Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3138392e332e302e302f31362d3136203d3e2034323330.roa
File:                     3138392e332e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          mxI38AzuyxS33Sg+VrbEYJTjnm8S0YoTHTJpA6HNRoA=
Subject key identifier:   38:D2:2F:5D:4B:C7:06:FD:BE:EF:54:C5:B9:CC:B3:66:F8:C0:B4:BF
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       6AFDA38C7CE6E64F7C1FE8282C3D6639D12E3529
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3138392e332e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:01 +0000
ROA not before:           Wed 11 Oct 2023 19:55:01 +0000
ROA not after:            Wed 09 Oct 2024 20:00:01 +0000
asID:                     4230
IP address blocks:        189.3.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:fd:a3:8c:7c:e6:e6:4f:7c:1f:e8:28:2c:3d:66:39:d1:2e:35:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:01 2023 GMT
            Not After : Oct  9 20:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:63:ac:86:c3:f5:58:b2:c6:eb:78:a3:09:a2:
                    4d:ef:b7:b2:20:5c:cc:2a:af:1e:37:56:ae:20:56:
                    56:69:a7:45:b1:04:17:a2:6d:2e:00:b1:f5:2a:cf:
                    35:f1:30:08:a0:36:1e:31:1b:e1:32:79:33:36:81:
                    50:98:60:e1:91:c6:e9:21:f5:55:1b:4b:fd:a4:20:
                    30:79:fb:e8:a5:37:14:69:1b:b3:a1:6c:94:ed:83:
                    67:f9:ea:b2:62:93:40:90:06:e8:de:39:25:7a:4b:
                    71:bd:a0:ed:2d:6e:eb:bd:71:40:a9:2c:1d:0b:83:
                    57:cf:03:89:b8:71:9e:24:4b:71:0e:09:b3:ae:08:
                    c6:7b:10:76:c1:ea:a3:f2:49:78:26:27:38:71:2a:
                    fd:c9:ab:5a:67:9f:c4:80:7c:d2:ed:4e:16:47:04:
                    c1:2f:d1:86:db:49:10:0d:d6:1a:c8:a6:51:4b:e9:
                    24:a2:4a:ad:67:72:50:d4:1f:c8:9a:05:3a:67:31:
                    66:32:2e:20:80:cf:7b:e1:4a:a5:c5:3c:2c:91:e6:
                    d3:90:da:ab:52:f5:cc:fa:49:1c:b5:40:e1:f6:1c:
                    a9:0d:9a:e9:9c:01:9c:3c:59:14:a9:62:f1:a8:60:
                    c4:f6:1f:68:82:fa:58:09:c6:f1:55:11:33:3c:37:
                    72:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:D2:2F:5D:4B:C7:06:FD:BE:EF:54:C5:B9:CC:B3:66:F8:C0:B4:BF
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3138392e332e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.3.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         99:e4:e9:a9:72:c9:cb:57:55:05:da:68:84:54:5a:d4:cf:50:
         56:53:ed:56:39:41:67:8c:ce:1f:4d:4b:64:38:c1:e6:d6:77:
         f0:ca:a9:cf:d8:16:9f:76:04:9f:c9:3f:69:95:bf:ec:02:aa:
         62:35:70:c9:58:3a:31:a7:e5:44:c6:1f:e9:79:8a:bf:52:7c:
         78:7d:63:08:53:c1:fc:69:ce:da:b1:6c:6d:be:a2:d5:a2:49:
         28:36:98:97:7f:ff:8b:d9:f4:c4:bd:3d:f9:18:3a:59:f9:4e:
         9c:1d:4f:5c:72:c6:e3:2c:81:8b:db:c4:03:39:d8:59:28:9b:
         f3:6b:d1:25:48:d9:e7:99:84:52:60:ed:c5:e5:f3:f4:b1:01:
         d4:ef:6d:db:21:f5:c3:10:79:86:8f:f9:69:86:75:92:1b:2c:
         47:79:6b:ea:a0:c7:e7:9e:40:10:50:c3:d9:14:d0:c6:34:99:
         2a:f8:35:a9:9c:2d:79:58:ba:d5:10:17:6c:56:b6:29:1d:9a:
         ea:ee:f5:d2:26:89:0b:45:74:dd:a4:17:29:30:e7:73:f9:0a:
         a7:a9:6d:a6:6c:a6:6e:ad:36:b0:2b:14:87:e7:04:56:a3:33:
         24:22:d3:40:66:1c:c2:bb:55:2f:b9:14:24:d1:25:e6:00:83:
         87:72:34:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org