Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3230302e3139362e3133392e302f32342d3234203d3e203631373736.roa
File:                     3230302e3139362e3133392e302f32342d3234203d3e203631373736.roa (raw, json)
Hash identifier:          0BI7OIsFgsHjVKGOAfoteYJjl3ERtZ6hUJ5EacQLKQw=
Subject key identifier:   63:9A:3B:0B:74:DF:F7:E8:2C:E7:46:B5:C3:B5:BA:36:AA:FB:18:38
Certificate issuer:       /CN=B8313253BF01E4DE6EDCCC6C0C414D035AF1E87E
Certificate serial:       6E7CA32B52FF299116D522EF4F5659CC2009CBD0
Authority key identifier: B8:31:32:53:BF:01:E4:DE:6E:DC:CC:6C:0C:41:4D:03:5A:F1:E8:7E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8313253BF01E4DE6EDCCC6C0C414D035AF1E87E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3230302e3139362e3133392e302f32342d3234203d3e203631373736.roa
Signing time:             Sun 06 Jul 2025 14:58:47 +0000
ROA not before:           Sun 06 Jul 2025 14:53:47 +0000
ROA not after:            Sun 05 Jul 2026 14:58:47 +0000
asID:                     61776
IP address blocks:        200.196.139.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:7c:a3:2b:52:ff:29:91:16:d5:22:ef:4f:56:59:cc:20:09:cb:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8313253BF01E4DE6EDCCC6C0C414D035AF1E87E
        Validity
            Not Before: Jul  6 14:53:47 2025 GMT
            Not After : Jul  5 14:58:47 2026 GMT
        Subject: CN=639A3B0B74DFF7E82CE746B5C3B5BA36AAFB1838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3d:ac:42:a0:c5:7a:d3:dd:3b:94:ce:69:86:
                    16:43:f1:da:03:3b:41:6b:24:f3:0b:92:be:9b:25:
                    84:19:b6:36:48:5e:19:8e:73:6d:47:de:46:3a:98:
                    2b:38:3c:df:5a:cd:0a:d9:29:23:8c:11:72:1e:8c:
                    59:9f:6a:7c:ea:0c:66:f1:ab:12:6a:50:a7:dd:a5:
                    e6:81:6a:34:cc:6e:e3:44:76:a0:06:30:4f:a2:09:
                    f9:f1:e1:cf:a2:1a:5b:80:8b:02:db:2b:f8:02:56:
                    cc:11:16:38:14:a2:22:19:9f:6e:4a:48:f3:59:27:
                    58:9a:ff:f9:ee:0b:53:d4:a4:e7:14:94:08:18:67:
                    4f:9c:92:a5:59:94:d2:c6:cf:ed:e4:a0:7b:6d:65:
                    62:9f:52:25:62:df:88:94:d8:d1:fa:52:db:62:b7:
                    13:65:5e:da:28:8b:4c:ca:e1:fb:69:18:e2:18:98:
                    c1:fd:5e:f8:6c:e2:6d:76:e2:ee:17:30:c8:5a:8b:
                    6d:df:5c:e6:0d:c6:a3:19:c0:55:f9:f1:f9:0f:ca:
                    65:00:7e:96:37:ee:2e:3e:df:a8:a0:1f:33:9f:27:
                    15:c5:1e:c3:6e:6c:ed:e2:4e:51:0a:df:65:1d:50:
                    c4:b6:a4:7b:e7:22:f9:9e:e7:4a:d3:3d:f8:3b:07:
                    89:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:9A:3B:0B:74:DF:F7:E8:2C:E7:46:B5:C3:B5:BA:36:AA:FB:18:38
            X509v3 Authority Key Identifier:
                keyid:B8:31:32:53:BF:01:E4:DE:6E:DC:CC:6C:0C:41:4D:03:5A:F1:E8:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/B8313253BF01E4DE6EDCCC6C0C414D035AF1E87E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B8313253BF01E4DE6EDCCC6C0C414D035AF1E87E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3230302e3139362e3133392e302f32342d3234203d3e203631373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.196.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:ff:4f:98:3c:03:3b:60:e9:a3:ba:bc:a0:77:42:a5:db:a1:
         ea:15:3c:7f:5e:76:4c:a6:5d:83:45:fc:aa:88:b6:02:4a:7d:
         45:30:24:23:f2:26:9b:80:ea:54:3c:af:43:c9:92:95:09:d3:
         22:47:49:67:9f:60:f1:d1:b8:6a:f3:10:5b:36:1f:99:9c:8e:
         2e:f5:3d:34:48:64:a1:aa:a2:8f:ba:82:d1:7f:0e:df:39:5b:
         a1:d1:f6:09:6a:c9:4d:5a:d0:64:06:ff:95:37:8a:74:61:73:
         f8:44:d9:f4:fc:c2:e1:0d:fb:a9:30:8e:fb:0b:b2:0a:70:89:
         be:1d:82:a6:d7:bd:d8:e5:56:46:a0:5f:35:52:80:0e:16:d9:
         86:6f:fe:a7:98:cc:d5:eb:db:c8:18:c8:99:49:80:37:1a:61:
         67:ad:b1:8f:a1:76:70:d5:ba:bf:c1:1b:b1:22:80:ea:72:08:
         3a:7a:4d:d6:41:9a:98:05:95:41:97:97:fa:f5:f5:8e:32:35:
         2b:36:fe:73:68:d1:64:d9:4f:9f:81:b8:19:fc:eb:5b:a6:a3:
         bb:47:5b:56:b6:a7:37:18:25:13:9a:5c:25:de:08:a6:ef:d0:
         92:c4:34:4d:fd:1b:2f:ac:58:76:e2:64:88:0b:c2:81:ff:e0:
         3a:0b:4b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 19 13:14:33 2025 by rpki-client