Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3137392e36382e302e302f31362d3136203d3e2034323330.roa
File:                     3137392e36382e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          10gkiQfp1RoTUdxlF4C0WkR4k0PFZRyUdFFEACfmfgQ=
Subject key identifier:   85:F6:F3:21:B4:13:B1:01:2D:90:95:65:E3:99:F4:9F:B6:D1:E8:E0
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       157626C9CB96B668C06AEE5FC80DC117273CCEA7
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3137392e36382e302e302f31362d3136203d3e2034323330.roa
Signing time:             Tue 20 Feb 2024 19:00:00 +0000
ROA not before:           Tue 20 Feb 2024 18:55:00 +0000
ROA not after:            Tue 18 Feb 2025 19:00:00 +0000
asID:                     4230
IP address blocks:        179.68.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:76:26:c9:cb:96:b6:68:c0:6a:ee:5f:c8:0d:c1:17:27:3c:ce:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Feb 20 18:55:00 2024 GMT
            Not After : Feb 18 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7b:13:5c:c7:23:a1:4e:8e:b1:f2:d2:b2:6d:
                    ef:ee:59:73:54:20:45:ec:13:9a:08:4c:a0:57:c4:
                    ac:40:46:bb:57:08:fa:0a:91:f2:d3:f8:3f:99:8c:
                    e9:dc:78:26:f7:e1:4d:bd:ab:c8:37:50:50:5c:f6:
                    9e:40:30:fd:38:7a:ee:7e:a5:91:c9:24:f3:8e:de:
                    3b:40:6f:ed:58:b4:5f:f1:6d:65:af:e3:f3:8e:14:
                    3a:1f:b4:66:15:27:61:36:83:3f:a2:9d:a7:0d:f7:
                    7e:ad:a5:97:af:0e:16:e2:e8:8d:66:79:0a:1a:36:
                    f4:4c:a3:2c:45:ba:50:92:ed:5f:17:cc:48:6e:5b:
                    29:d9:f8:55:9e:03:33:f6:df:50:ed:d7:c7:92:ee:
                    4e:a1:92:be:0a:0e:5f:ae:12:1b:b9:4c:4f:7c:22:
                    40:c7:51:2d:ae:ef:79:cf:27:04:f8:fe:05:a4:6f:
                    62:de:3f:c6:69:21:2a:3d:5b:92:1b:76:2c:24:8d:
                    93:4d:12:89:6c:f7:02:e9:82:ff:65:b1:2a:13:cc:
                    bc:02:e5:ea:b7:20:09:b5:df:4c:7e:cd:35:06:4d:
                    c2:22:33:3a:a4:05:b7:05:a8:63:95:32:9e:b4:db:
                    c3:d6:b4:ae:11:6f:01:13:4d:f5:1a:d8:a1:d1:4d:
                    f0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:F6:F3:21:B4:13:B1:01:2D:90:95:65:E3:99:F4:9F:B6:D1:E8:E0
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3137392e36382e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.68.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         77:67:2b:a1:c0:36:05:1a:d6:63:18:f7:4d:ff:32:92:65:ef:
         08:47:52:95:fc:40:40:41:82:7a:9f:ff:55:c7:a5:58:ed:22:
         a0:f7:27:de:dd:35:5e:9c:f8:89:e6:a3:5d:48:69:3a:c8:97:
         ec:eb:2c:a0:22:d7:ce:70:0b:dc:83:c6:e1:56:0a:bf:38:46:
         d8:c0:f5:29:ec:6b:b1:4a:c9:dc:e0:ad:2d:c8:3e:b4:87:10:
         bf:3d:ce:45:79:f1:00:c1:c2:39:83:23:d2:1f:3c:4c:f1:7c:
         4a:45:b3:96:42:8b:a0:ec:3f:21:42:dc:4d:70:09:e8:32:6a:
         42:d1:98:5b:36:31:c8:43:23:db:7f:7c:fe:2e:9d:b7:76:8b:
         c8:f0:3c:08:8e:ed:17:50:fa:17:0c:14:f4:94:9e:2d:ce:cb:
         d1:30:e2:69:7b:1a:06:5d:3e:33:a8:db:6a:2a:d7:ec:8b:0e:
         a8:67:71:f6:ff:6e:b5:e8:01:a1:06:44:65:d3:18:a6:2c:81:
         58:c8:76:50:26:11:63:73:90:c0:a2:fb:17:07:9f:df:d5:71:
         41:5c:33:e6:84:89:74:64:f2:09:4a:09:ef:eb:0f:8a:09:83:
         e5:de:14:ea:17:b4:1e:0f:06:93:a4:3c:5d:79:05:b3:bf:98:
         19:e4:ee:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org