Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3231322e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3231322e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          4OaN+JXmnKN+xv2X6itZL/Jr9lwHVSFY/fI5Z3ooXfU=
Subject key identifier:   0F:9A:62:7C:0A:44:3F:5A:17:B4:FC:77:56:43:49:27:1E:0C:0F:8A
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       32D31ABCE1FA7E9BAF3463F5F09273B9D52ABB23
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3231322e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 05 Mar 2025 19:00:02 +0000
ROA not before:           Wed 05 Mar 2025 18:55:02 +0000
ROA not after:            Wed 04 Mar 2026 19:00:02 +0000
asID:                     4230
IP address blocks:        200.212.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:d3:1a:bc:e1:fa:7e:9b:af:34:63:f5:f0:92:73:b9:d5:2a:bb:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Mar  5 18:55:02 2025 GMT
            Not After : Mar  4 19:00:02 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:80:3f:e7:ec:05:b9:85:05:c1:d4:1e:69:44:
                    be:3e:c3:c2:17:81:87:50:0d:ec:4f:1a:e6:94:b2:
                    7e:7b:55:b0:7c:ff:d4:d4:0f:22:e0:3b:d6:63:8e:
                    77:f5:f5:b4:fa:1e:f9:2b:14:58:e2:3b:90:de:00:
                    40:fc:f3:56:86:cc:16:63:42:bf:59:6a:42:22:fe:
                    cb:91:0e:4b:79:b4:df:7d:37:59:b7:2e:b9:90:64:
                    7d:4b:18:e7:8f:a1:ba:de:77:46:97:da:8f:19:45:
                    e0:26:9d:af:31:aa:eb:81:14:77:45:2b:dc:9a:cc:
                    32:4f:d7:e1:02:78:8e:4c:56:12:42:84:55:55:8c:
                    c4:e8:9f:e5:ed:64:0d:0e:56:40:0d:a3:0f:f1:67:
                    02:c7:c5:e9:ce:9e:f9:2a:e7:d7:d8:0a:58:42:e0:
                    31:1e:38:77:cc:7c:ab:3a:b0:6e:53:2f:55:c8:07:
                    5c:e5:f7:40:fa:ff:ef:52:92:a8:d8:ff:82:db:cb:
                    66:e0:a2:e8:4e:93:f2:0d:df:22:35:d0:82:cc:64:
                    c5:f0:ae:c6:80:59:fd:27:d2:e2:c0:4c:54:bc:06:
                    b6:b0:cd:62:37:71:67:6b:e9:98:37:8f:dc:b5:1b:
                    e5:f0:3b:27:92:35:bc:9e:62:99:c5:28:18:92:88:
                    b9:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:9A:62:7C:0A:44:3F:5A:17:B4:FC:77:56:43:49:27:1E:0C:0F:8A
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3231322e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.212.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         70:56:58:74:a4:ce:4f:33:95:40:2c:ea:08:cc:19:0c:f3:4b:
         7d:b5:31:01:8b:cd:14:5a:b0:30:50:81:1e:62:b5:1e:18:59:
         c3:b0:3e:9b:0a:12:11:40:2d:02:1f:c7:fd:1e:c2:ff:c0:ed:
         60:13:1b:8c:d1:13:e6:1c:e7:2c:de:b4:de:c9:48:96:13:aa:
         8a:d8:dd:2f:d2:ba:14:74:ad:fb:12:50:6b:19:53:f9:9d:3a:
         bc:fb:c5:08:cc:1c:77:1a:f4:9f:fa:cc:c9:7b:a2:40:9f:05:
         03:d2:a7:aa:2c:d0:8c:ba:64:a1:82:5e:e2:cf:d5:db:92:59:
