Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3138392e31372e302e302f31362d3136203d3e2034323330.roa
File:                     3138392e31372e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          aNkDYs72dt0TjPdHBjLCnFYGElrDOQsiqTO9rax76GA=
Subject key identifier:   80:3D:C4:38:CF:83:F3:87:7B:2A:27:09:55:C5:26:92:78:09:EE:EC
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       22E480792653C515C3B011B34FBA4E64563E3586
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3138392e31372e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:00 +0000
ROA not before:           Wed 11 Oct 2023 19:55:00 +0000
ROA not after:            Wed 09 Oct 2024 20:00:00 +0000
asID:                     4230
IP address blocks:        189.17.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:e4:80:79:26:53:c5:15:c3:b0:11:b3:4f:ba:4e:64:56:3e:35:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:00 2023 GMT
            Not After : Oct  9 20:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:02:f7:bc:47:ce:c2:df:1a:09:ec:44:b9:2f:
                    84:e4:a2:dc:8f:11:4b:68:8a:e8:37:f1:b2:5c:2f:
                    db:aa:c6:f5:85:b1:55:ff:64:f8:60:00:f6:92:88:
                    a2:fb:af:8c:a3:ae:4d:a2:5f:97:f2:a1:e5:84:c4:
                    e2:48:37:54:27:cb:6a:78:ad:b9:a1:a7:f0:59:17:
                    4a:6c:ff:4e:b7:93:13:28:7c:d4:71:1b:29:5b:95:
                    58:1e:e4:d4:ad:5a:c0:00:52:54:c0:de:ae:db:0c:
                    44:6d:e2:8c:79:e9:fc:7e:14:4a:7b:d1:80:66:9c:
                    f6:3d:70:08:59:91:a3:a1:28:30:6b:89:68:45:bd:
                    e1:fd:5b:75:12:6e:bd:7b:30:66:1b:f5:a6:43:d0:
                    df:13:50:16:71:a7:7d:02:51:8e:ce:6c:61:5d:de:
                    2d:d1:b9:61:68:43:9e:78:93:1f:b7:13:f6:62:45:
                    48:fe:b3:72:7e:92:d9:e2:66:40:45:39:76:94:e8:
                    84:e6:7a:aa:5d:cd:c4:34:94:b9:2c:e0:31:13:85:
                    b6:ef:15:0c:ce:6b:2f:cc:8c:0b:cf:fc:91:da:a4:
                    5c:f5:21:0a:76:08:2f:2d:21:db:e9:c6:4a:ea:7d:
                    af:07:33:02:18:53:b1:fb:bc:9a:f8:d0:34:ea:bc:
                    18:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:3D:C4:38:CF:83:F3:87:7B:2A:27:09:55:C5:26:92:78:09:EE:EC
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3138392e31372e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.17.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         85:e4:45:04:b0:72:ba:e0:bb:02:c0:c8:82:d4:a7:aa:81:68:
         ae:92:b4:7f:a4:f2:18:c8:f4:cf:a3:80:6f:02:ee:ab:1e:0f:
         41:bf:63:10:64:2a:0e:49:26:bf:0f:0f:32:66:8a:b6:b4:e8:
         69:af:1c:69:46:a0:50:de:8b:66:a8:4d:ec:98:3c:c8:7b:c0:
         5b:6a:c1:f4:10:1f:d1:91:c6:18:c9:49:c0:fa:1d:13:aa:e7:
         77:52:47:b6:b6:4b:53:7d:97:ab:c7:7e:5d:ce:02:18:a5:26:
         d1:4a:07:a8:46:86:44:34:d9:c3:20:6a:78:9e:26:8c:63:df:
         1f:f9:a9:89:00:ea:43:30:08:14:ce:ab:95:e2:e7:8d:95:6a:
         fb:a8:0e:14:78:bb:ed:af:5a:89:9a:4f:9f:52:d5:94:9a:ab:
         04:56:6f:de:38:95:98:ab:48:f6:5c:28:df:bf:2d:0a:9f:a8:
         13:a3:cb:f7:f5:96:77:f7:28:55:00:86:c4:44:1a:d2:3c:0c:
         2b:a9:69:01:f8:55:c4:49:1b:ce:a5:9e:94:e2:b6:72:ef:6c:
         cb:2c:4e:f2:63:60:1e:ae:36:0b:0a:a2:f8:7a:20:1a:73:e7:
         c8:e7:14:9b:4b:a3:56:46:ae:bb:fe:f8:49:1b:92:28:99:94:
         e1:5c:7b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org