3234203d3e203631373736.roa
File:                     3230302e3139362e3133392e302f32342d3234203d3e203631373736.roa (raw, json)
Hash identifier:          J5hssaNE+UguVTu2cfYsInLd2V8BpBpMoJ/W51SlKp0=
Subject key identifier:   91:3C:9F:39:C9:EE:99:2B:58:A4:F9:26:0B:CE:8E:29:2A:20:7F:45
Certificate issuer:       /CN=994D499817907EB8F4D1290AD0C3115D0214B589
Certificate serial:       61CAD4A7A35D283DA3BDD5B65450348F8A0F0592
Authority key identifier: 99:4D:49:98:17:90:7E:B8:F4:D1:29:0A:D0:C3:11:5D:02:14:B5:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/994D499817907EB8F4D1290AD0C3115D0214B589.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3230302e3139362e3133392e302f32342d3234203d3e203631373736.roa
Signing time:             Sun 02 Mar 2025 22:11:32 +0000
ROA not before:           Sun 02 Mar 2025 22:06:32 +0000
ROA not after:            Sun 01 Mar 2026 22:11:32 +0000
asID:                     61776
IP address blocks:        200.196.139.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:ca:d4:a7:a3:5d:28:3d:a3:bd:d5:b6:54:50:34:8f:8a:0f:05:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=994D499817907EB8F4D1290AD0C3115D0214B589
        Validity
            Not Before: Mar  2 22:06:32 2025 GMT
            Not After : Mar  1 22:11:32 2026 GMT
        Subject: CN=913C9F39C9EE992B58A4F9260BCE8E292A207F45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5a:31:1d:0e:97:65:a9:82:2e:db:cc:74:fe:
                    32:94:f7:9b:89:e5:e0:a2:31:b4:18:8b:78:cd:df:
                    74:68:3b:d9:62:35:e8:d6:ab:65:39:e5:52:04:8d:
                    77:83:e1:89:2c:e1:de:86:62:b5:c4:d1:7a:ef:72:
                    ef:6c:44:95:0e:66:a9:57:26:a6:cc:34:4a:48:df:
                    16:82:90:d2:d2:33:e3:56:7c:2a:57:56:b1:b8:8e:
                    8d:36:f1:f0:95:98:e8:1c:90:03:24:c1:f2:a8:6e:
                    6c:c8:5a:d1:5c:85:04:65:6c:68:94:89:13:7b:80:
                    f8:2b:31:3c:78:f5:28:49:d1:6b:83:f6:4e:a6:33:
                    90:46:fe:fb:94:2a:0c:14:03:e5:44:b3:12:5d:ef:
                    4a:5a:87:ce:db:54:74:23:d7:f8:b1:f0:fb:c5:9d:
                    f4:f3:84:09:aa:04:60:f6:f4:1e:9f:c1:86:c8:e3:
                    3a:fb:e0:cf:2c:2a:fd:d2:64:46:90:92:8d:db:9c:
                    f9:42:a6:77:96:80:8f:7c:cb:12:da:1b:2e:1a:e2:
                    a0:27:e5:5e:ba:47:f8:71:97:de:ae:ab:09:aa:fb:
                    54:7e:a0:10:a8:90:ba:cd:7a:78:1b:06:48:e7:e1:
                    13:59:b0:d4:99:29:d9:99:48:24:71:81:2e:ab:04:
                    40:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:3C:9F:39:C9:EE:99:2B:58:A4:F9:26:0B:CE:8E:29:2A:20:7F:45
            X509v3 Authority Key Identifier:
                keyid:99:4D:49:98:17:90:7E:B8:F4:D1:29:0A:D0:C3:11:5D:02:14:B5:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/994D499817907EB8F4D1290AD0C3115D0214B589.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/994D499817907EB8F4D1290AD0C3115D0214B589.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3230302e3139362e3133392e302f32342d3234203d3e203631373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.196.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:25:dd:67:bc:fc:75:ef:14:73:a8:6d:31:b2:34:7f:62:81:
