Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3134332e3230382e3133362e302f32322d3232203d3e203631373736.roa
File:                     3134332e3230382e3133362e302f32322d3232203d3e203631373736.roa (raw, json)
Hash identifier:          8pm4vY5UPp+w+PC1uwlWrk8KdbLGXpQTHlVjWbXHQ7k=
Subject key identifier:   EB:5F:68:D9:9B:27:87:D3:25:FD:14:50:CA:A3:70:5B:0E:FD:62:A5
Certificate issuer:       /CN=3E2C146C101877C56F4E2F4DDF6835E44001788A
Certificate serial:       3FAC396B57B45A529B22C241184089058B5D5D95
Authority key identifier: 3E:2C:14:6C:10:18:77:C5:6F:4E:2F:4D:DF:68:35:E4:40:01:78:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E2C146C101877C56F4E2F4DDF6835E44001788A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3134332e3230382e3133362e302f32322d3232203d3e203631373736.roa
Signing time:             Mon 23 Jun 2025 22:15:23 +0000
ROA not before:           Mon 23 Jun 2025 22:10:23 +0000
ROA not after:            Mon 22 Jun 2026 22:15:23 +0000
asID:                     61776
IP address blocks:        143.208.136.0/22 maxlen: 22
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:ac:39:6b:57:b4:5a:52:9b:22:c2:41:18:40:89:05:8b:5d:5d:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E2C146C101877C56F4E2F4DDF6835E44001788A
        Validity
            Not Before: Jun 23 22:10:23 2025 GMT
            Not After : Jun 22 22:15:23 2026 GMT
        Subject: CN=EB5F68D99B2787D325FD1450CAA3705B0EFD62A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:2e:b8:ca:5a:b9:25:52:29:73:0f:c8:80:d7:
                    1f:45:04:1f:75:76:89:77:37:76:4d:ed:46:57:8e:
                    06:92:e4:53:32:c9:48:01:a1:e3:1f:4e:85:f9:5c:
                    44:70:da:48:2d:0b:2e:99:c6:1d:96:4b:40:af:51:
                    c1:e9:7a:d6:92:84:c4:aa:08:87:f3:ac:12:bb:03:
                    fb:f9:f3:ce:2b:97:d0:09:10:97:9a:2a:5c:ab:65:
                    44:47:82:f7:85:a2:56:58:14:5d:ee:58:62:46:6f:
                    cb:cb:a9:e2:33:e2:24:5a:44:3b:6c:e3:93:d8:ea:
                    09:a8:0d:7b:d1:13:34:77:68:68:69:a9:9b:b6:a5:
                    20:7f:8a:54:b2:6d:29:c1:13:ee:0e:c6:cf:7c:9c:
                    77:72:4e:ff:7c:8f:61:5c:bc:94:9f:52:30:52:e4:
                    cb:fe:ca:71:45:1d:2f:b4:c9:08:5a:62:e8:a8:f9:
                    d3:73:ba:af:f1:53:3a:7b:05:84:22:0d:8a:c4:a9:
                    57:53:c7:5f:fd:7d:6f:07:27:2a:ad:2a:2d:74:3a:
                    13:4a:e3:cb:48:30:d3:7a:99:f5:b8:47:67:45:95:
                    3a:d3:6e:ca:01:84:09:df:b2:6b:58:24:52:fd:d2:
                    b8:7f:50:23:eb:3d:44:8e:79:03:4a:4d:5d:a4:a8:
                    99:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:5F:68:D9:9B:27:87:D3:25:FD:14:50:CA:A3:70:5B:0E:FD:62:A5
            X509v3 Authority Key Identifier:
                keyid:3E:2C:14:6C:10:18:77:C5:6F:4E:2F:4D:DF:68:35:E4:40:01:78:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3E2C146C101877C56F4E2F4DDF6835E44001788A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E2C146C101877C56F4E2F4DDF6835E44001788A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3134332e3230382e3133362e302f32322d3232203d3e203631373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.136.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:76:ea:b9:4f:64:dc:70:24:6c:27:23:e1:ba:a8:a1:dc:85:
         8a:6d:76:e2:e6:f2:71:76:0f:3f:24:52:e3:2a:1c:0b:8b:e8:
         42:b7:a4:70:3d:f3:f7:e1:f8:cc:b1:22:bd:9e:18:32:7e:e6:
         d2:75:fb:1c:c1:13:a4:84:99:9d:16:81:57:0c:56:c1:f7:94:
         4e:6b:51:50:64:e2:ad:d0:5a:3b:07:2a:61:32:92:91:0f:ac:
         ea:a5:cd:51:1a:1a:e4:b1:c8:15:2e:e2:b7:61:4f:01:7d:b6:
         93:4b:7d:3f:57:3f:aa:e6:7d:08:eb:ee:04:92:7e:83:02:91:
         27:09:f5:85:5d:d5:38:05:b5:01:43:01:ae:29:1b:c0:19:97:
         81:c4:e2:c3:aa:7f:ab:6e:07:87:e3:6b:c4:1e:82:75:40:a1:
         53:f4:53:be:ac:8f:de:8c:d8:6b:85:6f:15:40:46:38:cf:f8:
         e9:7d:f3:02:17:2b:52:cd:75:a3:40:f8:68:cd:dc:13:54:df:
         4f:c5:30:ae:cb:f4:72:e0:e8:8d:37:cc:f9:20:6f:1b:c9:0c:
         e8:5e:73:da:3c:28:15:42:04:7e:cb:55:e9:6d:3a:37:bd:c1:
         bb:99:33:3e:01:69:2e:44:4a:4c:2d:ab:04:9a:ba:a9:a1:19:
         e7:f1:ef:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 3 01:07:53 2025 by rpki-client