Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3137392e3233372e302e302f32302d3230203d3e2034323330.roa
File:                     3137392e3233372e302e302f32302d3230203d3e2034323330.roa (raw, json)
Hash identifier:          /gFwva0m40uhpo0uAKkeXvXHctVDKI03WR8UbVDPoH8=
Subject key identifier:   8C:BC:B9:C9:15:A0:94:3F:B8:26:41:15:18:85:4A:A9:A4:F9:42:5A
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       268F400020A6D246721E6C802A8B608F4C37C554
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3137392e3233372e302e302f32302d3230203d3e2034323330.roa
Signing time:             Tue 20 Feb 2024 19:00:00 +0000
ROA not before:           Tue 20 Feb 2024 18:55:00 +0000
ROA not after:            Tue 18 Feb 2025 19:00:00 +0000
asID:                     4230
IP address blocks:        179.237.0.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:8f:40:00:20:a6:d2:46:72:1e:6c:80:2a:8b:60:8f:4c:37:c5:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Feb 20 18:55:00 2024 GMT
            Not After : Feb 18 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:74:ab:80:d6:c9:ba:69:01:cb:5c:fd:6d:9d:
                    5d:d7:a4:fd:1c:0d:f9:e9:ad:47:08:3f:ff:b3:8a:
                    07:6d:26:f3:75:50:22:40:93:02:ef:d4:d9:69:f4:
                    11:7f:f8:78:a5:7c:f7:99:09:fd:42:00:68:9f:0f:
                    6d:65:88:b8:49:41:f5:9d:a5:b6:4a:55:a1:a8:66:
                    77:c1:d4:3b:9f:6d:1b:9b:3b:37:9f:f2:ab:76:c2:
                    dd:23:af:36:c7:cc:39:2d:14:96:1b:30:e8:4e:af:
                    5b:a2:1f:ef:5d:1b:cd:c7:20:e2:88:1d:6b:85:43:
                    aa:ee:7c:b6:66:7e:49:e6:1e:2b:0c:9a:4d:b9:d6:
                    d0:32:18:38:ae:73:84:82:27:d0:fc:d3:71:b7:2e:
                    97:61:08:d0:3c:30:e0:4d:13:98:52:73:1f:90:2f:
                    3d:e7:4f:4a:fc:3f:ba:66:9c:02:5d:d9:81:37:0a:
                    51:60:22:94:7a:76:46:38:ea:eb:48:61:f9:3f:e2:
                    df:02:df:42:8c:f8:43:5e:23:3d:7e:ed:b2:d0:71:
                    14:47:62:74:e0:f7:ac:e3:d7:45:88:57:82:23:88:
                    b6:7c:9d:0c:66:6a:fc:23:a6:00:54:3d:73:2d:d2:
                    1d:b5:d3:53:21:fe:53:70:af:6b:59:91:9f:ce:f9:
                    9e:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:BC:B9:C9:15:A0:94:3F:B8:26:41:15:18:85:4A:A9:A4:F9:42:5A
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3137392e3233372e302e302f32302d3230203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.237.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         14:02:f4:85:90:67:21:d6:54:4c:b6:b8:88:fa:8d:28:da:d2:
         da:4a:61:fc:45:ff:83:1d:a4:76:85:14:8a:96:bb:e9:01:dc:
         c2:01:7e:03:92:56:07:55:e5:35:2e:64:11:90:01:da:a9:5b:
         6c:3b:95:f8:30:a9:d9:57:f6:b9:0e:11:24:89:62:8a:56:03:
         7a:d2:4a:af:ef:45:3b:b3:8b:8a:70:db:b4:a0:8f:04:6f:97:
         4d:12:b1:e6:5d:f4:19:3c:f3:83:ea:4e:a7:46:87:9a:be:96:
         ee:4b:91:40:9a:f7:91:2e:56:b7:4b:4b:07:46:2d:2b:65:61:
         e3:26:45:14:1e:d1:9c:13:ad:f0:16:4e:3d:3b:9f:59:8b:24:
         40:e6:74:57:45:a5:f7:b7:0b:fc:f8:1e:32:86:f3:3c:80:f5:
         b8:5d:d7:63:f5:a5:dc:bb:7d:49:36:cd:a4:b2:4b:7f:4a:a1:
         30:33:e1:3e:bc:a8:e3:ce:00:e0:6b:fa:72:52:3d:e8:11:7b:
         94:2d:12:50:d2:c8:6f:9f:8b:14:bd:4a:1d:ce:d3:01:41:1c:
         0f:89:0a:fc:9f:a2:c1:26:05:45:a8:83:83:b0:5d:47:ed:ed:
         f1:59:89:f6:bc:3d:5a:aa:f5:e7:64:aa:25:5a:79:a1:82:08:
         d9:73:56:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org