Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3230392e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3230392e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          HRewMzVKd7OzjU+2rR8CSoRGdk6TEOOqHFO2b+nzoEw=
Subject key identifier:   16:A0:C2:82:F6:F3:04:BA:15:8B:F3:C7:93:89:F7:B9:FF:74:72:D1
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       11437E5DF09D2ECEA86DAF13F6CC66408B2C340F
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3230392e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 05 Mar 2025 19:00:07 +0000
ROA not before:           Wed 05 Mar 2025 18:55:07 +0000
ROA not after:            Wed 04 Mar 2026 19:00:07 +0000
asID:                     4230
IP address blocks:        200.209.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:43:7e:5d:f0:9d:2e:ce:a8:6d:af:13:f6:cc:66:40:8b:2c:34:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Mar  5 18:55:07 2025 GMT
            Not After : Mar  4 19:00:07 2026 GMT
        Subject: CN=3082010A0282010100AC6D5E60E8D36A3B1592A11ECE9E4FB2AEA3806F26E5CCF05DBB0678E1B3B23C60DCD1F1DEE076AC3750193437B580C271D00A5C59176BE52B962BE7752E17E5B02876A2B753468AA4C42B29592BC9A8ECE3BDF092BE261993918F72EE32D855696674646C6CAF6E671C4AF0B188EC82971F7EA803561B1197F27CB34C7C8AABA594673609373CED8B5A3AC1340587C2CBD1B0E246F11603303BE7782B68E5ACC385E451FC802D1F51272832C7DB6AF96B35A8A59246A23A3791403CAD29628B2A5E06637458DF0963C43707A69003CB2EB29B3F119E03568B8EF412886065C85FF9F71308A387434162B0AF95FEE25BBF60F194E3575ACB8B6FAFE052F7F8390203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6d:5e:60:e8:d3:6a:3b:15:92:a1:1e:ce:9e:
                    4f:b2:ae:a3:80:6f:26:e5:cc:f0:5d:bb:06:78:e1:
                    b3:b2:3c:60:dc:d1:f1:de:e0:76:ac:37:50:19:34:
                    37:b5:80:c2:71:d0:0a:5c:59:17:6b:e5:2b:96:2b:
                    e7:75:2e:17:e5:b0:28:76:a2:b7:53:46:8a:a4:c4:
                    2b:29:59:2b:c9:a8:ec:e3:bd:f0:92:be:26:19:93:
                    91:8f:72:ee:32:d8:55:69:66:74:64:6c:6c:af:6e:
                    67:1c:4a:f0:b1:88:ec:82:97:1f:7e:a8:03:56:1b:
                    11:97:f2:7c:b3:4c:7c:8a:ab:a5:94:67:36:09:37:
                    3c:ed:8b:5a:3a:c1:34:05:87:c2:cb:d1:b0:e2:46:
                    f1:16:03:30:3b:e7:78:2b:68:e5:ac:c3:85:e4:51:
                    fc:80:2d:1f:51:27:28:32:c7:db:6a:f9:6b:35:a8:
                    a5:92:46:a2:3a:37:91:40:3c:ad:29:62:8b:2a:5e:
                    06:63:74:58:df:09:63:c4:37:07:a6:90:03:cb:2e:
                    b2:9b:3f:11:9e:03:56:8b:8e:f4:12:88:60:65:c8:
                    5f:f9:f7:13:08:a3:87:43:41:62:b0:af:95:fe:e2:
                    5b:bf:60:f1:94:e3:57:5a:cb:8b:6f:af:e0:52:f7:
                    f8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:A0:C2:82:F6:F3:04:BA:15:8B:F3:C7:93:89:F7:B9:FF:74:72:D1
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3230392e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.209.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2c:ee:52:c4:0b:e6:95:73:fc:56:20:5d:db:1a:33:50:f3:3e:
         e2:b3:e8:2c:50:c8:2d:54:10:24:4d:0f:d1:ae:18:9b:97:15:
         9e:03:a8:77:59:06:eb:65:cb:b0:be:90:dd:c8:ab:b0:2e:67:
