Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3138392e34322e302e302f31362d3136203d3e2034323330.roa
File:                     3138392e34322e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          +d9BsGe6zkO13yOK4H6oD9X0TrV1N5YDf+8zgxWC4Tk=
Subject key identifier:   36:6D:65:69:93:F6:18:3B:5A:A8:F8:EB:60:C3:1F:2C:8E:35:3B:09
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       633B7A305CB6DD4C9A253F4721ADD480936AC6EB
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3138392e34322e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:05 +0000
ROA not before:           Wed 11 Oct 2023 19:55:05 +0000
ROA not after:            Wed 09 Oct 2024 20:00:05 +0000
asID:                     4230
IP address blocks:        189.42.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:3b:7a:30:5c:b6:dd:4c:9a:25:3f:47:21:ad:d4:80:93:6a:c6:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:05 2023 GMT
            Not After : Oct  9 20:00:05 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:fb:05:95:59:9a:28:a2:f4:53:f6:b0:1e:61:
                    75:ff:e7:42:39:64:aa:81:90:84:54:6b:2c:04:8c:
                    fd:7f:a1:28:3a:5e:ab:b3:e6:73:8f:fa:f1:b0:08:
                    0f:8c:19:45:d8:7b:dc:06:aa:b6:cc:38:f8:db:ed:
                    9d:a8:69:91:4f:22:44:5b:8b:9d:07:51:f5:5d:41:
                    44:d5:8c:1d:09:20:61:c3:50:ac:23:c3:a0:1e:3b:
                    38:b0:13:fb:78:3a:55:f6:7c:05:13:ac:0b:7a:b9:
                    48:da:f6:af:4a:2f:57:d6:90:25:03:ea:74:26:31:
                    2e:61:d3:4d:96:43:6a:d1:ff:69:01:db:d3:f8:c8:
                    04:e2:cf:84:7d:82:ca:56:58:eb:d3:d3:3e:00:00:
                    c5:73:27:05:4a:fc:ec:a9:49:3d:42:29:d0:a8:4a:
                    79:6e:23:cb:dd:f3:1e:d4:d6:8f:e4:f1:4a:e5:ad:
                    d5:70:01:92:ca:4b:9d:ff:df:0a:06:2b:cc:ba:d2:
                    76:10:47:ff:57:7d:d7:0c:84:e2:d4:89:4c:dc:c4:
                    8b:c3:46:6c:9f:1e:2a:b6:f9:86:d4:b4:30:34:2d:
                    41:bf:02:b0:6c:28:bf:25:c6:47:4f:26:d1:45:94:
                    b5:bf:55:09:1d:d1:18:29:f5:fd:e7:ae:2a:f1:7d:
                    ad:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:6D:65:69:93:F6:18:3B:5A:A8:F8:EB:60:C3:1F:2C:8E:35:3B:09
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3138392e34322e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.42.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         94:1d:bd:ab:a4:a6:fd:3b:aa:94:83:5c:98:7c:35:3c:f6:d5:
         e3:48:42:d5:c0:69:5e:ac:71:6e:46:17:30:45:3d:7c:11:d3:
         5d:2d:29:46:39:4e:8d:b5:5a:76:f9:6c:55:1b:79:f4:28:01:
         89:47:50:7f:61:b0:e1:38:10:15:53:c5:4d:f7:34:b9:05:de:
         3e:f1:ce:9d:96:6a:20:a6:dc:56:fc:d4:93:6d:39:de:23:50:
         1e:56:84:79:8b:79:ed:fc:8d:17:1f:0c:71:a5:9b:d2:5f:fc:
         75:0b:68:30:10:2c:84:99:99:e2:2f:99:5f:43:71:d4:86:15:
         dd:e8:a0:66:43:ff:63:80:20:ca:5b:49:27:3e:76:35:91:c5:
         b6:98:bc:9d:45:db:7c:da:6b:15:ba:9a:f0:9c:7b:11:5b:65:
         18:37:83:4b:dd:58:53:e0:f1:7f:c9:84:28:a3:2a:8b:39:8c:
         b0:25:c4:2f:bb:7c:76:1c:8f:68:b0:8f:39:03:71:a2:9b:7a:
         e7:31:76:0c:cc:f9:7b:8e:ac:c7:22:68:70:89:71:d6:d7:e2:
         68:dc:46:50:0c:53:c7:39:eb:d9:28:f5:7d:66:5c:4e:e9:c9:
         95:b1:53:a3:ce:86:03:9e:c9:80:78:d7:86:ad:d9:c8:ee:69:
         e3:2d:00:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org