Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230312e36352e302e302f31362d3136203d3e2034323330.roa
File:                     3230312e36352e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          V6NUwzOwsjpAtd3icKMVqNzWUKSN8Rp8UwDsyBYZIN0=
Subject key identifier:   CA:91:D4:DE:F4:7B:4A:11:36:9F:4A:FF:A2:95:D0:F9:32:7C:41:4D
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       42F2C3A81B20E1D653A3AFDDA7CA8AB7DC269CB4
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230312e36352e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 05 Mar 2025 19:00:04 +0000
ROA not before:           Wed 05 Mar 2025 18:55:04 +0000
ROA not after:            Wed 04 Mar 2026 19:00:04 +0000
asID:                     4230
IP address blocks:        201.65.0.0/16 maxlen: 16
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:f2:c3:a8:1b:20:e1:d6:53:a3:af:dd:a7:ca:8a:b7:dc:26:9c:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Mar  5 18:55:04 2025 GMT
            Not After : Mar  4 19:00:04 2026 GMT
        Subject: CN=3082010A0282010100B124ECDD7FD79542D8F96C44B6D61B6C00524ED83EF22BDD930AECB914B9A5B85D988B2FDD8E952964A5E0BDED1F408F1FCBA9F1DA73C6674DD934F6FD33D664D02A9C85142A02ABDEC2F06DF9143DA9BF868159CF9A287927C80A24ED367357F330EEF501395CE07768398CF9D56343132DE228B55F58F7C765F6DACC75A316A047DDA81AB6D9FBF95DE872D44A14A89295059E62F150246E541D4B6BC3DC7A3570E2E6D4405F70888EFE95AA827C29977B97AE55C348C038F017429154B610D0FD04EF92440F2A4263A5F1133A493B1131866F1D9F3332513D35CDE9A77445D0676236AA6058BF6CC97E535328C49012CA29C1A6F822F6C4721BA388D39A310203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:24:ec:dd:7f:d7:95:42:d8:f9:6c:44:b6:d6:
                    1b:6c:00:52:4e:d8:3e:f2:2b:dd:93:0a:ec:b9:14:
                    b9:a5:b8:5d:98:8b:2f:dd:8e:95:29:64:a5:e0:bd:
                    ed:1f:40:8f:1f:cb:a9:f1:da:73:c6:67:4d:d9:34:
                    f6:fd:33:d6:64:d0:2a:9c:85:14:2a:02:ab:de:c2:
                    f0:6d:f9:14:3d:a9:bf:86:81:59:cf:9a:28:79:27:
                    c8:0a:24:ed:36:73:57:f3:30:ee:f5:01:39:5c:e0:
                    77:68:39:8c:f9:d5:63:43:13:2d:e2:28:b5:5f:58:
                    f7:c7:65:f6:da:cc:75:a3:16:a0:47:dd:a8:1a:b6:
                    d9:fb:f9:5d:e8:72:d4:4a:14:a8:92:95:05:9e:62:
                    f1:50:24:6e:54:1d:4b:6b:c3:dc:7a:35:70:e2:e6:
                    d4:40:5f:70:88:8e:fe:95:aa:82:7c:29:97:7b:97:
                    ae:55:c3:48:c0:38:f0:17:42:91:54:b6:10:d0:fd:
                    04:ef:92:44:0f:2a:42:63:a5:f1:13:3a:49:3b:11:
                    31:86:6f:1d:9f:33:32:51:3d:35:cd:e9:a7:74:45:
                    d0:67:62:36:aa:60:58:bf:6c:c9:7e:53:53:28:c4:
                    90:12:ca:29:c1:a6:f8:22:f6:c4:72:1b:a3:88:d3:
                    9a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:91:D4:DE:F4:7B:4A:11:36:9F:4A:FF:A2:95:D0:F9:32:7C:41:4D
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/3230312e36352e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.65.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         70:94:1d:36:21:ae:ad:68:6e:15:54:a0:eb:84:dd:c1:b5:ba:
         4f:4e:01:b3:b3:e8:9d:6e:a6:eb:dc:17:f7:8b:1c:86:73:37:
         09:69:5e:ad:40:74:c1:4a:c2:01:26:e9:53:70:09:10:9c:21:
         ad:8a:96:79:fb:23:47:fc:d4:6d:d2:e5:2c:4e:e0:4f:5d:46:
         23:79:09:b6:61:81:2f:1e:af:7b:4c:31:02:32:88:91:81:7f:
         bd:95:67:ee:cd:6e:9a:1b:0e:ee:64:d0:b5:d4:b9:21:5f:74:
         7c:15:7e:84:65:8a:ea:f3:a5:83:1d:94:4e:51:30:82:ad:73:
         84:d7:21:b1:19:b0:56:e9:24:60:6a:c7:82:35:a6:51:3d:68:
         b6:2e:54:1f:bd:de:33:2f:75:d1:cd:22:67:e7:cf:69:59:19:
         fd:cc:30:9a:8b:60:9f:8d:c1:d5:01:11:f7:4c:98:10:d3:09:
         9d:be:ad:a0:c0:f6:04:b9:c4:02:8e:5e:2d:51:78:5b:9c:fe:
         77:e3:11:3b:3c:ed:4d:61:87:1c:ec:5c:a6:a6:e6:d3:b5:b1:
         ea:d4:48:04:d0:7d:aa:45:16:cd:03:f6:77:c0:38:01:b3:40:
         69:ae:cf:2e:73:5d:c3:af:ba:17:bc:eb:80:3e:3c:71:88:7d:
         f3:15:f3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:23:24 2025 by rpki-client