Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3137392e3133362e302e302f31342d3134203d3e2034323330.roa
File:                     3137392e3133362e302e302f31342d3134203d3e2034323330.roa (raw, json)
Hash identifier:          sAH/6WYlraBEy/9l56kb1EK8XRNdDGH5G57Cber8k9k=
Subject key identifier:   EE:B0:A4:2B:13:73:1E:3A:E4:83:A4:6B:B2:25:C4:2C:BF:CE:94:B0
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       0BBBD0463CC1D5F9EAF68B1FCD9B6399C65087CA
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3137392e3133362e302e302f31342d3134203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:08 +0000
ROA not before:           Wed 11 Oct 2023 19:55:08 +0000
ROA not after:            Wed 09 Oct 2024 20:00:08 +0000
asID:                     4230
IP address blocks:        179.136.0.0/14 maxlen: 14

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:bb:d0:46:3c:c1:d5:f9:ea:f6:8b:1f:cd:9b:63:99:c6:50:87:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:08 2023 GMT
            Not After : Oct  9 20:00:08 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:be:dc:86:12:9a:5b:a9:2c:c8:18:27:13:e5:
                    a6:30:9f:0b:19:b7:ee:5b:58:f3:b8:e1:d6:b8:8b:
                    85:2f:2a:11:b0:b3:c8:80:13:04:13:b8:c1:95:91:
                    8b:f3:00:d5:84:66:d5:b1:f6:9d:c9:77:64:32:01:
                    ad:ed:c1:6f:9a:61:17:20:99:d6:dd:4a:d6:d6:fa:
                    30:9d:5b:11:60:8d:10:30:8a:57:11:61:c8:e9:f4:
                    42:8f:48:4f:91:7b:c7:10:3c:2f:3d:6d:d1:11:7e:
                    11:88:49:d3:21:94:14:ae:b2:23:ad:f2:2c:86:ef:
                    dd:39:15:94:ef:b0:ae:dc:50:bc:ca:92:37:92:df:
                    c1:9a:0f:a5:7b:86:ab:8c:97:a9:89:67:ff:ac:07:
                    c6:fb:75:ec:b3:ba:2c:48:6f:49:95:1e:ee:40:fe:
                    48:cf:67:9c:ec:8c:bc:92:57:48:3e:5e:8f:64:31:
                    cd:2a:f6:07:b1:01:12:48:03:d4:22:c9:7b:3c:52:
                    e0:39:4e:55:af:5f:2b:3b:64:1c:62:ed:5a:23:c3:
                    94:24:ee:66:eb:dc:d4:1b:03:13:9c:06:7c:ce:d6:
                    a3:5b:d9:fc:f2:6f:12:eb:9c:1a:8f:a0:55:bd:e3:
                    9c:2d:8d:93:bc:95:0f:8f:47:0c:4b:d3:9d:8f:40:
                    c5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:B0:A4:2B:13:73:1E:3A:E4:83:A4:6B:B2:25:C4:2C:BF:CE:94:B0
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3137392e3133362e302e302f31342d3134203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.136.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         90:b6:51:0d:9a:68:05:f5:40:d6:01:9a:87:1d:c5:59:b6:57:
         d6:4e:b3:ce:21:83:dd:91:66:9d:b8:38:e8:d3:c3:42:ee:63:
         3a:50:03:43:74:5a:da:ab:26:e3:60:ea:59:75:79:ac:b0:11:
         05:70:1d:4a:20:02:cd:ba:bb:c9:b8:52:be:6a:6d:14:09:b5:
         63:51:09:0c:86:6e:6f:a2:26:50:33:ae:1c:3d:30:af:45:66:
         09:73:b9:01:55:e4:4a:13:2f:28:76:0e:cd:58:4b:89:11:20:
         f8:9a:30:37:8f:fe:01:36:6e:0d:02:74:29:cb:75:c7:58:fb:
         ee:92:3a:1a:b7:13:35:87:70:43:17:48:a4:0f:ec:a2:8f:93:
         1f:b8:f0:d5:e9:b2:26:2e:d9:e6:33:f1:aa:03:e2:42:47:60:
         9e:ad:b7:e0:5e:79:e6:8f:ec:3a:f3:d8:07:61:9f:66:f2:1d:
         ee:9b:cb:1c:b0:9b:57:98:42:9b:02:79:e3:b1:62:66:f3:e0:
         94:80:ce:8c:4e:a6:f0:55:14:89:d7:a6:68:53:d0:2d:2c:13:
         b7:a6:6e:37:a3:27:ca:56:14:af:34:2b:cf:a6:af:7d:a2:78:
         4a:70:cf:22:a4:c7:63:ed:b8:82:df:31:60:41:e5:c7:80:91:
         17:b8:c1:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org