Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3137392e3134322e302e302f31352d3135203d3e2034323330.roa
File:                     3137392e3134322e302e302f31352d3135203d3e2034323330.roa (raw, json)
Hash identifier:          lr3dvTM5RJw5vC1ttSZqFQfjP6a81UWp1/nNv5b2kYg=
Subject key identifier:   EE:F5:0C:26:6B:9A:6B:01:EF:70:B3:0A:D6:31:81:AE:92:DF:13:05
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       230AC141DB80BF2EC42CD67FF75B5AFBA9F36935
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3137392e3134322e302e302f31352d3135203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:07 +0000
ROA not before:           Wed 11 Oct 2023 19:55:07 +0000
ROA not after:            Wed 09 Oct 2024 20:00:07 +0000
asID:                     4230
IP address blocks:        179.142.0.0/15 maxlen: 15

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:0a:c1:41:db:80:bf:2e:c4:2c:d6:7f:f7:5b:5a:fb:a9:f3:69:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:07 2023 GMT
            Not After : Oct  9 20:00:07 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:15:fe:c8:a6:ec:10:4a:7d:18:62:51:dd:e0:
                    9f:7b:b6:cd:98:94:e1:fb:1f:f8:7e:21:82:4b:fb:
                    10:67:7d:0a:29:c1:fc:7c:e6:c8:09:8a:c8:57:5f:
                    32:5a:ec:4f:2a:aa:c2:c9:7c:78:c7:4e:44:ca:b0:
                    07:be:b8:59:68:23:c3:1b:25:fa:73:d0:ab:6b:f3:
                    0d:2f:ca:cc:09:22:c3:63:6a:b2:f4:c5:fc:a0:16:
                    8c:8a:e0:7a:8c:2a:4c:a9:9a:af:78:7a:e1:8a:40:
                    a9:bd:91:a2:bc:33:6b:cf:aa:dd:db:c2:d7:f3:ff:
                    98:1a:80:38:2d:06:30:03:c0:b3:29:82:2e:10:d8:
                    7c:fa:ff:e1:85:f0:f8:05:31:b6:06:37:1d:68:d6:
                    b6:a0:e3:cf:d9:95:c7:59:96:2c:43:48:bf:c6:ac:
                    f9:73:6b:a8:0c:74:8d:18:f3:2b:76:a7:22:e5:b0:
                    3d:7f:d1:2c:5e:10:e8:19:5a:cb:47:29:e4:23:e9:
                    ff:54:c3:63:69:67:d1:1e:ad:00:46:32:8b:0b:9a:
                    40:13:8f:b3:5c:57:4b:5e:40:7b:1f:9f:20:5e:53:
                    0c:bd:29:ac:67:39:4e:1d:e2:86:46:45:55:6c:77:
                    0c:6f:78:f1:b6:12:c8:af:ef:e6:0c:05:08:8f:33:
                    8b:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:F5:0C:26:6B:9A:6B:01:EF:70:B3:0A:D6:31:81:AE:92:DF:13:05
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3137392e3134322e302e302f31352d3135203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.142.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         0f:20:13:ab:34:e7:c3:df:4b:3e:fc:38:03:ec:15:38:43:cf:
         c2:da:59:3b:62:61:d6:a9:53:af:8a:3c:79:02:ae:33:dc:3d:
         18:af:af:1f:3b:11:bd:6c:b2:55:69:43:6f:95:dc:d3:da:c2:
         d9:a7:fb:25:bd:91:66:c9:ef:ca:f4:03:06:4d:78:99:b7:17:
         77:db:48:2b:9c:18:21:64:c0:d6:64:1f:3a:c0:6f:a0:d8:23:
         e1:ae:ea:2e:50:02:3e:a5:e9:08:57:a6:8c:c2:bc:84:3f:d2:
         63:03:bc:2e:0c:9e:c2:59:f2:be:7d:3e:4b:4a:5b:bf:74:a3:
         ca:51:e0:e5:ea:a6:84:9a:df:37:43:48:77:88:51:34:99:cc:
         4e:77:c3:08:18:48:74:98:bb:f2:d6:9d:0f:43:b4:db:38:d5:
         fc:b7:f0:d2:a0:fd:78:b2:81:6f:86:b0:b5:46:b6:be:1c:62:
         e5:63:d0:fe:5f:03:26:c8:61:7f:0b:4b:79:e6:cf:e6:5d:21:
         85:15:d0:b8:46:c9:fd:28:6b:7e:3b:3e:6b:af:79:19:ae:61:
         cd:77:df:3b:14:8a:4e:f0:4d:1f:4e:bd:dd:9e:d4:9a:04:78:
         36:29:11:93:06:fe:7d:2c:b2:fc:06:52:7f:f1:d3:db:cf:6f:
         1c:eb:e7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org