Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3234362e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3234362e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          2zKNVySf+yUVvDCtEY7g9KwLN2pGMDkYhCJvOufOmoU=
Subject key identifier:   24:DD:37:B5:30:9B:B9:CB:DE:C4:B9:18:A3:04:EA:53:76:52:53:87
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       7020BB6C64F2F43F48D900CEF176DBC0DD64AF44
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3234362e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 05 Mar 2025 19:00:06 +0000
ROA not before:           Wed 05 Mar 2025 18:55:06 +0000
ROA not after:            Wed 04 Mar 2026 19:00:06 +0000
asID:                     4230
IP address blocks:        200.246.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:20:bb:6c:64:f2:f4:3f:48:d9:00:ce:f1:76:db:c0:dd:64:af:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Mar  5 18:55:06 2025 GMT
            Not After : Mar  4 19:00:06 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c9:f6:de:ad:6d:42:16:6e:d8:fa:66:22:3c:
                    4e:25:41:78:26:57:7d:a5:a8:ae:46:37:5c:24:4c:
                    fa:8d:18:a0:c5:2f:b7:72:b0:14:a7:a0:23:56:11:
                    b8:81:15:26:a6:58:9a:ef:41:c2:93:73:72:9e:e1:
                    43:3c:23:b6:62:01:a9:56:7a:65:71:8c:f5:73:a3:
                    18:e8:37:47:fd:1f:e2:ca:c0:c5:c5:db:0a:05:c8:
                    a0:fd:ad:b6:e7:fb:df:38:9f:4d:a9:82:30:ed:43:
                    cd:6e:a1:fc:c0:2f:f1:87:1c:7a:1e:25:64:3b:48:
                    86:1f:e3:d1:5b:b9:d5:70:9e:97:1c:1f:eb:61:5e:
                    95:fe:be:f4:b1:fa:da:ee:9e:bf:76:50:9d:72:5a:
                    5d:85:6c:96:e8:9b:8d:e6:83:3f:8a:06:fb:b6:c3:
                    20:4c:cf:7b:b2:1f:7a:a0:b1:6b:cd:a9:be:a8:b3:
                    ec:c6:2c:74:51:91:7a:77:fc:f5:da:89:ff:8b:6e:
                    21:5e:e6:c1:2b:de:a9:0d:1d:7f:7d:e0:89:8b:a2:
                    15:b6:c1:f2:fe:88:11:f6:25:25:36:43:06:3f:1b:
                    2b:cf:16:12:46:12:8d:57:dc:bc:fd:34:ef:e2:44:
                    ad:72:57:6e:16:4d:9d:71:09:cb:35:f6:e5:c3:32:
                    1e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:DD:37:B5:30:9B:B9:CB:DE:C4:B9:18:A3:04:EA:53:76:52:53:87
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3234362e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.246.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         46:95:1a:05:ae:f5:8e:ab:a9:f4:2e:14:b2:9b:ee:cf:52:67:
         fa:82:94:73:d1:7e:08:74:bd:e8:ea:e7:ad:4e:47:5c:13:0f:
         dd:de:45:19:b6:bf:28:3d:14:65:36:3b:fa:a6:ef:85:ed:bc:
         a4:a6:a2:59:0d:b0:ee:ab:12:a9:72:fe:f7:90:09:47:81:4d:
         ce:0a:da:d8:8b:7f:b6:b3:a4:c5:9c:85:63:29:7e:5f:f4:77:
         fe:88:02:d6:68:71:46:c1:b7:75:66:2d:6f:b6:ec:24:92:d9:
         01:52:74:5b:d4:e2:a7:48:5f:f2:bc:75:bb:37:01:7a:a7:2d:
         0a:2d:d2:71:d1:d0:d6:b5:d1:a5:2c:ea:a4:80:d9:09:36:87:
         67:7a:06:27:c6:9c:a0:18:ff:49:16:d9:90:33:20:87:5f:5b:
         8b:5d:31:c0:1d:ce:f8:fe:3f:b5:8c:da:9d:b5:7f:56:e3:38:
         c6:ab:71:ae:5e:bf:77:cc:4b:20:b5:5d:67:cd:e0:e9:35:6b:
         67:ae:32:ee:17:bb:38:b1:9d:6e:c2:45:90:c4:e2:a3:f9:21:
         59:a3:a3:e6:9f:6b:ab:de:5a:ac:3b:83:db:58:bb:3d:93:ad:
         5b:1d:04:8d:f5:cb:e7:90:2f:c9:37:32:3a:f2:ba:95:32:f5:
         3f:9a:38:d6
-----BEGIN CERTIFICATE-----
MIIHPDCCBiSgAwIBAgIUcCC7bGTy9D9I2QDO8XbbwN1kr0QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ5REY2OTU4QTU5RkNGQTkxMDA3MTU2N0JBQjA3OTA0
RUQwNzUxRDAeFw0yNTAzMDUxODU1MDZaFw0yNjAzMDQxOTAwMDZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRUJDOUY2REVBRDZENDIxNjZF
RDhGQTY2MjIzQzRFMjU0MTc4MjY1NzdEQTVBOEFFNDYzNzVDMjQ0Q0ZBOEQxOEEw
QzUyRkI3NzJCMDE0QTdBMDIzNTYxMUI4ODExNTI2QTY1ODlBRUY0MUMyOTM3Mzcy
OUVFMTQzM0MyM0I2NjIwMUE5NTY3QTY1NzE4Q0Y1NzNBMzE4RTgzNzQ3RkQxRkUy
Q0FDMEM1QzVEQjBBMDVDOEEwRkRBREI2RTdGQkRGMzg5RjREQTk4MjMwRUQ0M0NE
NkVBMUZDQzAyRkYxODcxQzdBMUUyNTY0M0I0ODg2MUZFM0QxNUJCOUQ1NzA5RTk3
MUMxRkVCNjE1RTk1RkVCRUY0QjFGQURBRUU5RUJGNzY1MDlENzI1QTVEODU2Qzk2
RTg5QjhERTY4MzNGOEEwNkZCQjZDMzIwNENDRjdCQjIxRjdBQTBCMTZCQ0RBOUJF
QThCM0VDQzYyQzc0NTE5MTdBNzdGQ0Y1REE4OUZGOEI2RTIxNUVFNkMxMkJERUE5
MEQxRDdGN0RFMDg5OEJBMjE1QjZDMUYyRkU4ODExRjYyNTI1MzY0MzA2M0YxQjJC
Q0YxNjEyNDYxMjhENTdEQ0JDRkQzNEVGRTI0NEFENzI1NzZFMTY0RDlENzEwOUNC
MzVGNkU1QzMzMjFFMUQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA68n23q1tQhZu2PpmIjxOJUF4Jld9paiuRjdcJEz6jRigxS+3crAU
p6AjVhG4gRUmplia70HCk3NynuFDPCO2YgGpVnplcYz1c6MY6DdH/R/iysDFxdsK
Bcig/a225/vfOJ9NqYIw7UPNbqH8wC/xhxx6HiVkO0iGH+PRW7nVcJ6XHB/rYV6V
/r70sfra7p6/dlCdclpdhWyW6JuN5oM/igb7tsMgTM97sh96oLFrzam+qLPsxix0
UZF6d/z12on/i24hXubBK96pDR1/feCJi6IVtsHy/ogR9iUlNkMGPxsrzxYSRhKN
V9y8/TTv4kStclduFk2dcQnLNfblwzIeHQIDAQABo4ICSjCCAkYwHQYDVR0OBBYE
FCTdN7Uwm7nL3sS5GKME6lN2UlOHMB8GA1UdIwQYMBaAFBSd9pWKWfz6kQBxVnur
B5BO0HUdMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dVUjRKZWR2WlNuYjho
S21NVWdRNjg3YjRNWFhtMzVtU1pETUxRTkhTRnBwLzEvMTQ5REY2OTU4QTU5RkNG
QTkxMDA3MTU2N0JBQjA3OTA0RUQwNzUxRC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8xNDlERjY5NThBNTlGQ0ZBOTEwMDcxNTY3QkFCMDc5MDRFRDA3
NTFELmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVVI0SmVkdlpTbmI4aEttTVVn
UTY4N2I0TVhYbTM1bVNaRE1MUU5IU0ZwcC8xLzMyMzAzMDJlMzIzNDM2MmUzMDJl
MzAyZjMxMzYyZDMxMzYyMDNkM2UyMDM0MzIzMzMwLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAyPYwDQYJ
KoZIhvcNAQELBQADggEBAEaVGgWu9Y6rqfQuFLKb7s9SZ/qClHPRfgh0vejq561O
R1wTD93eRRm2vyg9FGU2O/qm74XtvKSmolkNsO6rEqly/veQCUeBTc4K2tiLf7az
pMWchWMpfl/0d/6IAtZocUbBt3VmLW+27CSS2QFSdFvU4qdIX/K8dbs3AXqnLQot
0nHR0Na10aUs6qSA2Qk2h2d6BifGnKAY/0kW2ZAzIIdfW4tdMcAdzvj+P7WM2p21
f1bjOMarca5ev3fMSyC1XWfN4Ok1a2euMu4XuzixnW7CRZDE4qP5IVmjo+afa6ve
Wqw7g9tYuz2TrVsdBI31y+eQL8k3MjryupUy9T+aONY=
-----END CERTIFICATE-----
Generated at Sun Apr 6 19:00:06 2025 by rpki-client