         fd:6f:4a:32:6c:b8:10:a1:77:9b:69:d3:63:6e:2c:b1:2b:1b:
         8d:ee:53:b6:00:e2:a1:4a:e6:61:fd:fc:e7:c1:f2:e5:68:70:
         ce:59:e8:ab:88:65:22:6d:af:7b:b1:45:64:82:84:94:00:ea:
         05:63:25:cb:30:f6:66:0f:bd:b9:bc:72:56:96:95:99:68:ae:
         7c:c6:9d:38:5c:a5:1c:05:ee:fb:27:f1:ef:5e:3b:66:fc:d2:
         a6:a5:62:f0:59:39:54:dc:56:e8:0d:ba:65:c2:b7:b0:63:56:
         cd:11:9f:1b:10:fe:20:55:26:47:6e:f5:f6:a1:f6:e4:d0:71:
         f7:da:3e:5b
-----BEGIN CERTIFICATE-----
MIIHPDCCBiSgAwIBAgIUMtMavOH6fpuvNGP18JJzudUquyMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ5REY2OTU4QTU5RkNGQTkxMDA3MTU2N0JBQjA3OTA0
RUQwNzUxRDAeFw0yNTAzMDUxODU1MDJaFw0yNjAzMDQxOTAwMDJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjU4MDNGRTdFQzA1Qjk4NTA1
QzFENDFFNjk0NEJFM0VDM0MyMTc4MTg3NTAwREVDNEYxQUU2OTRCMjdFN0I1NUIw
N0NGRkQ0RDQwRjIyRTAzQkQ2NjM4RTc3RjVGNUI0RkExRUY5MkIxNDU4RTIzQjkw
REUwMDQwRkNGMzU2ODZDQzE2NjM0MkJGNTk2QTQyMjJGRUNCOTEwRTRCNzlCNERG
N0QzNzU5QjcyRUI5OTA2NDdENEIxOEU3OEZBMUJBREU3NzQ2OTdEQThGMTk0NUUw
MjY5REFGMzFBQUVCODExNDc3NDUyQkRDOUFDQzMyNEZEN0UxMDI3ODhFNEM1NjEy
NDI4NDU1NTU4Q0M0RTg5RkU1RUQ2NDBEMEU1NjQwMERBMzBGRjE2NzAyQzdDNUU5
Q0U5RUY5MkFFN0Q3RDgwQTU4NDJFMDMxMUUzODc3Q0M3Q0FCM0FCMDZFNTMyRjU1
QzgwNzVDRTVGNzQwRkFGRkVGNTI5MkE4RDhGRjgyREJDQjY2RTBBMkU4NEU5M0Yy
MERERjIyMzVEMDgyQ0M2NEM1RjBBRUM2ODA1OUZEMjdEMkUyQzA0QzU0QkMwNkI2
QjBDRDYyMzc3MTY3NkJFOTk4Mzc4RkRDQjUxQkU1RjAzQjI3OTIzNUJDOUU2Mjk5
QzUyODE4OTI4OEI5RTkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAtYA/5+wFuYUFwdQeaUS+PsPCF4GHUA3sTxrmlLJ+e1WwfP/U1A8i
4DvWY4539fW0+h75KxRY4juQ3gBA/PNWhswWY0K/WWpCIv7LkQ5LebTffTdZty65
kGR9Sxjnj6G63ndGl9qPGUXgJp2vMarrgRR3RSvcmswyT9fhAniOTFYSQoRVVYzE
6J/l7WQNDlZADaMP8WcCx8Xpzp75KufX2ApYQuAxHjh3zHyrOrBuUy9VyAdc5fdA
+v/vUpKo2P+C28tm4KLoTpPyDd8iNdCCzGTF8K7GgFn9J9LiwExUvAa2sM1iN3Fn
a+mYN4/ctRvl8DsnkjW8nmKZxSgYkoi56QIDAQABo4ICSjCCAkYwHQYDVR0OBBYE
FA+aYnwKRD9aF7T8d1ZDSSceDA+KMB8GA1UdIwQYMBaAFBSd9pWKWfz6kQBxVnur
B5BO0HUdMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dVUjRKZWR2WlNuYjho
S21NVWdRNjg3YjRNWFhtMzVtU1pETUxRTkhTRnBwLzEvMTQ5REY2OTU4QTU5RkNG
QTkxMDA3MTU2N0JBQjA3OTA0RUQwNzUxRC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8xNDlERjY5NThBNTlGQ0ZBOTEwMDcxNTY3QkFCMDc5MDRFRDA3
NTFELmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVVI0SmVkdlpTbmI4aEttTVVn
UTY4N2I0TVhYbTM1bVNaRE1MUU5IU0ZwcC8xLzMyMzAzMDJlMzIzMTMyMmUzMDJl
MzAyZjMxMzYyZDMxMzYyMDNkM2UyMDM0MzIzMzMwLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAyNQwDQYJ
KoZIhvcNAQELBQADggEBAHBWWHSkzk8zlUAs6gjMGQzzS321MQGLzRRasDBQgR5i
tR4YWcOwPpsKEhFALQIfx/0ewv/A7WATG4zRE+Yc5yzetN7JSJYTqorY3S/SuhR0
rfsSUGsZU/mdOrz7xQjMHHca9J/6zMl7okCfBQPSp6os0Iy6ZKGCXuLP1duSWf1v
SjJsuBChd5tp02NuLLErG43uU7YA4qFK5mH9/OfB8uVocM5Z6KuIZSJtr3uxRWSC
hJQA6gVjJcsw9mYPvbm8claWlZlornzGnThcpRwF7vsn8e9eO2b80qalYvBZOVTc
VugNumXCt7BjVs0RnxsQ/iBVJkdu9fah9uTQcffaPls=
-----END CERTIFICATE-----
Generated at Sun Apr 6 19:00:12 2025 by rpki-client