         c6:06:57:13:50:73:db:0e:40:15:3c:eb:11:a7:f5:40:3c:08:
         ae:14:81:45:3f:1d:cb:c1:07:84:db:7f:90:a5:3f:33:d1:d4:
         3c:56:f8:6f:94:4f:07:7d:8c:18:d7:61:1a:36:50:48:49:0c:
         94:69:d0:22:a9:6b:97:d8:35:8b:2c:1e:24:74:70:3e:6a:b8:
         df:fb:71:d2:52:96:52:b3:c1:53:26:40:f0:cb:8a:86:9d:a6:
         7a:d9:1e:b5:68:dc:8d:8e:a3:5e:44:9a:36:9b:f1:c0:ff:79:
         a7:e7:20:ee:b7:3e:01:ee:09:4c:6f:7d:e4:d5:78:52:f4:0b:
         38:8e:fa:d6:0f:d6:e0:c4:e4:5e:d9:ef:05:2f:b9:e9:1c:89:
         76:c0:8f:45:18:30:08:7f:68:f9:c6:7f:1c:ef:b4:88:48:44:
         f4:42:ae:92:ef:f0:e0:6e:7a:79:2e:cf:4c:1d:c8:e8:48:8a:
         bd:89:b1:31:6a:df:93:85:94:ea:e9:38:c0:0b:f2:fd:bc:21:
         fa:e6:fb:15:ee:1b:8e:01:25:3b:a9:33:2a:81:9a:c9:16:45:
         72:32:79:fb:f2:65:fa:d5:f4:95:c3:97:59:53:35:1d:f8:ff:
         79:01:f2:07
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYcrUp6NdKD2jvdW2VFA0j4oPBZIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTk0RDQ5OTgxNzkwN0VCOEY0RDEyOTBBRDBDMzExNUQw
MjE0QjU4OTAeFw0yNTAzMDIyMjA2MzJaFw0yNjAzMDEyMjExMzJaMDMxMTAvBgNV
BAMTKDkxM0M5RjM5QzlFRTk5MkI1OEE0RjkyNjBCQ0U4RTI5MkEyMDdGNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLWjEdDpdlqYIu28x0/jKU95uJ
5eCiMbQYi3jN33RoO9liNejWq2U55VIEjXeD4Yks4d6GYrXE0Xrvcu9sRJUOZqlX
JqbMNEpI3xaCkNLSM+NWfCpXVrG4jo028fCVmOgckAMkwfKobmzIWtFchQRlbGiU
iRN7gPgrMTx49ShJ0WuD9k6mM5BG/vuUKgwUA+VEsxJd70pah87bVHQj1/ix8PvF
nfTzhAmqBGD29B6fwYbI4zr74M8sKv3SZEaQko3bnPlCpneWgI98yxLaGy4a4qAn
5V66R/hxl96uqwmq+1R+oBCokLrNengbBkjn4RNZsNSZKdmZSCRxgS6rBEDvAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUkTyfOcnumStYpPkmC86OKSogf0UwHwYDVR0j
BBgwFoAUmU1JmBeQfrj00SkK0MMRXQIUtYkwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOE1BeW1WOTg5c1g4a3FKU2ZLUGFXdkZKYVZHTGl2alliblQ5UnRXQXRS
cWYvMC85OTRENDk5ODE3OTA3RUI4RjREMTI5MEFEMEMzMTE1RDAyMTRCNTg5LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzk5NEQ0OTk4MTc5MDdFQjhG
NEQxMjkwQUQwQzMxMTVEMDIxNEI1ODkuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhNQXltVjk4OXNYOGtxSlNmS1BhV3ZGSmFWR0xpdmpZYm5UOVJ0V0F0UnFmLzAv
MzIzMDMwMmUzMTM5MzYyZTMxMzMzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2
MzEzNzM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADIxIswDQYJKoZIhvcNAQELBQADggEBAFkl3We8
/HXvFHOobTGyNH9igcYGVxNQc9sOQBU86xGn9UA8CK4UgUU/HcvBB4Tbf5ClPzPR
1DxW+G+UTwd9jBjXYRo2UEhJDJRp0CKpa5fYNYssHiR0cD5quN/7cdJSllKzwVMm
QPDLioadpnrZHrVo3I2Oo15Emjab8cD/eafnIO63PgHuCUxvfeTVeFL0CziO+tYP
1uDE5F7Z7wUvuekciXbAj0UYMAh/aPnGfxzvtIhIRPRCrpLv8OBuenkuz0wdyOhI
ir2JsTFq35OFlOrpOMAL8v28Ifrm+xXuG44BJTupMyqBmskWRXIyefvyZfrV9JXD
l1lTNR34/3kB8gc=
-----END CERTIFICATE-----
Generated at Mon Apr 21 07:52:38 2025 by rpki-client