Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3231312e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3231312e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          +6Ly1evTOF2pc6g8+o11G7MyFyQh6iZ7H8PQ1sBefgY=
Subject key identifier:   FE:60:1B:82:BA:BE:76:83:B4:15:0F:16:3C:05:3D:90:4C:92:E0:99
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       3C7D192063B69A448D82B813AB05F59707B58B39
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3231312e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 05 Mar 2025 19:00:06 +0000
ROA not before:           Wed 05 Mar 2025 18:55:06 +0000
ROA not after:            Wed 04 Mar 2026 19:00:06 +0000
asID:                     4230
IP address blocks:        200.211.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:7d:19:20:63:b6:9a:44:8d:82:b8:13:ab:05:f5:97:07:b5:8b:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Mar  5 18:55:06 2025 GMT
            Not After : Mar  4 19:00:06 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:27:63:40:4d:1e:93:a2:83:0a:5b:95:7a:eb:
                    65:4d:fd:40:d6:ab:67:b8:7c:aa:87:8f:83:f7:e0:
                    03:e8:9b:9e:ef:00:9e:bc:1c:2a:57:c8:b8:db:59:
                    cc:cd:f8:11:39:73:e1:40:d5:ed:56:64:ff:d5:96:
                    d7:14:70:91:ac:7f:54:a1:82:25:e1:ff:09:91:f9:
                    4e:68:3b:cc:20:04:9c:d4:02:30:3d:c5:aa:82:5b:
                    22:6a:73:2e:78:8b:bf:4e:94:53:3e:22:e6:5e:f9:
                    4d:df:09:56:b9:e4:25:19:65:df:27:cc:b6:b5:8a:
                    71:ab:1a:f0:26:f0:c0:6c:47:3d:bf:bf:e5:5b:b6:
                    64:26:33:58:fc:5f:c6:02:e8:2f:16:82:2e:1b:68:
                    01:05:7a:08:f3:44:4c:bc:bf:31:ec:d7:7f:e5:10:
                    f7:f7:7a:92:1f:01:3a:98:9d:19:0c:03:9c:92:69:
                    ac:e1:c2:24:b6:b3:66:57:11:34:97:02:0f:36:01:
                    11:58:53:e4:65:09:cb:cd:c9:b6:2c:ca:0e:27:85:
                    f4:dd:50:7b:71:71:3b:34:df:47:2d:1e:c0:a6:e2:
                    57:87:c4:e2:04:61:71:09:50:9f:0d:24:43:cc:b4:
                    45:12:22:95:2f:96:fe:2f:59:0a:73:22:97:24:e8:
                    0e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:60:1B:82:BA:BE:76:83:B4:15:0F:16:3C:05:3D:90:4C:92:E0:99
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3231312e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.211.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         11:f3:9d:ff:1d:93:b5:0b:8a:b4:c7:08:34:aa:ac:b6:29:61:
         ed:93:85:92:55:df:5a:13:ae:c2:cc:f0:05:74:7c:6a:53:74:
         4e:3b:75:5d:bf:7b:70:54:37:e3:d0:c5:6f:3e:50:47:5d:91:
         63:cd:17:c9:b3:a5:60:98:91:89:fa:75:10:fe:c9:49:c4:bc:
         23:62:f3:08:12:1a:b0:6e:c2:6d:65:7e:97:6f:e7:47:6d:4b:
         7c:34:5c:06:73:04:ab:99:12:e2:52:4b:ff:48:6e:91:90:30:
         e0:85:de:1b:e1:66:93:00:1b:0e:32:38:7a:47:be:c6:8f:57:
         5e:ae:79:92:c5:a9:d4:cf:9b:9c:9d:a1:04:00:6e:73:b1:b5:
         3e:2c:b7:3a:c7:2c:a7:b2:3b:87:ba:e3:4b:47:07:a1:61:93:
         36:6c:b5:c2:fd:4c:70:62:92:f2:71:2a:8b:d3:bf:bc:bd:50:
         b1:fa:37:ad:d4:d2:14:41:c5:00:dd:27:95:c7:70:de:4d:6d:
         bb:d5:ec:35:5b:11:14:ab:03:c4:63:b8:4f:37:95:95:16:2a:
         2c:60:1f:51:48:a9:77:95:f5:4d:03:8c:8d:e9:4c:a1:15:3e:
         e5:b8:ac:f1:66:7d:6d:c4:5e:8b:ee:76:d3:50:dc:d0:b2:94:
         dc:e6:b8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:38:54 2025 by rpki-client