Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e31302e3135392e302f32342d3234203d3e2034323330.roa
File:                     3230302e31302e3135392e302f32342d3234203d3e2034323330.roa (raw, json)
Hash identifier:          d8onRpQoBp/mO71GJJQ3OVt9l7YaSadenfZYEnci+s8=
Subject key identifier:   5A:37:0A:C2:32:93:89:E3:D7:11:72:38:D8:52:ED:B1:F3:D1:B2:F0
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       344981476DFE7E0007E6CADF16881A1AE8B17050
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e31302e3135392e302f32342d3234203d3e2034323330.roa
Signing time:             Wed 05 Mar 2025 19:00:05 +0000
ROA not before:           Wed 05 Mar 2025 18:55:05 +0000
ROA not after:            Wed 04 Mar 2026 19:00:05 +0000
asID:                     4230
IP address blocks:        200.10.159.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:49:81:47:6d:fe:7e:00:07:e6:ca:df:16:88:1a:1a:e8:b1:70:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Mar  5 18:55:05 2025 GMT
            Not After : Mar  4 19:00:05 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:94:aa:08:22:76:f2:0b:73:f7:9f:c9:8a:e8:
                    be:ff:8a:ae:ff:9a:7a:72:1b:ab:b3:64:e1:40:7e:
                    6d:b3:53:3b:0a:c2:43:e7:72:53:d7:9f:48:5c:15:
                    f7:fe:8b:30:8b:7c:7e:67:f9:f1:ad:2f:fd:9e:26:
                    cf:16:bb:ad:e1:62:4f:1c:37:54:fc:be:ac:cc:fb:
                    b2:39:47:75:16:72:a2:19:e7:3d:19:cb:1e:ce:47:
                    d5:1e:14:cf:ba:aa:02:87:c7:40:dd:77:1f:ac:c1:
                    90:5c:28:4f:25:d3:c9:a1:ed:a6:0b:28:27:34:b5:
                    81:69:3b:ec:1b:3b:44:83:93:8d:3d:72:da:58:6d:
                    22:35:14:63:86:f3:45:38:45:6b:e6:15:bf:98:8e:
                    f6:31:0a:13:02:d5:ff:70:66:7b:16:b5:ce:ec:dd:
                    60:d1:95:58:a8:d4:2b:7e:16:13:e9:29:59:53:b5:
                    38:66:63:d5:64:42:ed:be:b1:a3:04:44:30:b4:a5:
                    a0:dc:e9:4c:31:b2:ae:9d:be:51:ca:fe:94:46:3c:
                    ae:56:da:e1:46:5d:e4:35:6f:dc:62:fe:5a:f2:51:
                    3e:34:6b:8d:fb:38:3b:a4:4e:5c:59:70:58:2b:07:
                    e2:11:7e:5c:e0:a1:38:ca:a0:d2:63:89:77:2d:11:
                    c6:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:37:0A:C2:32:93:89:E3:D7:11:72:38:D8:52:ED:B1:F3:D1:B2:F0
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e31302e3135392e302f32342d3234203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:c4:d4:0b:59:0c:62:3e:b4:42:36:6f:e5:4f:7a:06:78:20:
         73:dd:3c:4f:3c:6d:0e:64:94:c3:9c:d5:ac:22:2f:08:94:f7:
         51:b0:38:f3:82:34:9d:ca:17:04:f5:52:aa:14:93:0c:7e:4a:
         a3:9d:59:d4:9e:31:2e:f5:d1:69:85:8d:70:8a:08:64:5a:e2:
         d0:27:ed:3a:3b:26:e1:7d:a0:45:8a:2b:0b:1a:ca:0a:b3:f1:
         81:96:90:8a:d8:c6:80:b4:38:8d:0a:ed:d5:50:e2:d3:61:99:
         f5:2c:9d:04:e8:87:bb:4a:59:3a:3c:b2:6a:09:c2:c9:62:72:
         4f:3d:67:89:35:f6:a6:13:cd:35:f2:42:33:06:db:0b:dc:3f:
         6e:86:66:cd:01:32:51:62:94:14:3a:e7:8a:f9:58:58:8e:ab:
         f1:13:6b:15:64:db:c0:5c:dd:ac:64:92:d5:d6:01:7c:49:15:
         9d:a0:c2:34:cc:06:f2:f3:77:52:c1:5c:53:0e:98:f0:6e:fb:
         d8:86:f9:99:f6:de:92:66:a9:62:d9:45:0f:88:97:bc:8d:ef:
         81:01:c9:9b:c8:7c:74:81:ac:0b:69:a3:85:51:0a:a8:eb:b0:
         10:ea:e2:06:7f:cd:9e:cf:74:90:9f:46:e5:ec:c6:54:6c:20:
         0b:b6:e3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:47:58 2025 by rpki-client