Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3138392e322e302e302f31362d3136203d3e2034323330.roa
File:                     3138392e322e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          00k0sS8cUiva/cbFOhhoFWTTP9mmyWDUyQAs2xXDuek=
Subject key identifier:   6D:31:83:C9:E1:36:29:D2:96:CA:E9:E5:1B:80:C1:33:0E:76:9E:1A
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       19FFBF392F3CB623171249788AE9F2B2CED7B9A2
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3138392e322e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:07 +0000
ROA not before:           Wed 11 Oct 2023 19:55:07 +0000
ROA not after:            Wed 09 Oct 2024 20:00:07 +0000
asID:                     4230
IP address blocks:        189.2.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:ff:bf:39:2f:3c:b6:23:17:12:49:78:8a:e9:f2:b2:ce:d7:b9:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:07 2023 GMT
            Not After : Oct  9 20:00:07 2024 GMT
        Subject: CN=3082010A0282010100CC7010414C567EE62C4F2D9AF953D00A39D911F3DF4578F0006BB26CC824326D168F9C94193D5E3D9E3A8BE2EFA405675753459016F931C4B5E1A8F96C92FFF2A510626BBFE3F543F752A7CDE22FBD7FCBDF9042DB2C6278350D4F05EE8042C595777078FE168DBA33A761D7F1B451539FED7574FBDB46FC3743106EEBFBB7F06BDC512B96AD5382ADDDF69196FE4867A54E7F487C217D7509A355B73A6F96F8B88CCEE231836632807E07D84AA0437B41543F1DB5E1270ACC3DE1EF24D4973F4E42087646B7BC5F376861B2AB715BB7784CEA4011D18011A964BCA926BA0ACC5EEF28C184FA3127EB44B26F07841BC56EE453D436C1949E6F2B3FC2EF1966570203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:70:10:41:4c:56:7e:e6:2c:4f:2d:9a:f9:53:
                    d0:0a:39:d9:11:f3:df:45:78:f0:00:6b:b2:6c:c8:
                    24:32:6d:16:8f:9c:94:19:3d:5e:3d:9e:3a:8b:e2:
                    ef:a4:05:67:57:53:45:90:16:f9:31:c4:b5:e1:a8:
                    f9:6c:92:ff:f2:a5:10:62:6b:bf:e3:f5:43:f7:52:
                    a7:cd:e2:2f:bd:7f:cb:df:90:42:db:2c:62:78:35:
                    0d:4f:05:ee:80:42:c5:95:77:70:78:fe:16:8d:ba:
                    33:a7:61:d7:f1:b4:51:53:9f:ed:75:74:fb:db:46:
                    fc:37:43:10:6e:eb:fb:b7:f0:6b:dc:51:2b:96:ad:
                    53:82:ad:dd:f6:91:96:fe:48:67:a5:4e:7f:48:7c:
                    21:7d:75:09:a3:55:b7:3a:6f:96:f8:b8:8c:ce:e2:
                    31:83:66:32:80:7e:07:d8:4a:a0:43:7b:41:54:3f:
                    1d:b5:e1:27:0a:cc:3d:e1:ef:24:d4:97:3f:4e:42:
                    08:76:46:b7:bc:5f:37:68:61:b2:ab:71:5b:b7:78:
                    4c:ea:40:11:d1:80:11:a9:64:bc:a9:26:ba:0a:cc:
                    5e:ef:28:c1:84:fa:31:27:eb:44:b2:6f:07:84:1b:
                    c5:6e:e4:53:d4:36:c1:94:9e:6f:2b:3f:c2:ef:19:
                    66:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:31:83:C9:E1:36:29:D2:96:CA:E9:E5:1B:80:C1:33:0E:76:9E:1A
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3138392e322e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.2.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b0:85:c8:62:0d:19:19:8b:44:4c:21:33:1f:f2:3a:06:17:c4:
         44:0a:f7:22:fc:87:6d:4e:03:31:7a:34:09:6d:7c:02:54:41:
         4d:27:ac:da:a9:f2:58:ad:50:69:7b:48:6b:4b:27:35:0d:42:
         b6:37:86:9d:53:a9:c1:18:82:c1:73:de:c4:8a:a6:99:8c:15:
         81:39:77:d1:52:1b:98:c9:2f:eb:a9:a3:68:e4:f0:67:1e:d3:
         2a:eb:e9:26:9c:b8:c5:8d:59:9a:17:13:04:7a:1e:31:81:8b:
         fb:85:b0:cc:d1:46:48:7d:5c:40:ac:09:ff:36:14:16:9a:95:
         ac:1f:f8:00:b3:9b:94:2c:25:a2:3a:25:96:06:0e:c4:1f:c0:
         48:89:95:73:8e:70:ec:75:2a:2f:eb:0d:50:f5:05:49:2c:6e:
         f8:85:bf:0b:29:64:26:3c:b6:2b:2b:1b:49:4a:fd:b0:44:f3:
         4d:8c:42:27:de:71:5c:aa:53:94:8e:86:a4:18:f5:64:43:17:
         57:44:57:f3:56:c9:9f:c8:23:d1:11:d9:1f:99:2b:cb:5e:16:
         17:c7:e4:ec:39:df:9a:7b:f8:c7:23:62:61:7c:6d:23:bb:ae:
         93:0e:bc:57:61:74:d7:e9:50:7f:52:74:fe:36:84:34:14:e9:
         34:59:c6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org