Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3230302e3139362e3133372e302f32342d3234203d3e203631373736.roa
File:                     3230302e3139362e3133372e302f32342d3234203d3e203631373736.roa (raw, json)
Hash identifier:          5yZme9OTEaO6nx505BYnlNyNdz6Lnze78zftTfrPSsA=
Subject key identifier:   6F:A2:50:8C:33:BF:42:3E:A8:AF:3D:81:A1:23:0E:B4:D3:62:98:CC
Certificate issuer:       /CN=3E2C146C101877C56F4E2F4DDF6835E44001788A
Certificate serial:       6475923E8AE24C70166F181588F66DBF003C7061
Authority key identifier: 3E:2C:14:6C:10:18:77:C5:6F:4E:2F:4D:DF:68:35:E4:40:01:78:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E2C146C101877C56F4E2F4DDF6835E44001788A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3230302e3139362e3133372e302f32342d3234203d3e203631373736.roa
Signing time:             Mon 23 Jun 2025 22:15:24 +0000
ROA not before:           Mon 23 Jun 2025 22:10:24 +0000
ROA not after:            Mon 22 Jun 2026 22:15:24 +0000
asID:                     61776
IP address blocks:        200.196.137.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:75:92:3e:8a:e2:4c:70:16:6f:18:15:88:f6:6d:bf:00:3c:70:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E2C146C101877C56F4E2F4DDF6835E44001788A
        Validity
            Not Before: Jun 23 22:10:24 2025 GMT
            Not After : Jun 22 22:15:24 2026 GMT
        Subject: CN=6FA2508C33BF423EA8AF3D81A1230EB4D36298CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fa:05:04:53:a3:f7:75:00:bc:94:16:74:5a:
                    b1:8e:87:71:cd:f2:14:59:63:f9:c6:48:97:56:51:
                    5e:e3:2f:a3:df:0f:20:b6:a9:b7:32:46:22:f4:c1:
                    d5:93:ae:8d:d8:15:48:06:2c:11:26:93:72:0a:71:
                    2a:ad:d3:69:7f:ad:2f:ca:30:ee:e1:40:00:fa:52:
                    99:52:d5:49:37:c0:99:7c:5b:00:d7:aa:61:2a:e7:
                    a3:95:b7:c1:d1:0a:01:2e:dc:0f:fd:be:bf:47:bb:
                    4a:6b:59:0a:2d:93:c6:6e:5f:1f:a3:bf:b8:84:aa:
                    60:6a:e5:56:c8:96:20:86:17:d4:8a:e0:72:f2:68:
                    a5:d9:8f:d5:08:59:54:28:c8:0a:b1:35:2e:78:3b:
                    c1:f4:2f:5e:60:44:ab:14:c1:d3:12:d9:27:e1:67:
                    2e:74:a3:21:ec:a2:07:df:ef:62:78:5c:d7:90:31:
                    1f:92:52:64:3e:9d:6a:43:aa:38:19:5e:87:ce:31:
                    55:4e:05:e3:7d:8e:23:55:7f:ec:37:54:57:84:d2:
                    c1:09:45:94:81:f0:b3:cf:79:e1:4c:c0:52:6c:fa:
                    56:c5:94:0e:eb:91:f8:64:0b:20:c2:ba:68:12:69:
                    82:56:65:43:02:6d:67:be:9b:12:da:e3:ae:2c:e0:
                    14:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:A2:50:8C:33:BF:42:3E:A8:AF:3D:81:A1:23:0E:B4:D3:62:98:CC
            X509v3 Authority Key Identifier:
