Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3230302e3139362e3133382e302f32342d3234203d3e203631373736.roa
File:                     3230302e3139362e3133382e302f32342d3234203d3e203631373736.roa (raw, json)
Hash identifier:          fteNzAHDZ1C/EtTdH94s/WwVii1EM8QfC91ALDEdlVU=
Subject key identifier:   D0:87:AC:5D:99:6E:B4:7B:3F:B5:C4:A6:73:6E:D5:12:30:31:6A:81
Certificate issuer:       /CN=3E2C146C101877C56F4E2F4DDF6835E44001788A
Certificate serial:       24353D27FA5526BE47617C35C83C74378C661885
Authority key identifier: 3E:2C:14:6C:10:18:77:C5:6F:4E:2F:4D:DF:68:35:E4:40:01:78:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E2C146C101877C56F4E2F4DDF6835E44001788A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3230302e3139362e3133382e302f32342d3234203d3e203631373736.roa
Signing time:             Mon 23 Jun 2025 22:15:24 +0000
ROA not before:           Mon 23 Jun 2025 22:10:24 +0000
ROA not after:            Mon 22 Jun 2026 22:15:24 +0000
asID:                     61776
IP address blocks:        200.196.138.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:35:3d:27:fa:55:26:be:47:61:7c:35:c8:3c:74:37:8c:66:18:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E2C146C101877C56F4E2F4DDF6835E44001788A
        Validity
            Not Before: Jun 23 22:10:24 2025 GMT
            Not After : Jun 22 22:15:24 2026 GMT
        Subject: CN=D087AC5D996EB47B3FB5C4A6736ED51230316A81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:27:a3:3a:2c:95:27:a9:b1:f4:99:9c:af:49:
                    0f:d3:f5:af:2c:5c:36:ba:b3:b3:fa:1f:84:02:d7:
                    c6:55:c5:d0:24:80:e0:3f:72:96:01:a1:cf:52:4f:
                    a1:a3:18:d6:38:f1:3a:92:58:87:43:de:80:a6:40:
                    e7:ed:ca:6b:4e:da:b0:72:f9:bb:2c:e8:27:1f:ac:
                    d6:18:bb:45:a1:05:61:9c:08:9f:5b:ca:68:a1:25:
                    ce:bf:5c:de:9e:f3:2c:b1:94:26:34:84:f6:b7:7f:
                    5f:b9:04:cd:fd:74:d4:03:cd:30:10:72:17:69:53:
                    87:49:b0:66:49:b4:65:eb:25:7b:3b:87:2d:e0:8e:
                    3c:09:c8:57:02:74:68:1b:b3:25:fc:4f:0a:e7:cc:
                    cd:3e:32:17:8c:b1:ea:a8:40:98:a9:d7:a4:d5:dc:
                    0b:c8:9f:b7:ca:24:1f:dc:0f:f5:99:ad:d8:d8:c0:
                    22:1c:dd:71:46:6a:f3:ee:1d:2e:92:d4:cb:f1:c7:
                    48:22:e0:3b:a2:5e:b5:4a:1c:9a:cb:05:3d:42:2e:
                    98:0c:39:56:9c:39:b4:43:fc:9e:10:51:f9:7a:5b:
                    4c:4c:03:6c:b3:3b:f8:d1:5d:6a:d6:fb:b5:9a:a3:
                    a2:9d:16:41:d7:56:a7:58:13:25:53:c6:40:8a:29:
                    39:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:87:AC:5D:99:6E:B4:7B:3F:B5:C4:A6:73:6E:D5:12:30:31:6A:81
            X509v3 Authority Key Identifier:
                keyid:3E:2C:14:6C:10:18:77:C5:6F:4E:2F:4D:DF:68:35:E4:40:01:78:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3E2C146C101877C56F4E2F4DDF6835E44001788A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E2C146C101877C56F4E2F4DDF6835E44001788A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3230302e3139362e3133382e302f32342d3234203d3e203631373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.196.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:9d:1d:9d:77:00:0c:9c:53:68:e1:a0:c8:2e:9f:48:55:7d:
         5f:47:e4:8a:6e:59:96:df:33:2c:54:bb:7e:28:44:18:16:04:
         68:2c:ab:fd:93:3d:ed:50:b2:61:9f:22:00:e2:4c:96:59:f6:
         65:38:9f:e4:8d:49:90:0a:44:27:e2:b5:e8:fa:79:e8:ea:43:
         44:7f:37:c0:0f:b4:0a:7a:e8:37:83:bd:02:db:58:fe:30:27:
         d0:7b:ab:68:a7:18:64:91:7b:f9:32:a5:b1:8d:c1:78:7e:44:
         35:fd:db:1e:5f:4a:1b:30:ef:16:8b:69:0f:7b:08:b9:e6:fc:
         16:93:1b:50:e2:80:6a:33:7c:4e:45:bb:cf:87:43:a0:52:ec:
         9e:9c:14:0b:96:5e:4b:1e:39:18:df:a4:31:8f:8d:c3:59:fd:
         f6:56:da:6d:a8:55:70:60:bf:d6:57:71:9a:ba:0a:18:b6:4d:
         ef:00:1f:2d:14:7f:22:bb:51:53:b8:78:ca:11:96:af:b3:61:
         ec:b5:dc:a1:1f:95:b4:77:7b:db:97:17:8d:08:4b:61:9b:3b:
         a7:73:33:07:6a:73:ae:88:a2:76:ab:7d:c2:4a:66:ac:41:49:
         50:89:23:85:ac:0e:3d:d9:bf:bd:6e:96:88:5a:6a:c2:0b:a7:
         7e:a6:50:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 2 22:58:20 2025 by rpki-client