Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3138372e32392e302e302f31362d3136203d3e2034323330.roa
File:                     3138372e32392e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          iVHZ+v2vAIKlKali3NG4ZTQ/qOFuSwChfEk1GJEy13w=
Subject key identifier:   20:E2:D7:3C:5E:6A:B1:DC:56:97:06:F6:FA:7D:D3:DF:B3:CF:99:7F
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       59B0260485D579BEE1B9620E5514D9266000174D
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3138372e32392e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:02 +0000
ROA not before:           Wed 11 Oct 2023 19:55:02 +0000
ROA not after:            Wed 09 Oct 2024 20:00:02 +0000
asID:                     4230
IP address blocks:        187.29.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:b0:26:04:85:d5:79:be:e1:b9:62:0e:55:14:d9:26:60:00:17:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:02 2023 GMT
            Not After : Oct  9 20:00:02 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ca:4b:a6:d3:89:04:6d:fe:89:df:f4:5e:41:
                    ee:17:2a:09:cd:d5:6d:f0:89:bc:49:d8:b6:f7:d7:
                    03:d3:4b:a3:76:9a:a2:72:0d:e8:9b:80:3b:26:b5:
                    78:54:ac:e5:be:95:d5:56:7c:47:7a:d0:c7:75:e7:
                    d2:57:65:c5:41:92:b1:fc:f8:7f:44:09:48:17:3f:
                    43:c5:56:0c:31:f0:be:f7:72:7e:58:4c:f1:32:2d:
                    d7:71:1f:0c:4d:c6:fd:31:7a:04:fc:8e:64:81:2d:
                    6d:16:f7:74:31:ed:ad:25:4f:5d:07:cb:f0:99:d8:
                    97:8f:cd:77:c6:58:c0:f8:6a:6c:4b:09:92:36:54:
                    24:ef:01:1c:b6:77:45:1d:de:4f:83:95:10:3b:5b:
                    76:a0:e3:04:f1:74:d7:b9:cc:49:c6:38:77:9f:44:
                    c9:4b:cb:d2:35:9a:0c:e4:7b:ff:91:f5:6d:cd:8a:
                    bf:49:6d:1c:48:b2:38:24:29:45:6f:d6:5a:f0:10:
                    c1:02:c1:7e:a4:8b:22:6f:6c:8e:b0:15:1f:fa:39:
                    36:aa:bd:ee:cb:15:c2:cc:18:a4:d7:e8:24:da:5f:
                    b3:e4:5c:df:2d:32:4d:15:ee:65:c8:57:c2:62:d3:
                    5e:d2:3f:57:da:a5:36:db:e1:cf:2f:31:9b:aa:1e:
                    af:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:E2:D7:3C:5E:6A:B1:DC:56:97:06:F6:FA:7D:D3:DF:B3:CF:99:7F
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3138372e32392e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.29.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         36:c6:85:1e:9d:b7:7c:9a:28:2c:47:20:95:dc:41:d3:ac:fa:
         f7:ee:80:51:b9:33:83:93:db:93:ef:a3:7a:e4:6f:55:d9:28:
         89:10:36:54:73:ac:bf:0e:9c:45:29:be:d2:93:5f:1a:ab:28:
         d6:37:8d:30:2f:d8:cd:09:f5:ae:e1:b1:b6:d0:e7:17:44:b4:
         4c:90:50:93:50:98:5e:f0:60:fa:4d:ee:f9:3e:e2:a6:ec:8b:
         fd:05:fb:b1:aa:4f:bf:15:7c:99:1c:9e:36:25:e3:c0:f5:6b:
         7c:18:35:75:03:0a:25:0c:4b:57:62:00:28:7f:89:27:2b:e1:
         9d:13:7d:8e:8f:9c:b8:ee:bd:e4:1b:64:0b:61:a3:6e:00:36:
         92:f5:df:39:28:96:d3:3c:a3:6d:99:da:5e:c3:2a:fe:0e:b2:
         cf:9d:a3:b0:99:ca:49:6d:9d:ed:6b:35:2d:a5:cf:78:e7:39:
         23:9e:5f:1b:a0:36:9b:9e:40:6b:00:6a:d3:f0:08:f9:89:c6:
         50:e6:de:aa:c9:28:1b:cb:f6:c6:42:f5:01:87:90:a3:e5:ab:
         29:b6:a5:eb:7d:e6:89:63:61:ea:83:f0:da:d2:19:44:3a:56:
         73:7e:63:cd:bf:4a:02:5d:47:9e:98:b7:6d:30:f6:52:9f:19:
         9d:cc:e7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org