Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3137392e3134302e302e302f31352d3135203d3e2034323330.roa
File:                     3137392e3134302e302e302f31352d3135203d3e2034323330.roa (raw, json)
Hash identifier:          wNIZ0WkthyUq9ms3PXIhENc9/749To3F+mP3S08BOEU=
Subject key identifier:   DE:92:D2:C9:32:19:2B:A9:4B:89:C4:9E:DA:AA:C0:BD:77:95:70:9D
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       6EBB96F14F7E3898101B62C3CB23F047C25A18DB
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3137392e3134302e302e302f31352d3135203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:08 +0000
ROA not before:           Wed 11 Oct 2023 19:55:08 +0000
ROA not after:            Wed 09 Oct 2024 20:00:08 +0000
asID:                     4230
IP address blocks:        179.140.0.0/15 maxlen: 15

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:bb:96:f1:4f:7e:38:98:10:1b:62:c3:cb:23:f0:47:c2:5a:18:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:08 2023 GMT
            Not After : Oct  9 20:00:08 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:3e:25:4d:75:22:91:bf:91:ed:62:3f:9c:c1:
                    c9:d0:3a:97:62:7c:34:74:89:8b:00:29:c4:64:a6:
                    08:1f:83:93:9d:aa:cf:cd:65:8c:9f:7f:8e:a5:73:
                    f8:90:a3:ba:ee:dc:ce:d6:25:75:a5:a6:73:10:d7:
                    bd:69:12:0e:15:33:41:c5:7d:14:50:eb:ef:16:eb:
                    59:fd:32:b9:bd:3e:39:e0:3d:d7:fd:c8:0c:8c:e0:
                    59:44:ad:7a:dc:e7:ee:08:b7:fa:09:ce:04:2b:86:
                    39:67:13:dd:56:e7:a8:1d:b3:bf:c4:da:06:c6:8d:
                    f9:90:ee:c9:5c:7b:43:ec:cb:16:ea:c3:b7:24:d1:
                    fe:79:31:30:cc:a9:a6:53:03:5d:8e:a2:1b:fd:0f:
                    75:84:1a:4b:be:df:9a:7a:da:bf:32:41:73:a7:ed:
                    85:5b:41:56:65:f5:02:56:99:c1:1b:2b:d6:b7:f0:
                    89:f0:3d:a4:d9:86:e0:04:4a:81:c8:00:75:b6:d1:
                    d5:56:ac:22:3b:ce:98:59:41:74:74:c6:20:21:c4:
                    11:7f:65:5c:9c:86:ff:d4:17:65:b1:8f:81:56:b9:
                    c5:ac:ae:56:86:84:3f:ce:09:d5:cf:50:89:d4:ea:
                    8f:c7:4c:7b:ef:3e:10:97:b4:73:6d:2c:01:89:e5:
                    f6:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:92:D2:C9:32:19:2B:A9:4B:89:C4:9E:DA:AA:C0:BD:77:95:70:9D
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3137392e3134302e302e302f31352d3135203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.140.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         87:7a:0e:bb:f2:3f:3e:b6:00:16:c7:89:57:8f:34:2b:01:8b:
         29:6d:99:00:42:2e:c2:2f:48:06:e4:91:3f:d5:f5:b0:f9:1a:
         df:54:36:a9:82:84:e8:cf:33:92:3b:b2:4f:06:e0:a9:a8:4c:
         bd:28:68:80:cb:dd:e2:80:3b:2c:ce:bf:8c:94:90:c6:a7:a6:
         fc:ac:bb:4d:04:14:34:79:b3:22:ec:de:cb:8f:d3:65:ce:42:
         9d:a2:b8:40:63:79:24:6a:9b:f5:1d:7d:e0:f7:01:7e:9d:a7:
         d2:c3:cc:e2:a6:2a:ab:af:b3:bd:98:02:af:ff:75:40:71:97:
         82:f6:a4:b0:73:a4:b7:eb:47:d7:aa:aa:65:e7:0c:26:4e:9d:
         6e:f4:7e:f1:4b:e3:e3:e6:0a:02:fd:61:e5:90:bd:d4:4b:9d:
         58:cc:63:63:1b:86:32:62:64:eb:f2:a2:02:33:9c:40:b2:94:
         b0:d0:6f:03:82:5c:2a:b8:de:be:68:6c:a0:87:47:9f:25:37:
         f0:61:95:29:68:49:6e:10:28:4a:2d:4a:5e:a7:5c:d2:3e:cc:
         fc:f8:bc:16:3c:9c:a2:a8:cc:57:40:9e:64:e5:80:5d:6d:f3:
         16:65:f1:2b:e9:5e:a6:ee:22:44:2d:8f:90:37:ea:44:f8:b4:
         28:dc:8a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org