Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3230302e3139362e3133362e302f32342d3234203d3e203631373736.roa
File:                     3230302e3139362e3133362e302f32342d3234203d3e203631373736.roa (raw, json)
Hash identifier:          D0iIOVgW0arf8PsLUDFeq5PJ134H+FNfnTbJPHNfbVw=
Subject key identifier:   55:2A:54:E1:CB:01:FE:89:60:5C:23:07:72:02:57:1C:75:7F:6B:1E
Certificate issuer:       /CN=994D499817907EB8F4D1290AD0C3115D0214B589
Certificate serial:       01094CF1E873830A1D3F184E79C2AD371D6956C5
Authority key identifier: 99:4D:49:98:17:90:7E:B8:F4:D1:29:0A:D0:C3:11:5D:02:14:B5:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/994D499817907EB8F4D1290AD0C3115D0214B589.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3230302e3139362e3133362e302f32342d3234203d3e203631373736.roa
Signing time:             Sun 02 Mar 2025 22:11:32 +0000
ROA not before:           Sun 02 Mar 2025 22:06:32 +0000
ROA not after:            Sun 01 Mar 2026 22:11:32 +0000
asID:                     61776
IP address blocks:        200.196.136.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:09:4c:f1:e8:73:83:0a:1d:3f:18:4e:79:c2:ad:37:1d:69:56:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=994D499817907EB8F4D1290AD0C3115D0214B589
        Validity
            Not Before: Mar  2 22:06:32 2025 GMT
            Not After : Mar  1 22:11:32 2026 GMT
        Subject: CN=552A54E1CB01FE89605C23077202571C757F6B1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:81:01:b1:49:19:df:7a:98:63:75:ef:d4:8d:
                    29:0a:43:8a:fb:f0:82:c3:e0:f2:ba:5b:2c:a1:ba:
                    42:66:09:e0:9b:7f:94:03:eb:f6:9e:78:54:cb:2c:
                    f8:d8:b1:cb:15:88:ca:f9:d2:13:7d:d5:fb:86:6d:
                    06:d3:54:ef:15:d7:d2:b0:4a:35:0b:c5:20:a2:64:
                    86:36:38:26:bc:c0:ad:54:1a:ce:f7:67:99:cd:8b:
                    04:20:fb:64:c3:d9:90:c6:43:46:7e:97:5a:f8:78:
                    04:29:8f:7b:3d:25:16:da:2e:7b:5c:2d:aa:59:d3:
                    36:cc:78:4e:14:5f:90:83:0d:5d:8c:57:b6:d1:41:
                    5e:9f:b2:34:5f:c2:50:73:f6:cf:4c:eb:27:10:09:
                    37:1a:e2:11:9c:3c:a4:c7:9b:61:6b:fd:12:6d:ef:
                    1b:f2:f9:5a:8a:13:fd:ea:e9:dd:0f:9b:bf:6e:62:
                    df:82:d2:6b:fe:76:4d:35:11:0f:d9:e2:f0:72:fb:
                    c6:ad:6d:d4:e6:5b:be:07:62:e3:34:c9:aa:2d:4a:
                    85:14:6c:d8:66:02:fb:3f:97:1b:10:80:80:47:4b:
                    4b:57:dd:6d:31:6c:a5:25:c6:32:2b:a0:5e:be:52:
                    2f:e5:9b:94:e2:42:c0:93:28:91:45:b3:7e:bd:c5:
                    e2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:2A:54:E1:CB:01:FE:89:60:5C:23:07:72:02:57:1C:75:7F:6B:1E
            X509v3 Authority Key Identifier:
                keyid:99:4D:49:98:17:90:7E:B8:F4:D1:29:0A:D0:C3:11:5D:02:14:B5:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/994D499817907EB8F4D1290AD0C3115D0214B589.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/994D499817907EB8F4D1290AD0C3115D0214B589.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3230302e3139362e3133362e302f32342d3234203d3e203631373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.196.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:aa:a2:c0:36:cf:26:36:12:0b:8a:88:ad:15:fb:81:90:3e:
         84:e3:14:c0:8b:6f:98:99:2b:87:82:5c:19:07:56:a1:53:78:
         b9:6d:44:27:0b:58:66:d1:68:f8:ad:34:1d:d0:29:26:0b:d1:
         b2:11:67:34:64:e8:72:80:79:9b:f2:cc:75:16:67:ee:83:d5:
         0b:cc:06:22:50:2b:95:fd:62:a8:65:d3:55:bd:bd:52:bd:60:
         10:e9:0b:c8:88:1a:a7:14:d7:09:ac:4d:50:88:f8:0a:44:bf:
         08:57:bd:00:44:e1:c9:97:89:5e:18:da:e3:02:be:ec:ca:6e:
         88:4d:0c:94:3a:ff:a1:fc:53:a7:40:89:70:82:9e:ea:41:d7:
         e7:75:8c:6a:e6:38:b7:bb:9b:3e:a6:e6:f5:fe:d0:3a:e2:be:
         a1:f0:01:05:35:eb:8c:6a:68:25:34:d7:76:3c:9d:6b:4c:c9:
         b3:84:60:91:e0:29:17:a1:74:38:c5:60:5e:a4:41:e6:ff:bf:
         67:5c:af:a3:ff:a6:22:69:d8:0a:61:1a:8d:b7:88:03:d6:9a:
         70:39:d7:2c:21:2c:53:f4:f3:2b:f6:2f:5d:e7:f3:ac:f3:b0:
         bf:16:0c:c3:37:16:cc:15:8a:d5:8b:62:03:7c:b4:8c:c5:a2:
         e7:9c:14:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 15 08:58:30 2025 by rpki-client