Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3136372e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3136372e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          iNPyj4avSn93IqpbwJ1IzFP0NBm66QpGqcVANtf1oLc=
Subject key identifier:   1C:70:FD:5C:D7:D5:C3:73:D0:7F:74:1F:CB:4F:97:2E:22:8F:9C:3E
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       2063A87F4CEE20DDDA4F297D0E371A56B57EE19D
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3136372e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 05 Mar 2025 19:00:02 +0000
ROA not before:           Wed 05 Mar 2025 18:55:02 +0000
ROA not after:            Wed 04 Mar 2026 19:00:02 +0000
asID:                     4230
IP address blocks:        200.167.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:63:a8:7f:4c:ee:20:dd:da:4f:29:7d:0e:37:1a:56:b5:7e:e1:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Mar  5 18:55:02 2025 GMT
            Not After : Mar  4 19:00:02 2026 GMT
        Subject: CN=3082010A0282010100C7E3481451E41CEDF51A05715B05722FA73099A1CB6C8DFFD925ADC58F00E63B758B7FFF531F53315DFF588361A8ED1874111FC192DE442C2A24BEA287CD2239C83C7CB805052E7BDE2D7243A0714A3F0834A54D532851D54F7544132BD346358A7CE00B1FB93CA5F494AFB50C734D43AC825399753593765224A2A6985C9A7942616DFBAD93F87BA5F2A43EEEBD9D9EB8D08F29CCEDDDE1034EBE8B990DD9163482FA97013729C6F7AA000D42A18AA0F2A7C35E53C151D8F4DD9BD1ACE964F4F21054C5413B243EC79D309CBD6F3A26509FF269EB18F8C87F1797309D141D2F3C4DF7BEFDF9B1A1B12A67642C574132F46C12DB66EEAC9E5776404D22F360390203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e3:48:14:51:e4:1c:ed:f5:1a:05:71:5b:05:
                    72:2f:a7:30:99:a1:cb:6c:8d:ff:d9:25:ad:c5:8f:
                    00:e6:3b:75:8b:7f:ff:53:1f:53:31:5d:ff:58:83:
                    61:a8:ed:18:74:11:1f:c1:92:de:44:2c:2a:24:be:
                    a2:87:cd:22:39:c8:3c:7c:b8:05:05:2e:7b:de:2d:
                    72:43:a0:71:4a:3f:08:34:a5:4d:53:28:51:d5:4f:
                    75:44:13:2b:d3:46:35:8a:7c:e0:0b:1f:b9:3c:a5:
                    f4:94:af:b5:0c:73:4d:43:ac:82:53:99:75:35:93:
                    76:52:24:a2:a6:98:5c:9a:79:42:61:6d:fb:ad:93:
                    f8:7b:a5:f2:a4:3e:ee:bd:9d:9e:b8:d0:8f:29:cc:
                    ed:dd:e1:03:4e:be:8b:99:0d:d9:16:34:82:fa:97:
                    01:37:29:c6:f7:aa:00:0d:42:a1:8a:a0:f2:a7:c3:
                    5e:53:c1:51:d8:f4:dd:9b:d1:ac:e9:64:f4:f2:10:
                    54:c5:41:3b:24:3e:c7:9d:30:9c:bd:6f:3a:26:50:
                    9f:f2:69:eb:18:f8:c8:7f:17:97:30:9d:14:1d:2f:
                    3c:4d:f7:be:fd:f9:b1:a1:b1:2a:67:64:2c:57:41:
                    32:f4:6c:12:db:66:ee:ac:9e:57:76:40:4d:22:f3:
                    60:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:70:FD:5C:D7:D5:C3:73:D0:7F:74:1F:CB:4F:97:2E:22:8F:9C:3E
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3136372e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.167.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         be:d8:c1:26:c6:4e:a5:cb:da:0e:4b:a0:00:7e:85:6a:54:19:
         a8:fe:21:3a:10:cc:88:0f:32:0f:20:06:ef:04:74:ea:3e:39:
         32:58:89:1b:48:b9:1a:dd:ca:bc:72:00:aa:84:4a:38:94:4a:
         d1:82:08:e4:1d:07:71:db:a9:64:6f:77:03:c5:4b:d2:37:3f:
         c8:45:21:09:56:20:dc:10:7a:e7:e1:ca:a9:24:55:fa:6e:31:
         08:98:9c:b9:f2:1b:a6:79:f0:3e:22:3d:a9:4d:0f:83:18:9c:
         67:40:15:38:c8:d7:d1:2f:66:9c:07:d3:84:a3:03:1a:a6:f6:
         e0:9c:b9:72:80:9f:08:45:46:73:50:bc:88:ef:c3:e6:b6:e4:
         d3:e0:d5:41:48:05:86:35:a1:8c:f2:66:18:1b:ba:18:9c:81:
         fc:c5:ca:99:53:3b:8e:50:25:9d:38:32:f2:64:90:82:47:fd:
         09:65:ba:dd:bc:15:ba:7a:b0:fa:0a:cc:79:58:da:52:ef:05:
         ed:13:c8:46:34:9b:80:08:97:ae:86:31:47:5b:66:f1:b1:0a:
         6e:a7:4d:2a:fe:17:bf:b4:84:43:bc:4d:42:c4:2b:b5:46:f3:
         34:36:85:f0:1f:39:5e:82:d2:ec:10:eb:83:dc:3f:ae:0c:c1:
         2d:66:10:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:36:48 2025 by rpki-client