Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3137382e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3137382e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          ZoCTbXuFLKabiM7HHjwM0ivwftWnlBpQKG+4AL8otA8=
Subject key identifier:   61:A6:77:C9:51:8F:43:2E:2E:ED:A1:66:56:1D:14:44:4E:B3:66:D8
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       6F17523FD704419BADF895CABFE3B9F7F49913D6
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3137382e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     4230
IP address blocks:        200.178.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:17:52:3f:d7:04:41:9b:ad:f8:95:ca:bf:e3:b9:f7:f4:99:13:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fb:6e:04:8f:7f:aa:f3:87:94:02:21:07:d4:
                    97:cb:2d:b5:49:9f:44:39:5a:e9:f4:5a:2f:69:58:
                    9b:ce:83:f9:f9:8d:51:e6:cd:61:87:99:80:9b:c2:
                    88:37:b7:33:ea:0f:d2:63:5f:0c:10:0f:a8:1c:65:
                    66:43:90:6f:36:e3:aa:64:61:41:1c:91:1e:82:42:
                    c2:fd:86:a3:31:77:52:b8:52:31:ff:f7:c9:f9:04:
                    8b:ea:84:a5:f9:03:23:cb:3a:85:db:d1:5e:c1:be:
                    25:5c:b6:85:9a:12:46:2e:84:eb:ef:d5:4b:6a:3b:
                    d9:c9:c5:26:90:a1:5b:24:28:83:02:4a:4f:af:86:
                    36:06:44:a0:64:c8:a6:b8:15:f3:be:1c:75:fe:3c:
                    57:c2:49:ec:5e:4d:c6:52:a4:7d:f6:36:f8:26:c8:
                    d6:8f:01:be:49:c1:9f:09:2a:b3:98:54:8c:b7:27:
                    90:dd:fe:a2:ef:9c:84:23:ac:ab:3c:6f:17:b0:a9:
                    72:3d:34:11:b6:e6:cf:29:28:4f:35:5e:ad:8c:52:
                    74:ca:60:ec:0f:e3:07:7a:1f:fc:09:00:f6:22:36:
                    18:7a:92:1a:92:42:15:d1:0d:bd:53:39:e5:26:58:
                    80:c7:00:85:35:b1:be:89:8d:93:2b:ab:8a:3a:7e:
                    e5:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:A6:77:C9:51:8F:43:2E:2E:ED:A1:66:56:1D:14:44:4E:B3:66:D8
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3137382e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.178.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         51:09:d8:3d:b0:8e:f6:7e:08:cf:68:d0:f0:8b:c3:dc:88:61:
         5d:69:5d:dc:d2:88:78:fe:5b:36:9d:e0:17:ad:53:64:b0:84:
         7a:6d:48:ec:05:05:cb:5e:28:5b:87:31:98:1f:90:00:5b:f5:
         67:bd:2b:db:c7:d0:c9:b9:ee:ab:1f:2d:94:d1:7f:38:7f:6b:
         92:9e:b7:98:eb:55:47:70:f2:af:ba:e1:d0:71:a6:5b:5d:cf:
         f4:f7:e5:38:a6:66:2d:fb:05:79:ed:cf:4d:f6:6f:af:b6:9b:
         54:e5:17:81:06:42:db:0e:02:01:6a:41:ed:98:d8:b1:68:59:
         cc:aa:bf:01:47:02:29:f0:5d:c9:43:0f:89:58:ce:d6:93:e7:
         1b:59:07:25:14:26:7e:ee:36:24:c5:2f:3e:61:b3:5d:f7:b9:
         e1:36:22:ff:74:7d:ce:15:30:5a:e8:bf:2e:9e:28:c1:a1:0b:
         9d:42:16:6a:36:e1:04:04:ea:ff:03:b7:d7:ed:f2:80:cb:f0:
         d6:d4:2f:c6:75:14:8d:cd:a5:b6:c5:d2:bd:ed:68:38:c9:1a:
         bc:3d:15:8b:5c:23:e8:bb:4b:11:3d:04:6d:ea:9e:29:ed:84:
         87:ec:4e:3d:7a:28:dc:6d:30:18:f1:98:df:52:04:d8:6d:aa:
         0f:ce:e6:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 18:58:31 2025 by rpki-client