         84:d9:f1:7c:c3:ce:0d:5d:d1:5c:a2:da:dd:84:22:e2:97:bc:
         d0:a3:d5:f9:0e:1c:39:37:34:26:92:e8:69:d7:43:2d:38:61:
         e6:72:0e:ce:bd:36:b1:ad:ce:7f:6c:f7:1f:e1:2f:5b:47:94:
         7e:2d:d5:75:39:f8:2f:e4:df:46:5e:9d:5f:2d:e9:6b:05:78:
         7d:7a:ae:2a:a4:99:e7:a6:6d:72:42:a2:e0:c9:e3:d6:8a:13:
         61:33:3e:2a:f8:03:34:16:ff:2f:94:78:64:52:f4:bd:69:a9:
         45:be:86:1f:5e:72:6d:87:a1:dc:12:95:1a:5a:13:05:53:eb:
         53:b2:97:25:03:0b:a2:b0:f1:4e:c2:2e:10:89:4f:54:59:51:
         28:1b:75:a6:2d:59:cf:31:47:fa:37:34:d7:11:aa:e9:1d:60:
         62:82:59:e9:31:73:10:93:e4:5a:a5:68:4b:03:52:44:4e:ad:
         b0:19:8d:eb:b6:1b:04:ed:81:ae:5a:a7:f6:25:76:d3:85:e7:
         f1:85:c1:d1
-----BEGIN CERTIFICATE-----
MIIHPDCCBiSgAwIBAgIUEUN+XfCdLs6oba8T9sxmQIssNA8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ5REY2OTU4QTU5RkNGQTkxMDA3MTU2N0JBQjA3OTA0
RUQwNzUxRDAeFw0yNTAzMDUxODU1MDdaFw0yNjAzMDQxOTAwMDdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUM2RDVFNjBFOEQzNkEzQjE1
OTJBMTFFQ0U5RTRGQjJBRUEzODA2RjI2RTVDQ0YwNURCQjA2NzhFMUIzQjIzQzYw
RENEMUYxREVFMDc2QUMzNzUwMTkzNDM3QjU4MEMyNzFEMDBBNUM1OTE3NkJFNTJC
OTYyQkU3NzUyRTE3RTVCMDI4NzZBMkI3NTM0NjhBQTRDNDJCMjk1OTJCQzlBOEVD
RTNCREYwOTJCRTI2MTk5MzkxOEY3MkVFMzJEODU1Njk2Njc0NjQ2QzZDQUY2RTY3
MUM0QUYwQjE4OEVDODI5NzFGN0VBODAzNTYxQjExOTdGMjdDQjM0QzdDOEFBQkE1
OTQ2NzM2MDkzNzNDRUQ4QjVBM0FDMTM0MDU4N0MyQ0JEMUIwRTI0NkYxMTYwMzMw
M0JFNzc4MkI2OEU1QUNDMzg1RTQ1MUZDODAyRDFGNTEyNzI4MzJDN0RCNkFGOTZC
MzVBOEE1OTI0NkEyM0EzNzkxNDAzQ0FEMjk2MjhCMkE1RTA2NjM3NDU4REYwOTYz
QzQzNzA3QTY5MDAzQ0IyRUIyOUIzRjExOUUwMzU2OEI4RUY0MTI4ODYwNjVDODVG
RjlGNzEzMDhBMzg3NDM0MTYyQjBBRjk1RkVFMjVCQkY2MEYxOTRFMzU3NUFDQjhC
NkZBRkUwNTJGN0Y4MzkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEArG1eYOjTajsVkqEezp5Psq6jgG8m5czwXbsGeOGzsjxg3NHx3uB2
rDdQGTQ3tYDCcdAKXFkXa+UrlivndS4X5bAodqK3U0aKpMQrKVkryajs473wkr4m
GZORj3LuMthVaWZ0ZGxsr25nHErwsYjsgpcffqgDVhsRl/J8s0x8iqullGc2CTc8
7YtaOsE0BYfCy9Gw4kbxFgMwO+d4K2jlrMOF5FH8gC0fUScoMsfbavlrNailkkai
OjeRQDytKWKLKl4GY3RY3wljxDcHppADyy6ymz8RngNWi470EohgZchf+fcTCKOH
Q0FisK+V/uJbv2DxlONXWsuLb6/gUvf4OQIDAQABo4ICSjCCAkYwHQYDVR0OBBYE
FBagwoL28wS6FYvzx5OJ97n/dHLRMB8GA1UdIwQYMBaAFBSd9pWKWfz6kQBxVnur
B5BO0HUdMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dVUjRKZWR2WlNuYjho
S21NVWdRNjg3YjRNWFhtMzVtU1pETUxRTkhTRnBwLzEvMTQ5REY2OTU4QTU5RkNG
QTkxMDA3MTU2N0JBQjA3OTA0RUQwNzUxRC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8xNDlERjY5NThBNTlGQ0ZBOTEwMDcxNTY3QkFCMDc5MDRFRDA3
NTFELmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVVI0SmVkdlpTbmI4aEttTVVn
UTY4N2I0TVhYbTM1bVNaRE1MUU5IU0ZwcC8xLzMyMzAzMDJlMzIzMDM5MmUzMDJl
MzAyZjMxMzYyZDMxMzYyMDNkM2UyMDM0MzIzMzMwLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAyNEwDQYJ
KoZIhvcNAQELBQADggEBACzuUsQL5pVz/FYgXdsaM1DzPuKz6CxQyC1UECRND9Gu
GJuXFZ4DqHdZButly7C+kN3Iq7AuZ4TZ8XzDzg1d0Vyi2t2EIuKXvNCj1fkOHDk3
NCaS6GnXQy04YeZyDs69NrGtzn9s9x/hL1tHlH4t1XU5+C/k30ZenV8t6WsFeH16
riqkmeembXJCouDJ49aKE2EzPir4AzQW/y+UeGRS9L1pqUW+hh9ecm2HodwSlRpa
EwVT61OylyUDC6Kw8U7CLhCJT1RZUSgbdaYtWc8xR/o3NNcRqukdYGKCWekxcxCT
5FqlaEsDUkROrbAZjeu2GwTtga5ap/YldtOF5/GFwdE=
-----END CERTIFICATE-----
Generated at Sun Apr 6 19:02:38 2025 by rpki-client