Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3235312e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3235312e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          70UjJAipVME4W8yrvrmD+1rnbk3+rPdeVn1gmnP0buI=
Subject key identifier:   18:32:B7:A6:D3:72:DB:B9:03:0A:B0:CE:61:37:C7:50:D7:B9:7F:CE
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       2144247276EC2888C13EB5CDB1049FEDF6D39831
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3235312e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 05 Mar 2025 19:00:03 +0000
ROA not before:           Wed 05 Mar 2025 18:55:03 +0000
ROA not after:            Wed 04 Mar 2026 19:00:03 +0000
asID:                     4230
IP address blocks:        200.251.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:44:24:72:76:ec:28:88:c1:3e:b5:cd:b1:04:9f:ed:f6:d3:98:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Mar  5 18:55:03 2025 GMT
            Not After : Mar  4 19:00:03 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:04:6c:09:3d:4c:35:b2:46:44:72:1b:7c:d3:
                    2f:69:aa:14:60:a0:88:d9:8e:cf:ad:90:98:ce:44:
                    2c:22:3c:d5:79:22:6b:dc:ae:f7:70:e9:9b:db:83:
                    e1:2a:be:22:86:71:b7:1b:5d:35:ef:bc:8d:24:eb:
                    e6:ac:ae:29:0a:42:d2:17:be:1e:5f:89:8c:b5:e6:
                    99:f0:7d:53:9e:1b:79:7e:24:f0:25:4b:50:92:f2:
                    10:78:f1:4a:d2:06:b5:bd:88:5f:1a:1a:73:c1:ea:
                    38:0c:35:08:bb:59:76:7b:a0:54:d0:89:a8:68:d0:
                    32:e0:74:1e:85:40:44:26:4b:54:70:a3:18:fe:af:
                    48:f6:45:95:51:9e:13:9c:ab:9d:2f:dc:e2:21:54:
                    ef:8f:38:f5:c5:55:6e:0f:e4:11:1e:8b:5c:6b:5c:
                    ee:ae:4c:a5:a4:59:22:6e:23:0f:2d:77:ab:04:4c:
                    23:08:c6:ab:bc:08:2f:c0:79:3e:83:c2:bb:53:69:
                    d9:d9:70:c7:2f:c2:69:36:0f:1f:d6:97:4b:36:35:
                    5f:58:6f:b2:a6:89:9e:8f:52:e4:1b:91:47:e5:09:
                    37:aa:45:39:d0:e9:06:7e:b2:12:51:8c:35:7e:6d:
                    79:f8:35:42:fb:fe:57:68:d2:67:f2:14:d1:08:4f:
                    77:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:32:B7:A6:D3:72:DB:B9:03:0A:B0:CE:61:37:C7:50:D7:B9:7F:CE
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230302e3235312e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.251.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         08:9a:e8:f7:fb:d0:78:60:5f:8c:e0:5e:cb:49:24:42:90:a8:
         b9:96:3f:eb:8e:f2:6b:f7:3a:7c:5d:93:8c:e0:6b:15:6d:de:
         de:ce:b0:42:f5:95:e7:ba:8f:e6:8e:00:c3:fc:dc:83:16:02:
         c4:0b:b9:db:8f:be:03:9b:59:b5:7e:09:60:9c:dc:0c:38:b3:
         dc:1d:06:86:b5:18:a4:26:e4:dd:bf:5d:52:bd:07:99:22:0f:
         4b:7b:8a:9b:1c:aa:61:68:e3:6a:3f:22:f4:60:31:a5:37:00:
         f9:d5:d8:4d:f0:2e:b8:ad:e8:2c:09:66:33:c3:e4:61:b1:91:
