Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3137392e3233372e32342e302f32332d3233203d3e2034323330.roa
File:                     3137392e3233372e32342e302f32332d3233203d3e2034323330.roa (raw, json)
Hash identifier:          DLY2zTjM2uXElQZC8YUgMBfc7QZ2I8GTH8IjgiT7dl8=
Subject key identifier:   2D:73:06:71:7C:0C:2F:55:E5:EF:73:EB:B2:56:0A:99:7A:98:0C:8C
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       0FC3AEEA9FCA8EB9EA9E77CA24786E32B4DFD9DF
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3137392e3233372e32342e302f32332d3233203d3e2034323330.roa
Signing time:             Tue 20 Feb 2024 19:00:00 +0000
ROA not before:           Tue 20 Feb 2024 18:55:00 +0000
ROA not after:            Tue 18 Feb 2025 19:00:00 +0000
asID:                     4230
IP address blocks:        179.237.24.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:c3:ae:ea:9f:ca:8e:b9:ea:9e:77:ca:24:78:6e:32:b4:df:d9:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Feb 20 18:55:00 2024 GMT
            Not After : Feb 18 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ec:56:7f:fe:f5:fb:60:33:f2:d6:77:0c:f1:
                    1c:3d:23:73:27:40:a0:0f:8e:50:52:1e:55:d7:88:
                    d7:c6:e0:f3:d9:5d:a2:4c:fd:51:7b:20:f3:67:7f:
                    c0:0b:56:95:d5:75:23:eb:c1:0b:5b:79:9d:43:c1:
                    55:59:95:8a:87:c6:48:29:5a:04:60:5a:c8:b9:d2:
                    fa:54:71:78:fe:fd:ce:40:67:8d:46:39:92:ae:25:
                    91:50:bd:86:31:ba:0f:ce:22:fc:b8:b1:e4:e8:0e:
                    71:97:6c:bf:59:46:11:1f:f0:7c:da:e3:59:4f:1b:
                    13:35:03:c2:f4:a0:99:0a:5a:ad:82:84:19:c0:32:
                    c0:f5:ba:88:d6:99:ea:21:fc:12:a9:00:e2:c6:08:
                    52:f9:5a:25:29:29:2e:1f:c2:f7:f4:12:53:52:ea:
                    8a:f2:0b:b1:2c:01:55:68:bd:73:c1:cb:22:d4:7f:
                    79:49:73:15:e3:28:a8:69:f6:a5:d2:e3:ab:80:08:
                    1e:07:ef:10:a2:a2:51:f5:b2:23:68:41:f5:da:52:
                    dc:d0:c4:3e:b7:9e:8a:f8:f0:85:8e:6f:0a:64:fa:
                    6c:a2:b3:f8:07:2a:e4:df:d9:a9:af:0e:0d:f0:d7:
                    5f:84:50:48:37:e5:0d:5e:59:de:1b:04:6c:28:8e:
                    dd:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:73:06:71:7C:0C:2F:55:E5:EF:73:EB:B2:56:0A:99:7A:98:0C:8C
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3137392e3233372e32342e302f32332d3233203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.237.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:8b:ae:70:5e:fc:90:11:5e:f2:da:41:bf:7a:f9:7f:22:c3:
         37:23:1d:22:ee:03:e8:c4:c8:f8:60:f1:ac:2e:bc:11:e7:ce:
         1e:b6:d8:02:45:8b:1b:3f:fd:59:2d:98:1a:10:51:20:2b:5a:
         47:6d:b2:19:5c:ea:4c:0d:47:3a:9b:fd:39:2f:ee:57:7f:98:
         a0:b0:60:35:c6:97:1a:f8:7d:31:ec:20:39:a3:61:da:16:3f:
         32:5d:c0:b6:1c:a5:84:6b:fa:b0:fd:e5:82:c9:5e:cc:0e:82:
         b8:7d:df:9b:5b:ab:cf:49:1a:9c:2d:e4:17:5f:b2:4f:b8:a3:
         bc:55:cf:12:a4:c0:83:6e:2c:cb:03:f6:b9:95:2e:68:76:1e:
         31:b3:f9:c2:9a:04:7e:e7:7b:2c:0b:f9:3c:30:25:98:65:76:
         0c:f7:34:d1:bd:05:bc:df:62:48:34:23:ea:2c:54:71:99:8f:
         13:d3:d9:87:92:d5:6b:c5:14:de:2f:d9:83:4e:04:da:d3:b8:
         9b:9a:7c:b0:75:7a:a0:52:19:13:ba:5a:c8:48:76:b7:5b:d5:
         68:5a:d4:cf:68:7d:52:3e:91:1a:f3:7f:99:4c:45:a3:ad:d1:
         13:af:9b:45:8f:9f:70:16:1d:08:a3:e8:a8:bd:00:00:d1:53:
         34:19:7d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org