Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3138392e31362e302e302f31362d3136203d3e2034323330.roa
File:                     3138392e31362e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          gVkxm61sN3kgsmTQ0X/8J2+G6TTZ7z/mC8vlKMjWoeU=
Subject key identifier:   D2:11:87:56:95:45:15:97:20:7A:FA:DA:FF:FE:0D:85:8A:E4:8E:54
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       6455F856C2E37D08B32AB909D2A96A6FEB77F322
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3138392e31362e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:07 +0000
ROA not before:           Wed 11 Oct 2023 19:55:07 +0000
ROA not after:            Wed 09 Oct 2024 20:00:07 +0000
asID:                     4230
IP address blocks:        189.16.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:55:f8:56:c2:e3:7d:08:b3:2a:b9:09:d2:a9:6a:6f:eb:77:f3:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:07 2023 GMT
            Not After : Oct  9 20:00:07 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0e:c1:a7:0c:e3:b2:af:4f:ed:19:8b:30:81:
                    e5:40:24:01:cf:34:a1:e9:b9:4b:21:11:78:03:50:
                    53:c5:c4:51:b7:76:cb:34:e0:c6:0e:b0:9e:75:95:
                    1b:8e:8a:79:59:88:2c:a4:a2:f2:35:93:68:07:19:
                    c1:00:ce:96:03:cc:f9:91:a5:e5:1d:68:f9:b0:7e:
                    dd:f5:6d:a3:7e:f8:f2:2f:3c:97:68:b0:21:da:52:
                    f2:5c:76:59:f0:b1:36:e6:f4:d6:af:aa:4b:b3:68:
                    17:0c:b7:18:b9:f0:f4:f2:52:82:dd:69:bd:ca:0a:
                    42:73:d6:9e:21:d5:4b:c1:f6:7e:ea:d8:e4:06:c4:
                    7b:36:da:a0:5f:35:bc:df:5a:d6:2a:d3:bf:b8:a6:
                    e7:da:2d:1b:b2:14:87:3e:59:1f:8b:60:1e:8e:62:
                    2a:a4:4c:e2:cb:3a:45:5f:c0:4f:11:f0:f9:f6:29:
                    7e:ed:a6:c7:cb:0f:93:ef:cb:5d:0c:a6:c5:ef:35:
                    67:bb:2d:09:cf:8f:bd:28:4d:64:81:54:f6:ba:05:
                    6e:30:bf:14:1c:1c:ec:c8:b1:4c:54:b8:f8:96:93:
                    a0:bb:c0:ca:4e:b4:85:c2:1d:75:17:c4:b1:f0:b5:
                    38:5d:a9:2b:1e:e5:7d:05:da:3d:b6:a3:3e:a3:1a:
                    c5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:11:87:56:95:45:15:97:20:7A:FA:DA:FF:FE:0D:85:8A:E4:8E:54
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3138392e31362e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.16.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         48:c8:73:43:df:bd:65:1f:0f:eb:c0:46:10:b3:e2:1c:f7:8b:
         49:74:31:8e:03:6c:b3:18:c5:d7:fd:1b:70:e0:09:a4:51:01:
         80:b8:a2:69:37:e3:e9:8f:2b:89:b1:e0:c4:4c:0e:a2:a3:31:
         18:fe:c6:74:32:e5:77:36:bf:a5:28:27:4d:57:b0:81:07:ff:
         97:11:b6:a2:46:8b:25:53:51:10:7f:6b:31:42:52:04:ae:40:
         ee:21:c4:6c:63:29:79:73:34:68:c5:cd:5f:32:91:0b:1f:c5:
         4c:b1:39:3f:03:d2:25:33:cf:7a:41:21:96:e6:40:37:c8:58:
         c8:bc:3c:80:05:44:b9:cc:52:b8:9d:99:c4:36:a4:e4:63:c2:
         c4:98:c9:9a:d5:98:42:c4:25:2e:70:ab:be:64:47:c3:89:41:
         a7:70:ad:4a:1e:ce:47:0c:13:b8:c1:2a:24:9f:af:14:72:25:
         c2:3d:01:eb:56:f9:51:ec:ec:2b:e9:0d:31:29:c4:56:30:88:
         86:3b:1a:f1:6f:e6:48:e7:3e:c4:1d:66:70:70:b9:fb:92:66:
         3c:a3:32:15:2b:ee:04:18:ab:eb:48:0c:e1:06:e5:3b:d7:1e:
         89:6c:c9:a7:3d:ec:24:68:a8:50:64:04:79:dc:b3:1e:3b:db:
         50:ae:4f:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org