         4c:0d:3b:e2:cf:51:e0:13:65:dc:12:2a:30:c0:2a:9a:7b:60:
         78:92:37:b5:6f:ef:64:96:52:33:bf:46:1e:d6:35:f5:3a:cf:
         73:eb:ff:71:16:53:44:17:52:48:ad:51:66:33:04:66:47:33:
         9d:1f:c6:9d:eb:72:2d:07:4c:ed:cc:fa:c9:f5:16:11:d7:5e:
         c2:5b:93:a2:1b:eb:ec:3a:94:a4:93:a6:ab:26:d4:dc:77:6f:
         30:7f:dc:1b:56:2d:9c:fa:6a:e1:63:51:35:d3:87:f0:45:a8:
         57:b2:c3:37:6c:82:5c:9d:1d:87:f1:1e:8b:7f:af:c1:93:c5:
         49:83:cb:f1
-----BEGIN CERTIFICATE-----
MIIHPDCCBiSgAwIBAgIUIUQkcnbsKIjBPrXNsQSf7fbTmDEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTQ5REY2OTU4QTU5RkNGQTkxMDA3MTU2N0JBQjA3OTA0
RUQwNzUxRDAeFw0yNTAzMDUxODU1MDNaFw0yNjAzMDQxOTAwMDNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDIwNDZDMDkzRDRDMzVCMjQ2
NDQ3MjFCN0NEMzJGNjlBQTE0NjBBMDg4RDk4RUNGQUQ5MDk4Q0U0NDJDMjIzQ0Q1
NzkyMjZCRENBRUY3NzBFOTlCREI4M0UxMkFCRTIyODY3MUI3MUI1RDM1RUZCQzhE
MjRFQkU2QUNBRTI5MEE0MkQyMTdCRTFFNUY4OThDQjVFNjk5RjA3RDUzOUUxQjc5
N0UyNEYwMjU0QjUwOTJGMjEwNzhGMTRBRDIwNkI1QkQ4ODVGMUExQTczQzFFQTM4
MEMzNTA4QkI1OTc2N0JBMDU0RDA4OUE4NjhEMDMyRTA3NDFFODU0MDQ0MjY0QjU0
NzBBMzE4RkVBRjQ4RjY0NTk1NTE5RTEzOUNBQjlEMkZEQ0UyMjE1NEVGOEYzOEY1
QzU1NTZFMEZFNDExMUU4QjVDNkI1Q0VFQUU0Q0E1QTQ1OTIyNkUyMzBGMkQ3N0FC
MDQ0QzIzMDhDNkFCQkMwODJGQzA3OTNFODNDMkJCNTM2OUQ5RDk3MEM3MkZDMjY5
MzYwRjFGRDY5NzRCMzYzNTVGNTg2RkIyQTY4OTlFOEY1MkU0MUI5MTQ3RTUwOTM3
QUE0NTM5RDBFOTA2N0VCMjEyNTE4QzM1N0U2RDc5RjgzNTQyRkJGRTU3NjhEMjY3
RjIxNEQxMDg0Rjc3NzEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0gRsCT1MNbJGRHIbfNMvaaoUYKCI2Y7PrZCYzkQsIjzVeSJr3K73
cOmb24PhKr4ihnG3G10177yNJOvmrK4pCkLSF74eX4mMteaZ8H1Tnht5fiTwJUtQ
kvIQePFK0ga1vYhfGhpzweo4DDUIu1l2e6BU0ImoaNAy4HQehUBEJktUcKMY/q9I
9kWVUZ4TnKudL9ziIVTvjzj1xVVuD+QRHotca1zurkylpFkibiMPLXerBEwjCMar
vAgvwHk+g8K7U2nZ2XDHL8JpNg8f1pdLNjVfWG+ypomej1LkG5FH5Qk3qkU50OkG
frISUYw1fm15+DVC+/5XaNJn8hTRCE93cQIDAQABo4ICSjCCAkYwHQYDVR0OBBYE
FBgyt6bTctu5AwqwzmE3x1DXuX/OMB8GA1UdIwQYMBaAFBSd9pWKWfz6kQBxVnur
B5BO0HUdMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dVUjRKZWR2WlNuYjho
S21NVWdRNjg3YjRNWFhtMzVtU1pETUxRTkhTRnBwLzEvMTQ5REY2OTU4QTU5RkNG
QTkxMDA3MTU2N0JBQjA3OTA0RUQwNzUxRC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS8xNDlERjY5NThBNTlGQ0ZBOTEwMDcxNTY3QkFCMDc5MDRFRDA3
NTFELmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVVI0SmVkdlpTbmI4aEttTVVn
UTY4N2I0TVhYbTM1bVNaRE1MUU5IU0ZwcC8xLzMyMzAzMDJlMzIzNTMxMmUzMDJl
MzAyZjMxMzYyZDMxMzYyMDNkM2UyMDM0MzIzMzMwLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAyPswDQYJ
KoZIhvcNAQELBQADggEBAAia6Pf70HhgX4zgXstJJEKQqLmWP+uO8mv3Onxdk4zg
axVt3t7OsEL1lee6j+aOAMP83IMWAsQLuduPvgObWbV+CWCc3Aw4s9wdBoa1GKQm
5N2/XVK9B5kiD0t7ipscqmFo42o/IvRgMaU3APnV2E3wLrit6CwJZjPD5GGxkUwN
O+LPUeATZdwSKjDAKpp7YHiSN7Vv72SWUjO/Rh7WNfU6z3Pr/3EWU0QXUkitUWYz
BGZHM50fxp3rci0HTO3M+sn1FhHXXsJbk6Ib6+w6lKSTpqsm1Nx3bzB/3BtWLZz6
auFjUTXTh/BFqFeywzdsglydHYfxHot/r8GTxUmDy/E=
-----END CERTIFICATE-----
Generated at Sun Apr 6 17:39:19 2025 by rpki-client