Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3134332e3230382e3133362e302f32342d3234203d3e203631373736.roa
File:                     3134332e3230382e3133362e302f32342d3234203d3e203631373736.roa (raw, json)
Hash identifier:          Hw/5LKU4Q9CUkJaj3mPRCscPpzbd8lfn1FCzmSTrROE=
Subject key identifier:   C6:18:9B:36:25:BB:27:C5:1F:88:E6:C8:FE:A3:E4:24:B5:61:27:06
Certificate issuer:       /CN=3E2C146C101877C56F4E2F4DDF6835E44001788A
Certificate serial:       1785ED5BAD5525D79D41779BB16DFC295CE2C181
Authority key identifier: 3E:2C:14:6C:10:18:77:C5:6F:4E:2F:4D:DF:68:35:E4:40:01:78:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E2C146C101877C56F4E2F4DDF6835E44001788A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3134332e3230382e3133362e302f32342d3234203d3e203631373736.roa
Signing time:             Mon 23 Jun 2025 22:15:22 +0000
ROA not before:           Mon 23 Jun 2025 22:10:22 +0000
ROA not after:            Mon 22 Jun 2026 22:15:22 +0000
asID:                     61776
IP address blocks:        143.208.136.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:85:ed:5b:ad:55:25:d7:9d:41:77:9b:b1:6d:fc:29:5c:e2:c1:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E2C146C101877C56F4E2F4DDF6835E44001788A
        Validity
            Not Before: Jun 23 22:10:22 2025 GMT
            Not After : Jun 22 22:15:22 2026 GMT
        Subject: CN=C6189B3625BB27C51F88E6C8FEA3E424B5612706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:70:b1:13:7a:35:49:f4:7b:cd:56:8c:42:64:
                    1d:37:dc:80:a4:6e:e6:55:ce:cb:f8:28:7a:09:3e:
                    f8:04:05:6e:d0:9d:55:80:e4:76:a6:2c:52:0b:a2:
                    17:54:09:43:fe:4d:4d:53:8c:e4:e9:7c:00:39:23:
                    de:ae:be:bd:f3:31:8d:7b:53:cb:c5:18:60:54:ff:
                    bc:10:02:97:37:7f:90:dd:17:c8:e3:b5:91:95:d2:
                    3f:0b:e6:e3:7d:46:d1:5b:9f:21:38:29:b5:36:68:
                    7a:c2:40:63:88:d1:8f:c4:d3:a7:2f:fc:04:39:5d:
                    25:be:dd:5d:fd:45:d7:58:53:30:a7:bb:68:dc:b3:
                    3c:2e:a7:b3:4e:c3:a9:00:e7:8b:c2:8d:71:87:60:
                    98:21:54:55:8b:12:0b:64:12:ab:44:24:93:45:bb:
                    e3:31:48:bf:c2:91:2c:2f:6a:77:42:cd:a5:90:da:
                    89:b7:2b:c6:48:e3:a0:48:ff:b2:53:58:34:31:69:
                    e9:ba:64:3b:7f:8a:44:b7:76:fc:46:d7:63:8f:36:
                    f8:7b:4b:a7:3e:ca:2b:cc:1d:a7:a8:d0:69:f1:be:
                    7c:f1:fa:11:fa:a9:96:10:e1:aa:01:01:54:68:5b:
                    48:4e:fc:ae:99:c8:08:eb:46:41:ad:8b:81:5f:11:
                    17:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:18:9B:36:25:BB:27:C5:1F:88:E6:C8:FE:A3:E4:24:B5:61:27:06
            X509v3 Authority Key Identifier:
