Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3234332e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3234332e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          KWepiWdE7Cw0V3GJckaJbGQtl+vd0oPK9YBMK5xLzu0=
Subject key identifier:   1F:82:43:E5:57:3D:1C:A1:56:2C:BD:36:46:50:B6:65:E6:CA:AF:31
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       1871605A074E34AE1F6D50324AE77DF97A8441B6
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3234332e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 05 Mar 2025 19:00:07 +0000
ROA not before:           Wed 05 Mar 2025 18:55:07 +0000
ROA not after:            Wed 04 Mar 2026 19:00:07 +0000
asID:                     4230
IP address blocks:        200.243.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:71:60:5a:07:4e:34:ae:1f:6d:50:32:4a:e7:7d:f9:7a:84:41:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Mar  5 18:55:07 2025 GMT
            Not After : Mar  4 19:00:07 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:af:60:2c:16:94:19:10:c2:4f:b2:41:8c:37:
                    fc:aa:a5:0a:92:12:63:83:d3:ed:da:c2:4e:b5:16:
                    69:48:28:f3:02:fc:b5:0d:04:d2:85:da:bb:ca:4d:
                    79:1e:72:1b:1a:3e:03:be:18:3f:46:70:52:77:fa:
                    ba:f8:d0:c7:86:8a:9d:13:d6:02:51:f3:93:f9:2c:
                    97:e6:61:a3:ac:31:d7:40:84:6a:6a:94:cc:be:53:
                    17:18:a6:71:de:1f:6b:35:8a:05:b6:bb:cd:18:16:
                    94:08:54:d0:48:c5:71:db:69:85:96:79:0e:e3:11:
                    71:e5:da:6e:2c:2e:95:e2:11:5a:ab:fd:bd:77:ea:
                    1b:7a:3e:7f:77:17:dd:f8:0f:4d:e3:67:a2:b6:5f:
                    d3:b8:2c:bf:61:95:ee:9e:f5:c2:c9:02:a5:e5:c1:
                    a6:99:48:05:f8:18:71:81:0b:a1:d8:23:ff:9d:6c:
                    95:36:83:50:ba:ad:10:14:c0:40:fe:0a:db:50:c9:
                    32:47:f1:3b:52:a2:31:4b:bb:4a:7b:ae:32:97:34:
                    c0:e7:5e:9c:16:c6:a7:fd:e9:09:31:39:b7:17:02:
                    35:10:00:27:74:59:f0:81:6d:8f:79:54:ca:8e:11:
                    01:f4:ff:62:23:c1:25:dc:d6:aa:22:7b:c5:f3:6a:
                    8b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:82:43:E5:57:3D:1C:A1:56:2C:BD:36:46:50:B6:65:E6:CA:AF:31
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3234332e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.243.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         31:f4:f2:13:eb:91:f3:70:10:e6:8d:54:c6:47:9b:62:e9:7a:
         5a:82:a4:e7:6a:f2:7c:05:5b:19:6e:ec:b2:c1:22:15:cc:d5:
         ed:3b:bb:23:f5:98:53:ee:45:71:0d:63:06:77:c1:73:65:00:
         63:80:5c:20:25:74:c9:b1:d4:d1:b2:b4:3c:21:9f:85:60:6e:
         99:92:ee:3e:7d:f6:2c:d0:e9:dc:4f:92:ef:88:b6:a9:5c:f6:
         a3:46:c2:e5:fa:8a:05:85:80:53:02:e6:cd:39:d4:30:75:30:
         a3:96:45:f9:83:a0:18:da:48:02:ca:27:bd:cc:6a:ea:db:e7:
