Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3231342e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3231342e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          LE9uNvRA3DXkd/dTHA8S5OP0pJ06zZnL0nrqfqj0F2U=
Subject key identifier:   FD:2A:39:40:42:7B:19:EE:E8:7D:08:78:59:35:DF:59:AC:C5:C6:5F
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       3A0CABA2157A7F22B9558668591E505B23613BC4
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3231342e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     4230
IP address blocks:        200.214.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:0c:ab:a2:15:7a:7f:22:b9:55:86:68:59:1e:50:5b:23:61:3b:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:32:92:cf:bf:a6:4f:83:a6:2a:2c:18:52:5c:
                    e2:16:e1:4d:14:0c:6c:84:66:09:c3:29:0c:7a:b1:
                    e5:f9:cf:3d:2e:75:35:e8:ba:a1:f2:06:e2:fa:11:
                    38:6b:0c:d0:bf:a8:95:ae:64:93:9f:4a:fc:6c:c9:
                    19:90:8a:d0:10:a1:09:2b:e3:54:a4:2f:4b:79:a9:
                    06:ef:ce:18:a2:4a:7d:72:89:07:b3:a6:fd:77:ef:
                    51:b0:35:46:4e:8b:fb:74:f6:e6:d0:6f:6b:df:fe:
                    04:45:72:18:93:61:59:e0:57:f8:f4:1e:7a:0e:cc:
                    7f:21:fa:72:d1:a0:35:52:3d:1b:22:b7:2d:80:cd:
                    49:de:1b:8b:73:6c:36:5c:2a:96:14:d9:37:b5:b2:
                    4a:4f:c6:9b:5a:19:e5:ef:28:5c:38:4f:d8:60:31:
                    fc:da:96:95:fc:25:28:a4:f8:56:35:30:ea:e3:22:
                    1b:4f:5d:5d:99:07:10:e6:a9:45:d5:00:cb:ad:01:
                    8f:54:ad:99:10:0a:2b:40:4c:a8:6e:25:45:a1:96:
                    05:8d:1d:9d:17:64:e1:81:05:80:7f:ff:72:6f:2b:
                    63:a4:51:dc:54:13:85:18:6f:e7:94:1f:04:14:b5:
                    de:45:69:3a:18:61:f0:c3:f2:2f:5b:9d:b3:56:6f:
                    ff:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:2A:39:40:42:7B:19:EE:E8:7D:08:78:59:35:DF:59:AC:C5:C6:5F
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3231342e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.214.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         77:6e:5c:0a:a3:ba:dc:83:18:cb:63:95:71:3f:49:58:84:17:
         18:fa:fa:47:8f:29:b0:17:cb:64:d7:4e:d9:93:99:ed:1b:37:
         3f:ab:22:e8:7e:eb:e5:78:8a:a2:b9:24:02:bd:17:f4:7c:1e:
         1a:bd:a9:fb:e9:93:1f:3a:88:bf:91:99:b9:3d:63:f4:31:36:
         c0:e3:b8:21:6c:8a:75:d8:e7:70:1a:e7:93:4a:f8:49:aa:86:
         28:fd:69:84:2a:ab:41:41:c6:a0:5b:ee:80:8a:53:1e:3c:ac:
         63:a9:9c:b9:41:25:9a:4c:6f:64:09:39:02:55:af:e1:e2:a7:
         1d:1d:1e:d4:b3:40:7c:da:ef:57:b2:5e:e8:f0:06:26:14:0e:
         88:97:b2:97:c8:b5:99:a5:ff:59:40:c9:ce:02:03:62:7b:10:
         9c:11:fd:4e:54:5a:90:11:4c:29:e6:7d:3a:ba:e1:16:c9:21:
         b6:93:c3:39:ee:60:a7:8a:bd:2e:e0:29:ed:c7:4c:ca:a2:a2:
         7d:f4:20:b8:df:97:ac:0b:12:b0:d1:63:1f:f8:6f:6e:7a:95:
         45:d6:47:ef:77:33:50:e5:e4:8d:a2:82:a4:b5:8c:29:2f:c1:
         97:97:64:3f:7b:f9:f1:1c:99:30:94:9c:af:00:aa:3b:ba:3f:
         ed:02:f9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:02:37 2025 by rpki-client