Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230312e36342e302e302f31362d3136203d3e2034323330.roa
File:                     3230312e36342e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          DLOR/Rja97RLLb2SHuQs5vSPTl6oKDd9jgVSkder1FI=
Subject key identifier:   DC:2D:AE:F8:28:C2:67:DF:AA:FB:3C:DE:7F:74:53:93:E6:BE:0A:18
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       42954783C4973FDBA33936C54F208407BD0C4305
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230312e36342e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 05 Mar 2025 19:00:00 +0000
ROA not before:           Wed 05 Mar 2025 18:55:00 +0000
ROA not after:            Wed 04 Mar 2026 19:00:00 +0000
asID:                     4230
IP address blocks:        201.64.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:95:47:83:c4:97:3f:db:a3:39:36:c5:4f:20:84:07:bd:0c:43:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Mar  5 18:55:00 2025 GMT
            Not After : Mar  4 19:00:00 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bf:71:5b:ec:98:cf:93:a8:0f:2b:86:b3:31:
                    d4:bb:d6:b7:a7:32:f9:82:29:5f:93:63:d9:11:ba:
                    7b:eb:40:48:8d:51:8b:ea:1a:32:b9:9a:c8:10:9e:
                    cd:51:e9:ed:38:70:b4:df:24:3b:86:2d:2e:a4:07:
                    a7:21:6b:64:ba:11:e9:c9:9f:6c:73:ba:12:0f:eb:
                    a0:9e:fa:de:42:24:94:d3:12:4a:36:76:81:a4:90:
                    2f:5a:6d:6f:c8:46:1c:96:f6:11:ef:e7:00:9c:b5:
                    43:1f:f9:ee:b1:5d:72:fe:69:0f:4b:2b:d0:b9:f4:
                    73:70:a3:5a:b1:98:bd:90:3e:06:49:53:22:b7:bd:
                    7f:6a:24:dc:e0:be:69:db:9e:26:0a:37:93:85:86:
                    27:6a:24:bc:53:5a:1e:08:73:9c:28:ac:b4:c6:a5:
                    82:6b:4c:b3:1a:26:28:70:6e:ad:51:d3:33:3e:d1:
                    fa:c7:f7:3c:b1:80:36:3c:29:38:d9:32:6c:a0:29:
                    77:1f:e4:fe:d7:1f:50:01:b2:79:b3:e3:f3:f7:6a:
                    3a:c5:82:a4:34:43:85:0a:d4:de:df:42:e3:8b:c1:
                    e0:dc:69:da:7a:68:ce:45:a6:e3:32:8d:af:4a:5b:
                    72:0a:20:5b:de:c4:c2:f9:6b:b4:48:cf:3f:6e:67:
                    b2:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:2D:AE:F8:28:C2:67:DF:AA:FB:3C:DE:7F:74:53:93:E6:BE:0A:18
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230312e36342e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.64.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         35:3d:4f:cc:2b:fe:f7:48:f2:c7:05:9d:ec:c2:8d:96:88:d4:
         96:bb:6d:d4:2e:34:33:51:28:44:93:44:c7:c2:63:de:c1:17:
         2f:07:68:75:ee:ee:1c:c9:9b:0d:c7:0f:ae:73:bd:5c:3e:ba:
         78:39:b3:89:34:55:e2:be:ff:d9:14:f4:b2:11:ac:39:03:e8:
         f9:d8:38:5e:35:fb:19:18:c6:aa:78:29:2c:b8:b0:a9:55:19:
         4d:07:a8:a0:68:18:5b:24:a4:0c:33:64:0b:00:92:2a:6d:1a:
         14:1e:35:48:da:84:28:99:44:34:b2:f7:c6:13:95:04:cf:ba:
         23:85:96:f7:1c:92:aa:01:a5:6e:15:af:52:e3:31:0f:4d:28:
         48:9e:d4:7b:5b:ba:1c:a9:b4:3e:b8:16:2b:72:c2:27:17:fd:
         9c:b0:c4:d8:f0:8d:d9:cf:b2:f5:ef:96:ba:7e:cc:23:57:ac:
         90:46:fe:e5:f1:16:c9:1c:24:62:d8:62:34:e0:b9:67:31:22:
         58:f2:95:60:b5:20:2a:b5:d5:21:8e:70:be:10:8c:1e:6e:88:
         93:ca:46:05:7c:76:53:9a:6e:22:5d:e9:d6:69:cd:7c:fd:84:
         a0:45:07:3b:6b:a4:f6:18:c2:30:38:70:59:fd:08:84:8e:64:
         c3:bc:32:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:36:57 2025 by rpki-client