Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/323830343a3137633a3a2f33322d3332203d3e2034323330.roa
File:                     323830343a3137633a3a2f33322d3332203d3e2034323330.roa (raw, json)
Hash identifier:          RB2+XWYn3tC8gHW9fTJvdxKOCA3r/MWquuHcTZeQCAc=
Subject key identifier:   06:A7:FA:D6:55:C5:00:10:B5:8A:70:FA:A1:AA:42:4E:8A:C4:65:55
Certificate issuer:       /CN=149DF6958A59FCFA910071567BAB07904ED0751D
Certificate serial:       2EC949C26924F6C2C90B0E40D7E5C94C32057895
Authority key identifier: 14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/323830343a3137633a3a2f33322d3332203d3e2034323330.roa
Signing time:             Wed 05 Mar 2025 19:00:07 +0000
ROA not before:           Wed 05 Mar 2025 18:55:07 +0000
ROA not after:            Wed 04 Mar 2026 19:00:07 +0000
asID:                     4230
IP address blocks:        2804:17c::/32 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:c9:49:c2:69:24:f6:c2:c9:0b:0e:40:d7:e5:c9:4c:32:05:78:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=149DF6958A59FCFA910071567BAB07904ED0751D
        Validity
            Not Before: Mar  5 18:55:07 2025 GMT
            Not After : Mar  4 19:00:07 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5d:55:b1:71:c7:dd:f1:b3:ac:d1:c9:c3:94:
                    f2:e1:41:93:ee:19:e0:5e:c5:e3:8a:34:c7:f4:94:
                    68:00:a4:0a:ab:9b:36:74:a4:18:36:2f:c7:46:06:
                    37:09:fa:9f:88:ce:0b:6c:f3:13:00:39:47:46:95:
                    e0:de:c4:3c:70:81:b4:b2:d6:59:84:2a:10:76:e9:
                    c5:7d:ea:9e:15:09:58:e2:d1:77:9c:b8:20:dc:5a:
                    ff:ac:86:9c:c9:0c:4b:aa:9a:43:b5:b4:fd:77:08:
                    9b:1d:ba:6f:79:8a:6f:2c:27:91:26:c0:a9:e4:de:
                    fd:01:ce:1e:6b:e6:91:0b:aa:f1:d4:c7:c5:21:3b:
                    cd:e0:0c:af:59:d3:5d:29:47:57:e2:64:6b:ed:0b:
                    13:b8:9b:36:5b:c5:79:ef:82:88:f7:82:25:76:e8:
                    89:65:c1:ee:dc:57:29:4a:7f:a0:13:87:78:09:04:
                    c3:f7:55:48:9d:bc:e9:f4:89:d7:4e:a4:71:4f:d2:
                    5f:60:02:47:6c:16:ca:f5:5a:60:e2:e2:0f:7b:3d:
                    ac:a6:b9:9e:da:7a:b0:97:09:c3:94:72:38:1c:53:
                    90:67:b5:cd:05:8f:74:28:ad:3f:45:02:02:da:05:
                    49:09:51:51:8e:6f:84:29:13:d6:4f:5f:3e:f1:c0:
                    da:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A7:FA:D6:55:C5:00:10:B5:8A:70:FA:A1:AA:42:4E:8A:C4:65:55
            X509v3 Authority Key Identifier:
                keyid:14:9D:F6:95:8A:59:FC:FA:91:00:71:56:7B:AB:07:90:4E:D0:75:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/149DF6958A59FCFA910071567BAB07904ED0751D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/149DF6958A59FCFA910071567BAB07904ED0751D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/1/323830343a3137633a3a2f33322d3332203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:17c::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:0c:a9:5f:88:44:f6:8d:5f:68:56:95:f0:10:1f:2c:8a:86:
         71:d2:34:ee:23:69:fc:33:89:82:2a:77:04:0c:4b:f5:2d:fa:
         55:c0:10:20:8d:c8:09:24:f7:c5:e6:38:7c:a1:64:0b:28:d7:
         1e:e1:bb:40:c0:41:d3:df:a5:19:40:e8:63:30:35:3d:38:cc:
         72:2e:05:c8:eb:4c:a6:1a:96:dd:9d:87:21:64:1d:f9:1b:aa:
         17:38:ed:b9:53:bb:23:f3:10:bf:c9:cd:bd:3f:08:e3:12:02:
         1e:0d:0e:90:b8:dc:8c:f8:d8:72:f2:85:2b:c0:91:c0:81:37:
         8c:17:0f:a1:71:49:2f:7d:bc:73:15:9f:06:60:e8:73:a6:d8:
         8c:97:65:34:09:3e:71:ed:27:38:25:23:9b:1c:27:95:26:ff:
         08:46:4e:de:5e:bc:fe:a9:2a:a8:74:fd:11:aa:ce:3e:cc:3c:
         48:2e:a7:2a:49:61:7a:f8:ff:4e:09:66:b6:21:c6:0d:79:3a:
         26:71:39:c9:ce:0b:42:97:fe:c8:c6:b6:33:ad:61:26:58:9b:
         f3:ad:fd:b9:57:a7:0d:eb:17:37:e8:d7:f9:af:0f:33:77:b5:
         05:51:99:21:7c:31:1e:f0:28:da:98:c1:f5:db:e6:a3:7f:3c:
         ca:50:22:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 19:02:45 2025 by rpki-client