Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3230302e3139362e3133392e302f32342d3234203d3e203631373736.roa
File:                     3230302e3139362e3133392e302f32342d3234203d3e203631373736.roa (raw, json)
Hash identifier:          3kKyPuS8dRmSMKJKKEt3C20mPogIm7PB2HewOJyD11A=
Subject key identifier:   19:5B:24:27:57:5C:1E:7E:72:34:6E:70:C4:3A:1D:24:BE:5E:21:9C
Certificate issuer:       /CN=3E2C146C101877C56F4E2F4DDF6835E44001788A
Certificate serial:       20116F69AD7E7F7C69D09BC82E9140E854A2887B
Authority key identifier: 3E:2C:14:6C:10:18:77:C5:6F:4E:2F:4D:DF:68:35:E4:40:01:78:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E2C146C101877C56F4E2F4DDF6835E44001788A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3230302e3139362e3133392e302f32342d3234203d3e203631373736.roa
Signing time:             Mon 23 Jun 2025 22:15:23 +0000
ROA not before:           Mon 23 Jun 2025 22:10:23 +0000
ROA not after:            Mon 22 Jun 2026 22:15:23 +0000
asID:                     61776
IP address blocks:        200.196.139.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:11:6f:69:ad:7e:7f:7c:69:d0:9b:c8:2e:91:40:e8:54:a2:88:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E2C146C101877C56F4E2F4DDF6835E44001788A
        Validity
            Not Before: Jun 23 22:10:23 2025 GMT
            Not After : Jun 22 22:15:23 2026 GMT
        Subject: CN=195B2427575C1E7E72346E70C43A1D24BE5E219C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:f6:be:db:06:53:6a:9f:60:f0:1b:7f:0e:b8:
                    6d:69:87:eb:09:b6:8c:cf:87:b3:0b:68:d0:e8:e6:
                    ee:10:1b:33:94:d9:32:99:62:75:ca:3c:ad:75:8f:
                    91:34:58:da:01:4b:40:cc:2e:00:77:8c:2f:13:ae:
                    b0:a2:a2:dc:31:3f:aa:ec:27:0f:28:6f:59:81:d6:
                    e5:f0:21:52:5c:9e:03:3b:2f:f4:9d:d2:41:5a:aa:
                    3e:c0:0b:1d:4a:95:59:c3:62:d6:16:06:17:ad:6d:
                    88:7f:df:00:56:25:07:5d:34:61:14:0a:ce:20:0b:
                    bb:a6:85:98:03:0c:ba:ae:20:a5:48:ca:3c:0c:c8:
                    f6:34:d2:c7:cb:f9:92:ba:df:97:1d:db:8a:6b:5c:
                    df:e9:5b:cb:59:55:07:29:c4:74:13:8e:ad:ef:8a:
                    23:8b:60:3e:e1:d8:cc:5c:11:ef:31:db:21:3f:5c:
                    0c:95:66:4e:9e:03:a5:86:83:ff:b5:d4:f7:97:23:
                    2c:66:f8:2d:be:92:59:f0:8b:a8:f2:1e:4a:9e:5b:
                    d4:a9:58:e1:f7:6b:f2:ed:b8:49:3d:18:61:78:73:
                    89:58:f1:7f:1f:45:b3:5f:39:5b:ec:62:68:17:23:
                    63:77:04:ee:0c:fb:2b:33:e9:f9:23:47:b3:29:42:
                    9c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:5B:24:27:57:5C:1E:7E:72:34:6E:70:C4:3A:1D:24:BE:5E:21:9C
            X509v3 Authority Key Identifier:
                keyid:3E:2C:14:6C:10:18:77:C5:6F:4E:2F:4D:DF:68:35:E4:40:01:78:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3E2C146C101877C56F4E2F4DDF6835E44001788A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3E2C146C101877C56F4E2F4DDF6835E44001788A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/3230302e3139362e3133392e302f32342d3234203d3e203631373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.196.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:ad:43:34:4f:79:87:38:96:cd:70:4d:12:a0:e8:23:2b:12:
         03:f4:0b:9c:a9:b9:55:a5:5c:ea:f9:68:58:40:91:bc:a6:19:
         d3:50:c7:8e:0c:86:ca:ee:07:62:7d:f0:b9:30:1e:24:02:d7:
         9b:15:d1:4f:05:78:8f:d9:65:17:83:b0:dc:1f:8b:ce:fc:58:
         1a:5d:05:92:37:60:f5:28:5d:b9:14:6b:78:92:52:6b:65:20:
         a6:f8:1f:6d:3b:b5:cd:0a:0b:8f:08:7b:5c:e2:e0:fc:91:48:
         ac:1e:e0:19:58:8a:4d:15:74:9e:bf:ed:3c:66:e8:5a:20:09:
         d0:62:c3:57:bb:8e:83:e7:bb:6a:f3:80:7b:20:ee:b1:ec:d3:
         b6:6d:85:76:26:a0:49:67:10:9e:25:a2:88:07:52:06:5b:c3:
         95:bc:2d:97:79:dc:26:95:ed:69:85:84:0b:0c:73:ba:66:92:
         f1:eb:2b:59:b6:50:9b:bf:fc:b3:1b:95:0d:16:d8:70:a1:6d:
         72:28:64:ba:93:80:8c:32:08:da:7e:91:ca:7f:24:29:8e:07:
         03:e2:9c:08:7c:f0:9f:4a:d1:67:e0:86:53:3f:62:32:c7:ce:
         48:c3:57:a0:f0:a2:7f:9f:85:e6:ee:7c:3f:68:34:10:24:8b:
         da:fa:e5:e2
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUIBFvaa1+f3xp0JvILpFA6FSiiHswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0UyQzE0NkMxMDE4NzdDNTZGNEUyRjREREY2ODM1RTQ0
MDAxNzg4QTAeFw0yNTA2MjMyMjEwMjNaFw0yNjA2MjIyMjE1MjNaMDMxMTAvBgNV
BAMTKDE5NUIyNDI3NTc1QzFFN0U3MjM0NkU3MEM0M0ExRDI0QkU1RTIxOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE9r7bBlNqn2DwG38OuG1ph+sJ
tozPh7MLaNDo5u4QGzOU2TKZYnXKPK11j5E0WNoBS0DMLgB3jC8TrrCiotwxP6rs
Jw8ob1mB1uXwIVJcngM7L/Sd0kFaqj7ACx1KlVnDYtYWBhetbYh/3wBWJQddNGEU
Cs4gC7umhZgDDLquIKVIyjwMyPY00sfL+ZK635cd24prXN/pW8tZVQcpxHQTjq3v
iiOLYD7h2MxcEe8x2yE/XAyVZk6eA6WGg/+11PeXIyxm+C2+klnwi6jyHkqeW9Sp
WOH3a/LtuEk9GGF4c4lY8X8fRbNfOVvsYmgXI2N3BO4M+ysz6fkjR7MpQpwzAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUGVskJ1dcHn5yNG5wxDodJL5eIZwwHwYDVR0j
BBgwFoAUPiwUbBAYd8VvTi9N32g15EABeIowDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vOE1BeW1WOTg5c1g4a3FKU2ZLUGFXdkZKYVZHTGl2alliblQ5UnRXQXRS
cWYvMC8zRTJDMTQ2QzEwMTg3N0M1NkY0RTJGNERERjY4MzVFNDQwMDE3ODhBLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xLzNFMkMxNDZDMTAxODc3QzU2
RjRFMkY0RERGNjgzNUU0NDAwMTc4OEEuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzhNQXltVjk4OXNYOGtxSlNmS1BhV3ZGSmFWR0xpdmpZYm5UOVJ0V0F0UnFmLzAv
MzIzMDMwMmUzMTM5MzYyZTMxMzMzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM2
MzEzNzM3MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADIxIswDQYJKoZIhvcNAQELBQADggEBADGtQzRP
eYc4ls1wTRKg6CMrEgP0C5ypuVWlXOr5aFhAkbymGdNQx44MhsruB2J98LkwHiQC
15sV0U8FeI/ZZReDsNwfi878WBpdBZI3YPUoXbkUa3iSUmtlIKb4H207tc0KC48I
e1zi4PyRSKwe4BlYik0VdJ6/7Txm6FogCdBiw1e7joPnu2rzgHsg7rHs07ZthXYm
oElnEJ4loogHUgZbw5W8LZd53CaV7WmFhAsMc7pmkvHrK1m2UJu//LMblQ0W2HCh
bXIoZLqTgIwyCNp+kcp/JCmOBwPinAh88J9K0WfghlM/YjLHzkjDV6Dwon+fhebu
fD9oNBAki9r65eI=
-----END CERTIFICATE-----
Generated at Wed Jul 2 22:31:16 2025 by rpki-client