Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3233312e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3233312e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          PP5q8zKYV0vBK1CNJLiTQxrE+QKyn7wffNv8PSH4Vx8=
Subject key identifier:   31:77:D7:4F:C9:6A:68:82:7F:38:FA:89:E6:D6:59:E1:A1:4B:74:3E
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       5A1DE1579E290371683341BA6CF0ED28869AC3CE
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3233312e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     4230
IP address blocks:        200.231.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:1d:e1:57:9e:29:03:71:68:33:41:ba:6c:f0:ed:28:86:9a:c3:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:60:16:3e:83:96:ec:13:21:57:b3:51:44:0f:
                    ed:49:69:41:7b:a9:c3:da:51:c6:06:1f:87:f6:a1:
                    d0:75:fe:c7:25:b1:f7:d4:f3:a5:59:56:7b:72:00:
                    a2:56:03:a9:2e:e7:b8:e8:4e:bf:ee:a2:69:4b:ab:
                    5c:b5:9a:1e:62:66:45:02:ce:bb:79:2e:87:db:9d:
                    eb:33:44:a2:a0:b2:d6:50:e8:be:ba:ba:ca:02:51:
                    f8:e9:a1:1c:9f:e6:56:7a:e8:a9:25:78:73:15:fc:
                    85:22:14:6d:12:03:e7:ab:4c:41:26:ad:66:59:9a:
                    66:bb:f8:34:6e:ac:85:e1:9b:49:4a:1f:ad:99:15:
                    ba:e7:54:7f:7f:46:6c:a7:e0:c9:c6:55:ba:ee:81:
                    1a:73:91:26:36:d4:4c:d8:eb:eb:7b:89:57:c4:ba:
                    b4:b2:1a:df:c2:b5:9c:76:ec:67:52:7f:c3:0e:dd:
                    b7:78:49:8e:de:04:9c:02:09:56:64:02:2a:ef:fd:
                    9a:58:d7:34:36:a4:db:f7:ba:00:d9:08:09:64:35:
                    2d:74:b8:38:15:f5:19:9e:69:b7:e7:d2:5d:23:41:
                    90:a7:7b:ec:90:45:f3:b2:94:60:d0:01:89:09:d8:
                    08:91:89:ce:43:8c:02:3f:75:a3:89:28:9e:0f:0c:
                    e3:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:77:D7:4F:C9:6A:68:82:7F:38:FA:89:E6:D6:59:E1:A1:4B:74:3E
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3233312e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.231.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         91:42:7d:e2:84:2c:d6:b9:b4:da:a1:82:1b:37:d0:8f:e5:e9:
         75:20:08:9b:25:9f:76:0c:77:1b:41:64:82:a4:ed:81:ab:04:
         86:d8:1f:ad:dc:73:37:e6:ee:2c:07:cc:f8:af:d1:2a:9b:fa:
         90:5b:c2:26:97:b6:2d:aa:a4:3c:5e:28:af:31:22:22:be:cd:
         b1:f1:67:46:df:a1:29:7a:a2:13:ce:26:6a:6d:cb:c8:9c:a2:
         7d:16:6a:12:4d:58:03:cd:73:ec:e7:a0:df:c3:49:e9:b2:b3:
         bf:03:2e:b4:88:23:81:6c:bc:f2:05:73:fb:7b:8a:ae:59:6c:
         26:22:a5:11:df:52:d2:94:f4:82:05:6e:27:02:d7:23:c0:56:
         d5:7f:89:7f:a0:9b:48:91:59:ed:02:ac:18:52:5c:44:90:5f:
         aa:b5:6a:6e:bc:a8:54:da:c1:d8:26:8e:10:e4:40:e7:2c:6e:
         b7:44:f4:75:9f:ad:d8:65:0f:12:9d:96:62:83:ff:ab:df:a2:
         a2:b4:81:4d:34:8a:0c:69:44:41:13:aa:f2:87:86:7b:c1:1c:
         e6:36:ce:f7:b3:cc:db:53:cb:31:24:f3:dc:7e:52:d9:22:e7:
         49:0e:08:ee:4f:b6:5c:db:42:2b:f5:fc:09:95:8c:64:95:b5:
         63:fc:40:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:26:04 2025 by rpki-client