Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3138372e34332e302e302f31362d3136203d3e2034323330.roa
File:                     3138372e34332e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          Emzu+oIeQ6YpPb2n/iVEprwJU1vWjlu6cO7vzy27dxw=
Subject key identifier:   C4:B3:FA:29:86:C3:EE:E6:E2:F5:3B:2D:87:2A:8B:D1:D9:77:89:0E
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       5B79C03889863F84123145AA0D5863E7738D2C9D
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3138372e34332e302e302f31362d3136203d3e2034323330.roa
Signing time:             Tue 20 Feb 2024 19:00:00 +0000
ROA not before:           Tue 20 Feb 2024 18:55:00 +0000
ROA not after:            Tue 18 Feb 2025 19:00:00 +0000
asID:                     4230
IP address blocks:        187.43.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:79:c0:38:89:86:3f:84:12:31:45:aa:0d:58:63:e7:73:8d:2c:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Feb 20 18:55:00 2024 GMT
            Not After : Feb 18 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9d:10:d2:69:b7:7c:dc:94:86:c7:5c:b1:d1:
                    01:ab:35:fb:2e:1d:94:65:0a:2d:0f:ed:ad:46:c1:
                    8a:94:d3:61:51:bc:12:fa:4c:e7:7f:0c:3b:e7:ff:
                    c9:25:f9:ea:2b:1b:8d:16:4b:b0:79:0d:38:f9:1c:
                    c7:a8:91:0e:21:6a:a6:b0:c8:57:31:50:32:0b:bb:
                    61:34:1f:84:26:63:09:61:ff:6a:b7:e1:28:19:35:
                    3d:98:0b:7f:aa:04:3a:23:0d:5f:37:29:7f:db:fa:
                    29:14:86:19:00:a8:99:d5:e6:5a:d0:dd:26:aa:e2:
                    4a:9e:bd:e1:2a:d0:40:1e:63:00:2e:63:e7:c9:7a:
                    9c:f2:94:0f:a7:c6:77:83:72:31:b5:06:f9:b6:2a:
                    1e:de:43:de:b2:cb:7c:5a:9d:d6:8a:5c:e5:8d:29:
                    7e:14:95:f2:26:00:b2:01:a1:f7:93:b3:e7:6a:ec:
                    27:f7:61:9f:f6:05:82:51:3b:1a:f1:b4:63:74:7e:
                    79:06:8f:0d:ae:43:5b:de:e0:3e:9f:7f:09:6a:77:
                    d2:e9:99:85:12:f3:b7:b1:af:b5:ec:4d:6b:4e:18:
                    49:93:f0:fd:89:04:65:ee:c0:ce:9e:fc:59:46:f8:
                    fb:5d:55:c6:3d:fa:33:8d:c0:21:ba:c3:ae:46:6f:
                    b5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:B3:FA:29:86:C3:EE:E6:E2:F5:3B:2D:87:2A:8B:D1:D9:77:89:0E
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3138372e34332e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.43.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         47:82:2f:3c:0a:94:4a:9e:2e:bc:a3:65:63:52:fd:81:db:e8:
         d7:23:67:02:fe:2c:2a:2a:07:c3:68:09:45:8b:0c:c0:87:cb:
         38:69:34:cf:4c:a0:bf:1b:e0:67:7b:a6:a7:cd:97:74:0d:e7:
         d4:b6:8a:89:19:fb:2d:6f:cc:27:70:d8:51:b3:49:a3:0a:c4:
         02:bd:75:77:1f:86:4f:4b:93:60:6b:10:ca:85:74:d6:62:b7:
         c8:66:b7:ec:16:fa:d2:7a:c4:3f:c0:73:aa:2b:93:01:5a:d0:
         c4:8d:f0:db:30:9f:cb:37:18:14:39:54:4f:13:6e:18:69:38:
         f8:45:36:c3:b6:66:e6:28:14:0b:8d:e7:1f:69:51:2b:10:52:
         b2:4d:c9:aa:b6:51:f7:f5:61:66:ee:77:d1:1c:b9:4f:5b:44:
         49:fa:9c:66:a7:a3:ec:20:1d:d4:40:f1:17:97:ac:dc:f0:98:
         af:c5:51:09:28:84:97:5f:55:27:2e:0d:94:10:5b:53:05:93:
         de:ce:fe:45:a2:65:95:b9:68:f1:b4:79:b2:bb:f9:c4:45:9a:
         06:31:e3:29:83:62:1c:9e:37:ff:28:86:41:2a:43:21:8e:59:
         b3:e9:91:c1:e2:72:f7:f7:e7:35:92:a8:b3:64:cc:22:26:04:
         92:c9:2c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org