Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3235302e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3235302e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          oyKileewWdc2ozX/QMvt5dJeYuRUsAxzCM/qACrhwiU=
Subject key identifier:   E4:8F:5E:A4:2E:AA:28:A1:1E:8E:54:67:A0:4C:0F:66:94:F7:D9:F2
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       6C9E7E4C2D5A21D924510F06895ABD0803CF5A41
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3235302e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 05 Mar 2025 19:00:07 +0000
ROA not before:           Wed 05 Mar 2025 18:55:07 +0000
ROA not after:            Wed 04 Mar 2026 19:00:07 +0000
asID:                     4230
IP address blocks:        200.250.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:9e:7e:4c:2d:5a:21:d9:24:51:0f:06:89:5a:bd:08:03:cf:5a:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Mar  5 18:55:07 2025 GMT
            Not After : Mar  4 19:00:07 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:8c:c2:d7:2b:27:db:97:49:97:98:92:11:53:
                    35:fb:26:1e:e1:3d:39:be:70:1e:b3:d7:69:74:0c:
                    bd:6e:d3:a8:6b:27:cb:08:9b:40:91:c5:17:4f:42:
                    49:10:b2:4d:e8:de:9f:a7:3b:36:ef:1e:62:01:cd:
                    55:14:33:27:19:1d:b2:85:00:a9:f3:4a:65:c2:66:
                    ba:7f:ad:5d:d6:14:61:29:29:cc:85:2b:34:89:50:
                    c9:3f:56:9a:11:bf:aa:4f:1f:42:35:23:e6:11:4c:
                    af:87:89:b1:92:2d:5a:0f:d8:bc:af:4b:45:02:81:
                    cf:02:73:e5:c2:eb:f0:04:f6:fc:86:0d:d9:9f:bb:
                    40:10:5b:6d:1d:b3:15:2e:2f:1b:6c:e9:d5:cc:db:
                    08:b3:f2:4e:d6:50:12:94:70:91:47:6d:0c:fa:1b:
                    38:85:8e:4c:06:b9:37:87:91:69:06:14:90:d0:6c:
                    57:bb:2c:19:cf:94:1d:19:34:fb:3b:b4:80:f6:df:
                    b8:84:89:fa:41:e7:3e:00:f0:d2:b3:cb:b6:b0:c7:
                    6d:b9:09:47:a4:1f:39:f6:26:9c:4e:fb:ff:00:bd:
                    89:80:5a:fb:ba:65:9d:ec:c3:22:89:cb:24:d8:34:
                    d4:c7:d0:8b:a7:de:58:7a:08:87:58:c2:08:af:fe:
                    b0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:8F:5E:A4:2E:AA:28:A1:1E:8E:54:67:A0:4C:0F:66:94:F7:D9:F2
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3235302e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.250.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         82:d3:90:cd:3b:36:54:d7:39:f7:1a:78:67:27:27:32:da:4e:
         d8:4a:fe:84:c0:fe:68:f5:ce:3b:72:77:b7:e2:85:d2:0f:39:
         f0:ee:9e:4d:81:df:4b:73:ef:a8:b9:f1:03:29:7f:32:43:78:
         18:12:0d:a5:f9:cc:00:8e:b0:2d:47:54:18:10:8d:5f:ac:f3:
         82:3d:be:0c:48:53:a9:20:8e:e9:58:b7:f5:6f:e8:61:ad:6d:
         20:94:a0:db:85:0a:78:77:ae:25:67:fc:8b:2c:28:41:14:50:
         f4:4d:4f:3b:39:1c:70:f1:ce:41:b9:b1:e5:d8:f8:f8:99:37:
         77:85:69:80:7f:7c:c7:45:1f:46:4c:34:28:ef:9d:8a:ba:e0:
         4e:25:4b:60:36:fb:b6:fa:7f:76:76:5f:58:57:aa:93:e0:b4:
         14:d5:f1:bc:34:68:0f:7c:9c:51:60:59:9a:6a:b4:13:57:a9:
         4d:e8:e5:16:5f:a8:ed:5c:65:2f:f3:5c:d3:6d:94:22:a5:5e:
         35:37:5c:b8:11:22:2d:48:f4:1e:46:a4:29:ee:4a:84:25:d1:
         95:dd:85:89:17:03:54:7d:27:ad:16:70:c4:7b:b7:33:f3:ee:
         5b:96:79:f4:76:b6:04:0e:ed:6e:62:77:4a:0e:db:04:06:d5:
         bd:b5:13:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:00:01 2025 by rpki-client