Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3231302e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3231302e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          MUDo9B+de1OxAx0fF3/zRmym/IeHrCr2bvxB8LPe+M8=
Subject key identifier:   57:F4:64:CE:47:1A:EB:52:6E:69:F6:10:48:8C:B3:0A:1D:19:47:67
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       1933B4C659D5975F3BED7986C56667D2F8EDC910
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3231302e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 05 Mar 2025 19:00:05 +0000
ROA not before:           Wed 05 Mar 2025 18:55:05 +0000
ROA not after:            Wed 04 Mar 2026 19:00:05 +0000
asID:                     4230
IP address blocks:        200.210.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:33:b4:c6:59:d5:97:5f:3b:ed:79:86:c5:66:67:d2:f8:ed:c9:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Mar  5 18:55:05 2025 GMT
            Not After : Mar  4 19:00:05 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:50:5b:0d:f2:e1:be:33:e6:c3:7f:cd:c4:ab:
                    3f:7b:56:d0:31:ab:8c:e6:cc:e0:3f:9d:07:64:a4:
                    8d:58:0b:a5:fa:16:5a:e0:9d:60:35:77:89:20:54:
                    5b:8c:f9:ae:3a:6e:02:b2:28:43:28:45:91:8a:66:
                    e3:81:a3:56:80:c8:a3:35:dd:39:0a:f6:76:e9:f0:
                    66:5c:a3:e6:6f:36:78:25:a5:6b:ac:bb:29:61:74:
                    8e:65:61:bf:45:86:35:2e:d7:63:20:0f:90:6c:12:
                    cd:65:1d:e7:74:8c:5e:f9:77:0e:ef:f2:04:aa:f6:
                    e9:9b:5b:c5:11:8e:7c:d0:8d:44:15:78:82:c9:51:
                    d7:f8:e5:59:31:cc:09:fe:dc:6b:6d:86:a7:01:8c:
                    99:fe:4b:d2:69:cb:89:ab:69:50:a9:37:b2:5c:35:
                    3b:93:20:d4:db:71:9a:48:07:6e:a6:3a:db:88:de:
                    29:d9:5b:5b:38:76:f4:d0:08:42:f8:21:1e:39:5f:
                    32:ac:2f:c4:a3:5d:f8:bf:fe:fb:1a:59:c4:f6:fa:
                    2f:70:ce:42:69:10:98:14:6d:96:7f:a4:a5:68:8f:
                    61:d5:55:df:ee:41:df:13:f5:25:ad:04:06:4c:13:
                    16:78:41:4d:92:a6:98:c5:a6:63:0a:6c:83:31:6b:
                    22:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:F4:64:CE:47:1A:EB:52:6E:69:F6:10:48:8C:B3:0A:1D:19:47:67
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3231302e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.210.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a4:d8:20:a0:11:4e:7f:2a:ef:34:41:e8:af:9b:2b:1e:a3:1d:
         64:60:a6:0f:ab:77:54:2b:90:bf:ed:cb:32:8d:de:2b:98:90:
         ab:d7:d9:cd:03:0f:e7:ce:26:46:a8:c5:e4:9d:49:28:8f:d2:
         28:4b:1e:15:78:ea:01:da:b1:56:e8:c4:4e:b5:fa:cd:2a:64:
         83:d2:55:6a:3f:a4:bb:67:61:40:3b:98:4e:f2:a5:96:85:b8:
         8c:84:5f:97:fc:99:eb:80:2d:85:00:44:cf:63:62:04:ba:c6:
         18:85:8b:91:d9:aa:67:5b:6c:e1:b9:a5:92:ba:48:4f:6b:64:
         6f:f8:40:9a:c5:0d:47:0c:46:2c:41:d6:71:8f:03:85:51:13:
         89:67:e2:7a:75:40:dd:35:e1:96:24:7f:d1:62:29:3c:b2:3a:
         73:09:da:60:01:a6:43:e3:4a:cb:c5:a7:a7:57:00:db:70:cc:
         e3:db:e8:68:4a:01:d4:0b:af:a7:9b:9b:3b:fa:44:91:1e:1a:
         74:c7:d8:70:72:47:99:d7:5a:c2:51:4e:67:3c:d9:88:06:85:
         da:fc:da:69:45:3c:62:d5:7d:02:7a:2e:9d:7c:10:de:3e:3d:
         75:fc:98:d7:8e:55:4c:35:ef:95:32:69:ee:2e:7d:99:fc:87:
         80:3a:b4:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:00:03 2025 by rpki-client