Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3234372e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3234372e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          h7ffIOpNHhcT3Rkj6K5XtyANeIi8hKIsv3j51rrzAD0=
Subject key identifier:   72:9E:26:8A:70:8E:55:64:9D:60:95:D1:72:9E:05:41:08:54:3D:43
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       1E16F016F0A15A7CEC7AD56F4BD102998D94B32F
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3234372e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 05 Mar 2025 19:00:01 +0000
ROA not before:           Wed 05 Mar 2025 18:55:01 +0000
ROA not after:            Wed 04 Mar 2026 19:00:01 +0000
asID:                     4230
IP address blocks:        200.247.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:16:f0:16:f0:a1:5a:7c:ec:7a:d5:6f:4b:d1:02:99:8d:94:b3:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Mar  5 18:55:01 2025 GMT
            Not After : Mar  4 19:00:01 2026 GMT
        Subject: CN=3082010A0282010100B628BFD02570937956A21A7BBF9C57D659B11879A0F2119D9CAEFFAA0D595BB132F7229566ACC0D445620EA0228692BA41AC5935DB24A4DF3421D9EBAB9E730C4E814D8C69B9EF6F1D681A37B5B8551285E1565691C55C8C6B0C651003670764596ACF6D5EEE23030798A71433554418A88933838476A4D0654E5FAAC960AC706CCC99DC158D46226D308772582524583F23DB91710AE9745E7CBD3E368373CEB9720B8B146EA1433A9720D65B8E55629C0D01AA7EB3474ED46747A0554D03F79037E8A61D099A9DACB9B2461AB438F49E28F5C45C0BEFFC78462B9C0CA0530D74AB7AAC60D40BA16A864296BBA9BF9CA3AC258BB6088282A376B227928AE7A10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:28:bf:d0:25:70:93:79:56:a2:1a:7b:bf:9c:
                    57:d6:59:b1:18:79:a0:f2:11:9d:9c:ae:ff:aa:0d:
                    59:5b:b1:32:f7:22:95:66:ac:c0:d4:45:62:0e:a0:
                    22:86:92:ba:41:ac:59:35:db:24:a4:df:34:21:d9:
                    eb:ab:9e:73:0c:4e:81:4d:8c:69:b9:ef:6f:1d:68:
                    1a:37:b5:b8:55:12:85:e1:56:56:91:c5:5c:8c:6b:
                    0c:65:10:03:67:07:64:59:6a:cf:6d:5e:ee:23:03:
                    07:98:a7:14:33:55:44:18:a8:89:33:83:84:76:a4:
                    d0:65:4e:5f:aa:c9:60:ac:70:6c:cc:99:dc:15:8d:
                    46:22:6d:30:87:72:58:25:24:58:3f:23:db:91:71:
                    0a:e9:74:5e:7c:bd:3e:36:83:73:ce:b9:72:0b:8b:
                    14:6e:a1:43:3a:97:20:d6:5b:8e:55:62:9c:0d:01:
                    aa:7e:b3:47:4e:d4:67:47:a0:55:4d:03:f7:90:37:
                    e8:a6:1d:09:9a:9d:ac:b9:b2:46:1a:b4:38:f4:9e:
                    28:f5:c4:5c:0b:ef:fc:78:46:2b:9c:0c:a0:53:0d:
                    74:ab:7a:ac:60:d4:0b:a1:6a:86:42:96:bb:a9:bf:
                    9c:a3:ac:25:8b:b6:08:82:82:a3:76:b2:27:92:8a:
                    e7:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:9E:26:8A:70:8E:55:64:9D:60:95:D1:72:9E:05:41:08:54:3D:43
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3234372e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.247.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5e:10:9e:75:11:17:f4:3c:a7:62:e1:17:3a:68:05:a7:af:af:
         fc:e8:57:b2:21:44:ec:60:1c:08:8c:46:9b:8f:ab:91:ac:8c:
         44:36:68:84:ce:35:ec:65:3d:08:15:c5:2d:0e:5b:cb:c0:74:
         6e:fc:96:30:73:ba:e4:50:ef:53:a4:8b:6b:50:94:47:18:9b:
         cf:50:47:1c:f1:63:33:6d:0a:61:aa:07:bc:43:13:09:e1:78:
         c0:b3:75:9a:1f:63:33:38:c7:1b:dd:81:17:9c:ee:41:0e:7e:
         55:4c:16:90:42:a4:65:bd:80:ff:7c:9d:82:7e:f8:9e:8d:f9:
         ce:31:8c:03:63:6b:b6:54:67:78:61:a5:89:e6:61:7c:07:b8:
         2d:d1:ef:78:3e:67:79:ab:a0:5e:fb:9a:3a:d1:b2:e5:48:b0:
         1c:b7:42:ca:d4:2e:cd:67:e2:dc:cf:c3:15:3a:f3:ab:2c:eb:
         a9:a3:39:78:a6:a8:49:ef:b6:0f:3d:69:8e:4b:b4:26:f2:58:
         8e:19:16:aa:0e:36:7c:96:5c:f2:13:95:ea:dc:35:72:71:ae:
         12:b9:ba:ae:a8:19:9c:02:c1:7b:22:63:21:e7:f1:ac:47:1e:
         43:39:36:b8:2d:0d:62:ae:44:1b:70:59:df:de:1a:91:aa:7b:
         da:78:63:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:00:10 2025 by rpki-client