                keyid:3E:2C:14:6C:10:18:77:C5:6F:4E:2F:4D:DF:68:35:E4:40:01:78:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3E2C146C101877C56F4E2F4DDF6835E44001788A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E2C146C101877C56F4E2F4DDF6835E44001788A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3134332e3230382e3133362e302f32342d3234203d3e203631373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:34:81:32:78:f2:2b:7a:4e:fe:9d:84:43:99:0d:95:ee:ff:
         40:51:10:53:d8:97:31:a7:64:d1:91:f7:e9:86:f4:37:ae:59:
         f2:70:16:3b:07:51:ff:0e:ce:f6:5f:cb:96:11:94:cc:30:77:
         47:b4:37:60:c6:45:28:4d:7b:41:13:3f:1d:18:b5:8e:d6:c0:
         85:73:8f:52:6a:6a:ce:7b:ef:a6:9c:10:11:11:51:02:65:2a:
         aa:ba:cf:4c:07:30:e6:02:22:92:1b:80:bd:ac:08:7a:54:ba:
         7d:05:f5:99:ed:c7:87:79:16:2b:d8:c8:a8:18:15:fc:7e:1c:
         26:33:27:8b:d2:a8:8f:f5:9b:1e:da:ba:83:04:1a:cf:9c:67:
         e9:35:d4:61:d4:0e:05:eb:d9:35:fd:4d:5e:cc:53:18:fe:d4:
         6b:75:47:0d:45:2b:9a:f7:a2:3d:43:cd:47:ae:1d:bc:ed:0c:
         7c:4f:db:9a:79:8c:05:4d:1c:f7:14:b9:3a:67:6a:60:5d:db:
         a8:4a:a8:2a:b4:9a:e9:01:32:90:70:86:05:26:a7:f0:2b:a3:
         70:78:8e:a4:83:65:79:e0:e9:e6:cf:6c:a3:d9:8f:fc:95:b2:
         4c:9e:3c:2d:8d:b6:ef:0b:76:e3:34:4a:f9:4c:9c:80:53:1c:
         17:63:63:fa
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUF4XtW61VJdedQXebsW38KVziwYEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0UyQzE0NkMxMDE4NzdDNTZGNEUyRjREREY2ODM1RTQ0
MDAxNzg4QTAeFw0yNTA2MjMyMjEwMjJaFw0yNjA2MjIyMjE1MjJaMDMxMTAvBgNV
BAMTKEM2MTg5QjM2MjVCQjI3QzUxRjg4RTZDOEZFQTNFNDI0QjU2MTI3MDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5cLETejVJ9HvNVoxCZB033ICk
buZVzsv4KHoJPvgEBW7QnVWA5HamLFILohdUCUP+TU1TjOTpfAA5I96uvr3zMY17
U8vFGGBU/7wQApc3f5DdF8jjtZGV0j8L5uN9RtFbnyE4KbU2aHrCQGOI0Y/E06cv
/AQ5XSW+3V39RddYUzCnu2jcszwup7NOw6kA54vCjXGHYJghVFWLEgtkEqtEJJNF
u+MxSL/CkSwvandCzaWQ2om3K8ZI46BI/7JTWDQxaem6ZDt/ikS3dvxG12OPNvh7
S6c+yivMHaeo0Gnxvnzx+hH6qZYQ4aoBAVRoW0hO/K6ZyAjrRkGti4FfERcDAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUxhibNiW7J8UfiObI/qPkJLVhJwYwHwYDVR0j
BBgwFoAUPiwUbBAYd8VvTi9N32g15EABeIowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOE1BeW1WOTg5c1g4a3FKU2ZLUGFXdkZKYVZHTGl2alliblQ5UnRXQXRS
cWYvMC8zRTJDMTQ2QzEwMTg3N0M1NkY0RTJGNERERjY4MzVFNDQwMDE3ODhBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNFMkMxNDZDMTAxODc3QzU2
RjRFMkY0RERGNjgzNUU0NDAwMTc4OEEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhNQXltVjk4OXNYOGtxSlNmS1BhV3ZGSmFWR0xpdmpZYm5UOVJ0V0F0UnFmLzAv
MzEzNDMzMmUzMjMwMzgyZTMxMzMzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2
MzEzNzM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACP0IgwDQYJKoZIhvcNAQELBQADggEBABo0gTJ4
8it6Tv6dhEOZDZXu/0BREFPYlzGnZNGR9+mG9DeuWfJwFjsHUf8OzvZfy5YRlMww
d0e0N2DGRShNe0ETPx0YtY7WwIVzj1Jqas5776acEBERUQJlKqq6z0wHMOYCIpIb
gL2sCHpUun0F9Zntx4d5FivYyKgYFfx+HCYzJ4vSqI/1mx7auoMEGs+cZ+k11GHU
DgXr2TX9TV7MUxj+1Gt1Rw1FK5r3oj1DzUeuHbztDHxP25p5jAVNHPcUuTpnamBd
26hKqCq0mukBMpBwhgUmp/Aro3B4jqSDZXng6ebPbKPZj/yVskyePC2Ntu8LduM0
SvlMnIBTHBdjY/o=
-----END CERTIFICATE-----
Generated at Thu Jul 3 05:07:45 2025 by rpki-client