                keyid:3E:2C:14:6C:10:18:77:C5:6F:4E:2F:4D:DF:68:35:E4:40:01:78:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3E2C146C101877C56F4E2F4DDF6835E44001788A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E2C146C101877C56F4E2F4DDF6835E44001788A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3230302e3139362e3133372e302f32342d3234203d3e203631373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.196.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:b8:3a:21:1d:58:e2:46:e1:ce:09:0a:50:08:01:2d:f0:a1:
         12:d5:c7:23:1e:d9:e0:b6:05:26:e7:14:09:ec:2a:00:01:05:
         62:08:24:cc:98:c6:af:af:eb:d6:d5:44:75:23:1d:5a:84:08:
         6f:b4:16:51:95:1e:74:bb:44:53:c8:8f:5f:5d:5d:7c:fb:2e:
         32:1d:7b:51:46:23:0a:7b:d7:21:75:1a:a7:c3:c5:25:c5:63:
         68:60:ca:96:d1:60:6a:36:e4:c5:6b:09:02:13:81:3d:38:0b:
         97:76:0c:04:49:03:a0:04:84:f1:25:0b:34:f2:fd:81:9b:ba:
         fe:47:29:89:57:ad:52:c1:a8:2b:8b:14:83:1e:52:c3:e2:0b:
         bd:a1:a1:8a:5f:d1:07:a4:67:de:74:f0:d2:9c:1b:b5:8c:04:
         48:95:a5:6d:62:1e:e3:c9:a9:41:26:f6:bf:73:75:74:2e:d2:
         c4:3b:53:ed:f5:b2:19:5a:a7:e0:50:13:66:d1:f3:5c:a0:cf:
         0a:99:b0:84:c1:3f:0d:74:7e:ba:df:f8:24:1e:77:77:05:aa:
         bd:5d:3f:8e:8d:ca:01:af:66:ff:d3:66:0f:16:1e:ac:17:06:
         a7:b4:44:21:ed:27:41:c2:59:5e:f3:55:d0:99:a8:fa:f2:03:
         7e:6c:ec:c7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUZHWSPoriTHAWbxgViPZtvwA8cGEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0UyQzE0NkMxMDE4NzdDNTZGNEUyRjREREY2ODM1RTQ0
MDAxNzg4QTAeFw0yNTA2MjMyMjEwMjRaFw0yNjA2MjIyMjE1MjRaMDMxMTAvBgNV
BAMTKDZGQTI1MDhDMzNCRjQyM0VBOEFGM0Q4MUExMjMwRUI0RDM2Mjk4Q0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU+gUEU6P3dQC8lBZ0WrGOh3HN
8hRZY/nGSJdWUV7jL6PfDyC2qbcyRiL0wdWTro3YFUgGLBEmk3IKcSqt02l/rS/K
MO7hQAD6UplS1Uk3wJl8WwDXqmEq56OVt8HRCgEu3A/9vr9Hu0prWQotk8ZuXx+j
v7iEqmBq5VbIliCGF9SK4HLyaKXZj9UIWVQoyAqxNS54O8H0L15gRKsUwdMS2Sfh
Zy50oyHsogff72J4XNeQMR+SUmQ+nWpDqjgZXofOMVVOBeN9jiNVf+w3VFeE0sEJ
RZSB8LPPeeFMwFJs+lbFlA7rkfhkCyDCumgSaYJWZUMCbWe+mxLa464s4BT5AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUb6JQjDO/Qj6orz2BoSMOtNNimMwwHwYDVR0j
BBgwFoAUPiwUbBAYd8VvTi9N32g15EABeIowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOE1BeW1WOTg5c1g4a3FKU2ZLUGFXdkZKYVZHTGl2alliblQ5UnRXQXRS
cWYvMC8zRTJDMTQ2QzEwMTg3N0M1NkY0RTJGNERERjY4MzVFNDQwMDE3ODhBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNFMkMxNDZDMTAxODc3QzU2
RjRFMkY0RERGNjgzNUU0NDAwMTc4OEEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhNQXltVjk4OXNYOGtxSlNmS1BhV3ZGSmFWR0xpdmpZYm5UOVJ0V0F0UnFmLzAv
MzIzMDMwMmUzMTM5MzYyZTMxMzMzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2
MzEzNzM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADIxIkwDQYJKoZIhvcNAQELBQADggEBAIu4OiEd
WOJG4c4JClAIAS3woRLVxyMe2eC2BSbnFAnsKgABBWIIJMyYxq+v69bVRHUjHVqE
CG+0FlGVHnS7RFPIj19dXXz7LjIde1FGIwp71yF1GqfDxSXFY2hgypbRYGo25MVr
CQITgT04C5d2DARJA6AEhPElCzTy/YGbuv5HKYlXrVLBqCuLFIMeUsPiC72hoYpf
0QekZ9508NKcG7WMBEiVpW1iHuPJqUEm9r9zdXQu0sQ7U+31shlap+BQE2bR81yg
zwqZsITBPw10frrf+CQed3cFqr1dP46NygGvZv/TZg8WHqwXBqe0RCHtJ0HCWV7z
VdCZqPryA35s7Mc=
-----END CERTIFICATE-----
Generated at Thu Jul 3 04:29:02 2025 by rpki-client