Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3138322e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3138322e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          ST6oVoY9lI9DrrZD1I5zPzLF4ia+f/6eMjvAE4Kz7Po=
Subject key identifier:   0A:9C:1C:5B:83:DF:C8:AE:86:95:38:7A:57:F3:45:E4:0F:3B:66:39
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       68BB9497C953FB5CAE70C354D1A5315D975774C3
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3138322e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     4230
IP address blocks:        200.182.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:bb:94:97:c9:53:fb:5c:ae:70:c3:54:d1:a5:31:5d:97:57:74:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d0:4e:6b:68:07:aa:b6:25:19:92:8d:4f:fe:
                    12:eb:6e:f8:ac:58:82:92:0e:41:f7:80:f0:44:97:
                    65:29:f6:8d:e4:ad:1a:c4:0c:33:66:29:1f:77:e7:
                    e2:b8:5f:0d:5b:b2:c1:bb:9b:6e:ed:20:71:6f:d8:
                    ac:f4:43:35:b7:3e:18:57:a8:4c:7a:1e:11:bb:5a:
                    79:c3:69:2d:9c:c3:83:68:63:5c:42:b3:21:83:d9:
                    01:9b:84:2b:6d:19:d7:6b:9c:b5:ba:ca:30:97:22:
                    62:10:7b:6c:26:20:10:8b:3c:80:6e:94:1e:b3:2e:
                    03:28:c8:91:69:84:23:23:8c:5c:b9:2d:a3:31:b6:
                    d2:00:59:9e:53:89:c4:f4:f3:ca:f8:77:c0:76:c1:
                    89:07:46:50:67:7c:5e:b4:71:cd:f1:da:4f:94:ae:
                    43:84:c9:55:51:52:6b:f5:b5:dc:fb:50:fa:31:94:
                    dd:86:04:29:0c:e4:f6:06:3e:89:61:36:57:28:d2:
                    d3:57:55:e2:70:aa:11:d7:ca:0b:d5:cc:cb:68:82:
                    34:2f:f7:7e:e4:ac:ba:f2:45:bc:ad:d2:ed:b1:26:
                    d8:ab:dd:bf:cd:6f:f4:66:16:d4:95:b4:20:1a:f9:
                    1e:a8:7f:9e:ad:c5:9a:67:4b:84:c9:18:9e:92:4b:
                    e0:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:9C:1C:5B:83:DF:C8:AE:86:95:38:7A:57:F3:45:E4:0F:3B:66:39
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3138322e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.182.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6d:87:ad:bb:cb:52:1f:10:1f:bd:8b:7c:5f:cd:44:81:7a:d7:
         91:37:2c:23:0e:51:a1:04:f1:36:f8:bd:5e:0e:69:65:47:06:
         42:35:e9:66:a3:06:28:64:61:31:6a:4a:77:96:3f:cf:d9:ee:
         f4:52:24:c0:0e:cd:79:d4:a2:29:9a:59:83:d2:89:96:b8:35:
         b0:ab:99:85:13:2b:64:e5:77:47:6f:a8:fe:60:b4:d4:e4:a5:
         7a:5b:21:91:75:89:b3:eb:54:bc:9e:cb:35:76:a7:1e:a1:2c:
         4d:4b:fe:75:72:96:30:9f:c7:f3:86:c7:ec:62:42:39:93:45:
         d7:ce:c7:4c:bc:a0:d5:ac:42:e0:50:a7:b8:b0:d7:6d:fb:26:
         7b:90:9c:1b:9b:7f:b6:d6:90:d9:da:e9:a4:4b:23:4c:ad:96:
         9c:52:61:59:50:0a:27:d1:79:bf:ab:49:89:29:46:59:5f:a7:
         96:a1:46:d6:18:16:9b:83:07:20:52:8b:24:c3:ac:17:3a:d8:
         8c:4f:1a:16:59:eb:07:de:eb:af:3d:99:d7:45:b8:04:ef:48:
         1a:b3:9c:ce:16:e2:80:31:63:98:f5:56:6e:71:14:0a:08:82:
         01:ed:36:79:ef:b0:9d:10:a3:91:de:e9:91:c8:4a:75:af:d0:
         13:59:2d:8b
-----BEGIN CERTIFICATE-----
MIIHPDCCBiSgAwIBAgIUaLuUl8lT+1yucMNU0aUxXZdXdMMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ5REY2OTU4QTU5RkNGQTkxMDA3MTU2N0JBQjA3OTA0
RUQwNzUxRDAeFw0yNTAzMDUxODU1MDBaFw0yNjAzMDQxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTREMDRFNkI2ODA3QUFCNjI1
MTk5MjhENEZGRTEyRUI2RUY4QUM1ODgyOTIwRTQxRjc4MEYwNDQ5NzY1MjlGNjhE
RTRBRDFBQzQwQzMzNjYyOTFGNzdFN0UyQjg1RjBENUJCMkMxQkI5QjZFRUQyMDcx
NkZEOEFDRjQ0MzM1QjczRTE4NTdBODRDN0ExRTExQkI1QTc5QzM2OTJEOUNDMzgz
Njg2MzVDNDJCMzIxODNEOTAxOUI4NDJCNkQxOUQ3NkI5Q0I1QkFDQTMwOTcyMjYy
MTA3QjZDMjYyMDEwOEIzQzgwNkU5NDFFQjMyRTAzMjhDODkxNjk4NDIzMjM4QzVD
QjkyREEzMzFCNkQyMDA1OTlFNTM4OUM0RjRGM0NBRjg3N0MwNzZDMTg5MDc0NjUw
Njc3QzVFQjQ3MUNERjFEQTRGOTRBRTQzODRDOTU1NTE1MjZCRjVCNURDRkI1MEZB
MzE5NEREODYwNDI5MENFNEY2MDYzRTg5NjEzNjU3MjhEMkQzNTc1NUUyNzBBQTEx
RDdDQTBCRDVDQ0NCNjg4MjM0MkZGNzdFRTRBQ0JBRjI0NUJDQUREMkVEQjEyNkQ4
QUJEREJGQ0Q2RkY0NjYxNkQ0OTVCNDIwMUFGOTFFQTg3RjlFQURDNTlBNjc0Qjg0
QzkxODlFOTI0QkUwNTcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEApNBOa2gHqrYlGZKNT/4S6274rFiCkg5B94DwRJdlKfaN5K0axAwz
Zikfd+fiuF8NW7LBu5tu7SBxb9is9EM1tz4YV6hMeh4Ru1p5w2ktnMODaGNcQrMh
g9kBm4QrbRnXa5y1usowlyJiEHtsJiAQizyAbpQesy4DKMiRaYQjI4xcuS2jMbbS
AFmeU4nE9PPK+HfAdsGJB0ZQZ3xetHHN8dpPlK5DhMlVUVJr9bXc+1D6MZTdhgQp
DOT2Bj6JYTZXKNLTV1XicKoR18oL1czLaII0L/d+5Ky68kW8rdLtsSbYq92/zW/0
ZhbUlbQgGvkeqH+ercWaZ0uEyRiekkvgVwIDAQABo4ICSjCCAkYwHQYDVR0OBBYE
FAqcHFuD38iuhpU4elfzReQPO2Y5MB8GA1UdIwQYMBaAFBSd9pWKWfz6kQBxVnur
B5BO0HUdMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dVUjRKZWR2WlNuYjho
S21NVWdRNjg3YjRNWFhtMzVtU1pETUxRTkhTRnBwLzEvMTQ5REY2OTU4QTU5RkNG
QTkxMDA3MTU2N0JBQjA3OTA0RUQwNzUxRC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8xNDlERjY5NThBNTlGQ0ZBOTEwMDcxNTY3QkFCMDc5MDRFRDA3
NTFELmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVVI0SmVkdlpTbmI4aEttTVVn
UTY4N2I0TVhYbTM1bVNaRE1MUU5IU0ZwcC8xLzMyMzAzMDJlMzEzODMyMmUzMDJl
MzAyZjMxMzYyZDMxMzYyMDNkM2UyMDM0MzIzMzMwLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAyLYwDQYJ
KoZIhvcNAQELBQADggEBAG2HrbvLUh8QH72LfF/NRIF615E3LCMOUaEE8Tb4vV4O
aWVHBkI16WajBihkYTFqSneWP8/Z7vRSJMAOzXnUoimaWYPSiZa4NbCrmYUTK2Tl
d0dvqP5gtNTkpXpbIZF1ibPrVLyeyzV2px6hLE1L/nVyljCfx/OGx+xiQjmTRdfO
x0y8oNWsQuBQp7iw1237JnuQnBubf7bWkNna6aRLI0ytlpxSYVlQCifReb+rSYkp
Rllfp5ahRtYYFpuDByBSiyTDrBc62IxPGhZZ6wfe6689mddFuATvSBqznM4W4oAx
Y5j1Vm5xFAoIggHtNnnvsJ0Qo5He6ZHISnWv0BNZLYs=
-----END CERTIFICATE-----
Generated at Sun Apr 6 21:26:05 2025 by rpki-client