         23:2d:3f:db:3e:e5:76:5a:7f:61:a5:b4:92:82:cc:4b:64:25:
         45:cc:17:68:cd:9e:cb:43:ce:3e:7a:d4:8b:cc:f2:05:ad:91:
         c7:f1:e7:63:cd:7b:59:06:9e:b7:b0:06:a0:bd:88:0a:79:9b:
         35:54:39:54:52:28:8b:91:1a:f8:bd:46:56:fe:1c:b0:42:2a:
         ad:5e:e8:03:14:e6:e5:9e:01:f1:be:b3:32:91:82:d3:94:94:
         2d:05:d0:76:bc:ea:47:6f:a9:df:3d:b7:cc:51:d1:1c:03:c9:
         06:66:b2:7e:70:c0:90:f1:7a:d5:9a:94:60:b7:7f:f5:66:78:
         f0:24:9f:34
-----BEGIN CERTIFICATE-----
MIIHPDCCBiSgAwIBAgIUGHFgWgdONK4fbVAySud9+XqEQbYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ5REY2OTU4QTU5RkNGQTkxMDA3MTU2N0JBQjA3OTA0
RUQwNzUxRDAeFw0yNTAzMDUxODU1MDdaFw0yNjAzMDQxOTAwMDdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRENBRjYwMkMxNjk0MTkxMEMy
NEZCMjQxOEMzN0ZDQUFBNTBBOTIxMjYzODNEM0VEREFDMjRFQjUxNjY5NDgyOEYz
MDJGQ0I1MEQwNEQyODVEQUJCQ0E0RDc5MUU3MjFCMUEzRTAzQkUxODNGNDY3MDUy
NzdGQUJBRjhEMEM3ODY4QTlEMTNENjAyNTFGMzkzRjkyQzk3RTY2MUEzQUMzMUQ3
NDA4NDZBNkE5NENDQkU1MzE3MThBNjcxREUxRjZCMzU4QTA1QjZCQkNEMTgxNjk0
MDg1NEQwNDhDNTcxREI2OTg1OTY3OTBFRTMxMTcxRTVEQTZFMkMyRTk1RTIxMTVB
QUJGREJENzdFQTFCN0EzRTdGNzcxN0RERjgwRjRERTM2N0EyQjY1RkQzQjgyQ0JG
NjE5NUVFOUVGNUMyQzkwMkE1RTVDMUE2OTk0ODA1RjgxODcxODEwQkExRDgyM0ZG
OUQ2Qzk1MzY4MzUwQkFBRDEwMTRDMDQwRkUwQURCNTBDOTMyNDdGMTNCNTJBMjMx
NEJCQjRBN0JBRTMyOTczNEMwRTc1RTlDMTZDNkE3RkRFOTA5MzEzOUI3MTcwMjM1
MTAwMDI3NzQ1OUYwODE2RDhGNzk1NENBOEUxMTAxRjRGRjYyMjNDMTI1RENENkFB
MjI3QkM1RjM2QThCMUIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA3K9gLBaUGRDCT7JBjDf8qqUKkhJjg9Pt2sJOtRZpSCjzAvy1DQTS
hdq7yk15HnIbGj4Dvhg/RnBSd/q6+NDHhoqdE9YCUfOT+SyX5mGjrDHXQIRqapTM
vlMXGKZx3h9rNYoFtrvNGBaUCFTQSMVx22mFlnkO4xFx5dpuLC6V4hFaq/29d+ob
ej5/dxfd+A9N42eitl/TuCy/YZXunvXCyQKl5cGmmUgF+BhxgQuh2CP/nWyVNoNQ
uq0QFMBA/grbUMkyR/E7UqIxS7tKe64ylzTA516cFsan/ekJMTm3FwI1EAAndFnw
gW2PeVTKjhEB9P9iI8El3NaqInvF82qLGwIDAQABo4ICSjCCAkYwHQYDVR0OBBYE
FB+CQ+VXPRyhViy9NkZQtmXmyq8xMB8GA1UdIwQYMBaAFBSd9pWKWfz6kQBxVnur
B5BO0HUdMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dVUjRKZWR2WlNuYjho
S21NVWdRNjg3YjRNWFhtMzVtU1pETUxRTkhTRnBwLzEvMTQ5REY2OTU4QTU5RkNG
QTkxMDA3MTU2N0JBQjA3OTA0RUQwNzUxRC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8xNDlERjY5NThBNTlGQ0ZBOTEwMDcxNTY3QkFCMDc5MDRFRDA3
NTFELmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVVI0SmVkdlpTbmI4aEttTVVn
UTY4N2I0TVhYbTM1bVNaRE1MUU5IU0ZwcC8xLzMyMzAzMDJlMzIzNDMzMmUzMDJl
MzAyZjMxMzYyZDMxMzYyMDNkM2UyMDM0MzIzMzMwLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAyPMwDQYJ
KoZIhvcNAQELBQADggEBADH08hPrkfNwEOaNVMZHm2LpelqCpOdq8nwFWxlu7LLB
IhXM1e07uyP1mFPuRXENYwZ3wXNlAGOAXCAldMmx1NGytDwhn4VgbpmS7j599izQ
6dxPku+Itqlc9qNGwuX6igWFgFMC5s051DB1MKOWRfmDoBjaSALKJ73Maurb5yMt
P9s+5XZaf2GltJKCzEtkJUXMF2jNnstDzj561IvM8gWtkcfx52PNe1kGnrewBqC9
iAp5mzVUOVRSKIuRGvi9Rlb+HLBCKq1e6AMU5uWeAfG+szKRgtOUlC0F0Ha86kdv
qd89t8xR0RwDyQZmsn5wwJDxetWalGC3f/VmePAknzQ=
-----END CERTIFICATE-----
Generated at Sun Apr 6 19:00:04 2025 by rpki-client