Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138372e32382e302e302f31362d3136203d3e2034323330.roa
File:                     3138372e32382e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          Q+IdMXdXbvlkVspvtNRihAck+gJzswWocaGJdFS3qFo=
Subject key identifier:   FB:A0:6D:F6:FB:D4:69:C7:64:5C:33:37:77:45:87:91:B7:0C:7E:7C
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       061AE8C0FECCB60CF92F6CB8170EE6AA6305F24A
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138372e32382e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 05 Mar 2025 19:00:04 +0000
ROA not before:           Wed 05 Mar 2025 18:55:04 +0000
ROA not after:            Wed 04 Mar 2026 19:00:04 +0000
asID:                     4230
IP address blocks:        187.28.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:1a:e8:c0:fe:cc:b6:0c:f9:2f:6c:b8:17:0e:e6:aa:63:05:f2:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Mar  5 18:55:04 2025 GMT
            Not After : Mar  4 19:00:04 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d9:ef:48:af:18:f2:30:a3:df:ca:26:dc:15:
                    df:a7:f9:d1:e5:72:90:cb:3a:fb:dc:ca:ff:0d:13:
                    b5:70:1e:5a:9d:ff:75:56:05:ef:82:28:e9:d4:0a:
                    b9:5f:fb:5f:29:67:6c:9e:7d:4e:78:ee:38:a7:81:
                    e4:32:eb:e3:3a:0b:42:cc:12:c0:45:c9:e1:5f:df:
                    e3:5f:6f:88:7a:ab:bd:5b:d4:e7:5b:86:42:b7:aa:
                    b2:74:10:ed:c5:9a:5e:5c:ce:95:75:bd:86:b9:56:
                    37:fa:1c:1c:a8:6f:a5:46:38:4f:86:95:79:b1:05:
                    60:c8:db:79:29:0f:11:4b:4c:41:7a:7f:7b:89:0c:
                    71:2d:66:60:b7:e5:ed:23:fa:c4:ea:12:0a:ea:d0:
                    c0:bb:8e:b8:03:91:79:c5:e9:79:bb:5a:80:01:fe:
                    48:4e:21:59:a7:6f:61:e4:55:61:8a:df:07:9c:fa:
                    a4:7a:5c:f8:fb:71:c8:40:b6:5d:f9:bf:81:05:51:
                    64:6d:11:11:1a:31:18:9e:44:1f:57:92:ef:3b:f3:
                    54:40:b3:4f:72:ff:33:0b:70:40:b0:09:b4:94:9a:
                    80:91:fa:81:24:06:f8:4c:82:04:72:54:ca:7d:a4:
                    dd:d5:8d:8d:9c:80:5c:cc:3d:7c:8b:e7:90:3a:2e:
                    82:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:A0:6D:F6:FB:D4:69:C7:64:5C:33:37:77:45:87:91:B7:0C:7E:7C
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3138372e32382e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.28.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         19:24:90:c5:97:0f:38:3d:9d:73:c9:29:0e:a0:05:cc:d7:ff:
         21:23:d6:2e:c0:27:43:8c:d9:b0:34:bb:3d:bd:c7:bc:e3:00:
         17:16:32:42:7e:9a:94:b5:65:9b:42:b2:f8:53:07:88:ad:ef:
         b5:39:c5:f1:d9:2d:fd:63:db:ed:39:26:ac:b8:c1:8c:d3:f9:
         da:5c:e5:64:e0:03:26:49:8f:17:c5:03:d2:60:ce:e9:f6:3f:
         b9:80:3a:be:64:72:e6:20:95:b9:a0:5b:07:9a:43:c2:e3:83:
         a3:4a:34:ea:66:22:6c:7e:9f:68:42:cc:30:40:ad:e1:2d:f8:
         a4:c0:7a:ed:5d:bf:cf:0f:0c:fa:bd:0f:b9:7e:f8:c2:53:74:
         90:29:2b:fd:5d:a1:36:99:b5:a5:af:58:8d:31:5f:a6:fa:40:
         99:b6:42:8f:0d:7f:24:c3:b0:60:3c:07:5d:e1:bf:53:c8:d9:
         72:84:7c:eb:67:6c:9c:56:2f:08:83:c8:df:25:41:6c:a8:65:
         0d:14:52:03:d1:d0:5c:7c:e8:0d:3c:78:c7:43:e4:be:ce:1b:
         d1:18:2b:cf:ef:52:19:9c:28:88:be:00:90:fb:9f:45:2d:94:
         0d:91:70:29:aa:1e:45:02:40:ed:2f:34:d3:d4:b5:12:a3:0c:
         3d:bf:ed:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:55:32 2025 by rpki-client