Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3138362e3234392e3136302e302f32302d3230203d3e2034323330.roa
File:                     3138362e3234392e3136302e302f32302d3230203d3e2034323330.roa (raw, json)
Hash identifier:          0WsnhM5ArVSzOOHF2kFSzaViz9z7fJ5lxEX0b/7tSR4=
Subject key identifier:   D2:3A:39:71:F5:59:F0:A8:48:7C:67:33:33:5E:FE:E0:5F:5A:C5:0E
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       70455AD508D27C249FFF930483E7AC5E414E31CC
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3138362e3234392e3136302e302f32302d3230203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:04 +0000
ROA not before:           Wed 11 Oct 2023 19:55:04 +0000
ROA not after:            Wed 09 Oct 2024 20:00:04 +0000
asID:                     4230
IP address blocks:        186.249.160.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:45:5a:d5:08:d2:7c:24:9f:ff:93:04:83:e7:ac:5e:41:4e:31:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:04 2023 GMT
            Not After : Oct  9 20:00:04 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f6:77:38:5a:b9:7f:a3:e0:c1:e4:65:98:a0:
                    be:c1:d7:cf:c6:41:16:e1:95:cf:a2:07:71:f8:4d:
                    5d:cb:b8:57:4d:87:21:53:16:14:62:40:6d:5d:c7:
                    f5:b4:6d:3f:33:04:2d:28:4d:f4:62:06:3c:94:76:
                    36:e5:35:ae:f1:87:29:e3:4b:b5:09:78:e5:1f:e8:
                    d8:79:e3:ea:1c:1e:a9:39:38:48:d8:74:29:3c:cc:
                    b9:8b:a6:e8:ba:a3:63:04:62:1f:e1:6c:30:d0:c9:
                    f7:0c:88:4d:b3:9e:10:fd:27:ce:89:7d:88:21:96:
                    ec:1f:22:0f:08:a6:94:cb:b0:d9:f8:70:c3:69:0c:
                    ef:24:0a:22:35:75:69:1d:de:6e:41:69:45:8a:18:
                    de:33:d1:ce:3c:a6:ff:5c:5e:d4:09:f8:91:3f:ca:
                    f9:ba:e4:d8:fd:6d:fe:0c:ee:ea:50:70:0b:bc:25:
                    bf:c9:56:46:c8:f4:c7:5d:f4:d9:49:7b:9a:0d:27:
                    8f:37:cf:6b:eb:3e:e1:01:b9:d9:33:55:de:7b:91:
                    8d:70:2e:ce:27:5c:a8:86:b0:c2:c0:9a:6b:7a:f6:
                    c9:b9:2c:07:82:f3:6f:ae:4b:db:13:30:63:9b:d5:
                    d7:9a:c7:8f:f8:21:85:82:55:61:64:f5:5f:bc:79:
                    7a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:3A:39:71:F5:59:F0:A8:48:7C:67:33:33:5E:FE:E0:5F:5A:C5:0E
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3138362e3234392e3136302e302f32302d3230203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.249.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         68:a4:d4:4c:1b:13:d2:86:76:dc:13:df:48:7e:4d:ce:fe:81:
         f8:81:56:7c:f3:80:23:77:d5:f0:bb:50:62:9d:a0:95:55:dc:
         48:5f:a9:84:ca:01:84:13:bf:fd:5e:07:f8:70:da:89:4a:35:
         d0:90:53:51:b3:22:ee:97:5c:93:35:05:69:4e:64:de:b0:0f:
         81:41:bb:ca:04:48:77:04:ec:19:5b:46:0e:80:1c:95:63:b2:
         e0:d3:07:13:7b:a2:b4:50:16:f2:70:b8:a5:a4:f5:65:27:54:
         4a:55:71:85:c6:10:72:70:86:8b:20:42:10:8a:14:b8:25:d5:
         9b:8d:4f:fc:5e:e1:c1:4d:ad:5e:9b:fc:a0:58:e4:6a:b7:da:
         e9:3d:bc:23:e1:fe:0a:a1:67:39:85:7b:d6:bf:8d:e8:81:1c:
         d8:a9:da:9f:9a:62:20:7d:4a:f2:99:85:3c:e0:33:00:54:41:
         ab:97:d4:c8:7d:42:bb:11:b5:b0:41:50:02:1f:67:5c:0a:39:
         70:fc:9b:a5:51:66:da:fd:84:d0:4a:cb:c8:88:73:e2:ec:bf:
         ff:0e:aa:df:d1:9d:18:9f:bc:90:50:0a:8e:c5:9d:af:87:62:
         bf:91:76:d7:98:02:64:b9:e0:eb:6f:b9:97:f6:eb:7a:e1:8c:
         58:36:ab:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org