Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3138392e32322e302e302f31362d3136203d3e2034323330.roa
File:                     3138392e32322e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          KN27efdzmXI4loD7z0Oi/I6T5aIAWo8yR3Mqe/vfx7s=
Subject key identifier:   54:CF:FA:71:B1:7C:85:8E:46:D0:66:DD:BD:47:38:B4:C3:B7:34:74
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       1F3AA0FEC7C7FC32F6FB409C423A0C4C74758E6E
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3138392e32322e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:06 +0000
ROA not before:           Wed 11 Oct 2023 19:55:06 +0000
ROA not after:            Wed 09 Oct 2024 20:00:06 +0000
asID:                     4230
IP address blocks:        189.22.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:3a:a0:fe:c7:c7:fc:32:f6:fb:40:9c:42:3a:0c:4c:74:75:8e:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:06 2023 GMT
            Not After : Oct  9 20:00:06 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:38:d0:be:2d:65:da:0d:06:9c:c3:4f:bb:73:
                    4d:6c:27:bd:ce:a8:6b:9a:b4:ce:8e:93:94:d5:50:
                    12:a0:61:af:54:c5:90:c8:b9:75:f4:ae:9f:03:79:
                    86:56:44:f6:de:88:1a:db:9b:69:a0:47:2d:5a:a6:
                    3f:5b:4a:a6:10:ae:7c:36:81:36:9d:73:b0:08:22:
                    79:3d:1f:fc:43:f7:40:d4:c0:07:5b:96:f9:68:a6:
                    c2:d9:14:74:8f:fe:df:f6:70:da:69:5d:e4:96:dd:
                    9c:ed:64:cc:0f:24:7c:8f:98:10:39:aa:57:11:9a:
                    71:a3:c3:93:fc:49:f8:ba:ae:3e:cc:95:16:b1:99:
                    b1:37:93:6c:a1:a5:09:d5:86:f3:bb:8a:b3:45:28:
                    8e:93:09:f1:29:53:85:6f:84:04:03:04:cd:b8:fc:
                    11:48:1e:de:a4:c1:c8:9b:56:2d:45:ed:60:c1:ba:
                    0d:78:d3:06:4b:76:1e:18:7b:fd:21:db:6a:b1:d1:
                    c3:a7:13:25:88:74:af:8a:e9:54:59:6e:b4:dd:73:
                    4d:9c:59:ad:05:58:34:20:c9:78:9e:4a:4b:f0:0f:
                    6c:4a:5b:b8:55:48:78:8a:35:2f:bc:5a:b1:03:db:
                    66:93:fc:4a:f8:42:9a:1b:32:33:72:e7:37:3f:be:
                    d2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:CF:FA:71:B1:7C:85:8E:46:D0:66:DD:BD:47:38:B4:C3:B7:34:74
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3138392e32322e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.22.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         37:66:d8:5c:29:6d:a3:59:95:3a:fd:63:13:8b:2f:b4:43:10:
         fe:04:ed:47:c5:f9:5f:e8:bc:f4:c0:d5:18:05:37:75:b4:2b:
         8a:b9:b7:d1:45:2e:1d:b9:6c:15:8a:0e:64:62:5e:6e:5d:b6:
         ae:50:c5:48:14:13:f3:0c:ed:0d:3b:c0:7d:ec:37:64:6e:07:
         88:af:30:ec:d7:16:61:6d:79:aa:1e:cc:7e:fe:37:f2:c3:11:
         e5:ce:1b:f2:5d:07:83:c7:55:42:7e:e4:25:4b:91:a6:4a:f5:
         b1:79:7f:22:cd:de:c7:44:e9:ed:e5:b3:27:e8:38:e1:a9:92:
         35:1e:b5:ea:c2:4b:ec:03:d8:15:0e:83:30:68:bd:0d:4b:bf:
         1b:c3:f6:4f:c5:14:30:f6:c0:3b:99:a5:9e:0b:49:38:1b:01:
         9a:a1:71:6a:07:14:ad:53:db:bd:9e:3f:65:dd:62:54:8e:82:
         1b:61:e5:0d:45:0c:42:cd:4d:6f:4e:b8:fe:20:40:df:74:ec:
         2a:bb:05:60:39:0f:d9:60:00:3b:63:58:b9:cd:12:e2:e0:74:
         db:36:b4:d9:d0:45:86:ed:44:00:aa:2a:0a:df:2b:3c:5b:79:
         b2:a4:19:b7:56:84:2a:b0:93:7d:b2:33:e8:4f:97:f4:d2:ca:
         43:a5:65:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org