Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3230382e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3230382e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          x2VSEo7nZ7JZhP++TBotzoT4zbw3u+ccNc4bqoHtCNI=
Subject key identifier:   32:34:12:7F:29:13:0C:1D:E3:2D:4D:10:35:44:50:59:76:92:49:C3
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       3B594609D364EC31D84750B3C1028BF30C37581F
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3230382e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     4230
IP address blocks:        200.208.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:59:46:09:d3:64:ec:31:d8:47:50:b3:c1:02:8b:f3:0c:37:58:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5f:f1:95:b0:a5:bc:ba:e6:72:87:e0:05:13:
                    a0:ea:ff:11:5f:92:e4:d4:8d:4b:c6:fb:e9:ad:6a:
                    36:66:cd:c6:46:1d:24:18:ab:78:0f:e0:71:54:e3:
                    79:68:ab:8f:e1:67:14:37:a8:c3:e4:0d:2d:19:41:
                    14:a4:ae:ba:10:4d:ae:61:c2:37:3a:b2:fe:49:e4:
                    5b:bc:37:6c:ec:ac:aa:28:bf:9d:3f:c5:81:6c:02:
                    bc:c1:7e:9c:8d:bc:a6:0b:a4:52:bd:c0:18:b5:f8:
                    12:0a:46:11:e2:b8:40:2e:42:40:84:3a:d0:f9:02:
                    b6:19:5a:dd:36:0a:03:b5:e9:13:55:bb:e7:24:17:
                    dc:99:a7:a8:63:89:fb:f8:93:cb:e6:16:98:82:cd:
                    ed:40:62:29:99:f6:26:f8:87:ef:6e:2f:be:aa:dd:
                    b2:be:7c:a6:d3:b1:1e:c1:54:fc:5f:0e:06:77:f5:
                    e7:dc:58:d4:03:fd:7e:90:3c:3a:ae:3b:92:2a:a9:
                    10:94:6c:ee:ee:90:84:f6:eb:d5:a7:31:a9:e2:6a:
                    1b:36:50:aa:6b:64:96:75:de:37:df:06:fc:65:33:
                    24:77:c1:61:6b:e7:ef:05:b0:ee:d5:42:95:3e:92:
                    4b:90:6d:08:1f:b6:73:52:a9:61:1c:73:89:09:87:
                    6c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:34:12:7F:29:13:0C:1D:E3:2D:4D:10:35:44:50:59:76:92:49:C3
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3230382e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.208.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7a:62:ab:a9:43:86:ab:22:b6:90:82:56:59:e8:ca:4f:e4:24:
         6e:5d:bc:82:55:2b:d4:d2:05:98:0c:90:bd:02:a2:ca:b3:35:
         24:4d:06:54:54:2e:5d:2e:77:0b:38:bb:6c:06:0a:6b:70:73:
         b8:35:ed:6f:9d:b6:78:b1:2e:5a:90:cd:c4:a9:5a:33:0a:2a:
         d3:b0:2d:3b:3a:1e:0c:ac:a0:ca:aa:f5:5f:20:80:5c:e2:22:
         2d:fe:94:86:4b:62:2a:5e:28:86:17:4b:95:ef:f5:24:83:64:
         d3:af:17:f0:9a:f2:23:26:71:4b:64:0d:83:4f:b7:b7:49:af:
         e7:96:38:8b:15:3f:68:81:50:f1:93:48:98:99:e4:85:70:8b:
         1a:47:6d:73:a7:5d:ec:cf:34:1a:18:76:e9:e1:e1:ae:8a:1b:
         82:52:7e:f9:30:d6:7a:3a:55:14:ab:1f:b5:4a:39:7b:da:a2:
         8d:83:65:90:02:b6:cb:35:8d:a0:f0:93:65:50:24:c5:6e:1a:
         07:8b:2b:5e:c4:9b:69:75:ab:e0:4c:de:7f:06:c3:a6:86:59:
         11:ee:08:fa:ed:26:62:86:6e:34:b2:e1:8e:9e:1d:ac:5c:1d:
         7e:ee:15:25:88:4f:2e:a9:4f:ba:ce:aa:d0:ff:01:de:75:20:
         97:56:7e:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:05:13 2025 by rpki-client