Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3138392e35322e302e302f31362d3136203d3e2034323330.roa
File:                     3138392e35322e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          /BQ/y5rGPF6N/AxW+qvO1Xgg5jtdQVNVDSR6iN5ksTM=
Subject key identifier:   ED:64:2D:7C:AD:FD:06:D2:A0:4E:EF:F1:E4:FC:9E:76:13:97:78:F8
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       1745405FE824E20C9BDF0735FFB886C0797AE2B5
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3138392e35322e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:02 +0000
ROA not before:           Wed 11 Oct 2023 19:55:02 +0000
ROA not after:            Wed 09 Oct 2024 20:00:02 +0000
asID:                     4230
IP address blocks:        189.52.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:45:40:5f:e8:24:e2:0c:9b:df:07:35:ff:b8:86:c0:79:7a:e2:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:02 2023 GMT
            Not After : Oct  9 20:00:02 2024 GMT
        Subject: CN=3082010A0282010100B2043DB103086E78CEE37C0F2C7AE767BBAC25A2A3AE59B8F7413FFCFEFB41A61C325B20F1EA642A1F0C86983FAA8E970B81693AD15A525A8A9D4469B5B47F8C408A84222AED2BC2EB3EE5ED9907F70A2411DF9803F0744C77052B1CDEBF6BC7FE1EF47BE7A0ADC36CDBC162CA8FCF6FAA64FC53183C1D5CAC6913DDAF20DE206B895D0298E2EE3E737F7A4DA87575C45E85B86F8C17B00B0DF1B043CCAB4CE768C75E5CC4ABE3095657C473D295166135B713CA1FB0A2D32FE831F5A2D70F8A63C4A9F9960964E9CE6BAE703E47366D84C22BDCD4E773FBEEE5A64B2D3ECB0CEF6CD49094587B9C7273C28D9D02A805135A97DD486C39129D2DD9178C9A5C5F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:04:3d:b1:03:08:6e:78:ce:e3:7c:0f:2c:7a:
                    e7:67:bb:ac:25:a2:a3:ae:59:b8:f7:41:3f:fc:fe:
                    fb:41:a6:1c:32:5b:20:f1:ea:64:2a:1f:0c:86:98:
                    3f:aa:8e:97:0b:81:69:3a:d1:5a:52:5a:8a:9d:44:
                    69:b5:b4:7f:8c:40:8a:84:22:2a:ed:2b:c2:eb:3e:
                    e5:ed:99:07:f7:0a:24:11:df:98:03:f0:74:4c:77:
                    05:2b:1c:de:bf:6b:c7:fe:1e:f4:7b:e7:a0:ad:c3:
                    6c:db:c1:62:ca:8f:cf:6f:aa:64:fc:53:18:3c:1d:
                    5c:ac:69:13:dd:af:20:de:20:6b:89:5d:02:98:e2:
                    ee:3e:73:7f:7a:4d:a8:75:75:c4:5e:85:b8:6f:8c:
                    17:b0:0b:0d:f1:b0:43:cc:ab:4c:e7:68:c7:5e:5c:
                    c4:ab:e3:09:56:57:c4:73:d2:95:16:61:35:b7:13:
                    ca:1f:b0:a2:d3:2f:e8:31:f5:a2:d7:0f:8a:63:c4:
                    a9:f9:96:09:64:e9:ce:6b:ae:70:3e:47:36:6d:84:
                    c2:2b:dc:d4:e7:73:fb:ee:e5:a6:4b:2d:3e:cb:0c:
                    ef:6c:d4:90:94:58:7b:9c:72:73:c2:8d:9d:02:a8:
                    05:13:5a:97:dd:48:6c:39:12:9d:2d:d9:17:8c:9a:
                    5c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:64:2D:7C:AD:FD:06:D2:A0:4E:EF:F1:E4:FC:9E:76:13:97:78:F8
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3138392e35322e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.52.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         36:16:63:a4:bd:6a:62:06:5f:4d:ff:bb:6f:79:ca:15:c1:15:
         06:1a:8e:90:93:53:4b:ad:cf:d4:84:d8:84:8c:53:25:29:dd:
         d6:b6:22:95:d4:eb:ab:3d:f5:7e:92:e3:f2:87:a2:f6:07:e7:
         e2:8d:97:a1:1f:ef:6e:03:42:10:83:95:33:76:76:42:75:63:
         fe:8f:42:12:60:d0:4a:77:4a:bc:3b:3e:8e:74:22:56:6c:11:
         7e:b5:46:ac:55:3d:92:12:8c:2c:a5:0c:d4:8b:48:4a:62:3d:
         64:06:e9:ae:bc:24:89:ed:e2:ab:c4:e9:d9:c2:2f:02:89:62:
         de:51:de:75:6c:db:17:fd:c6:d0:9b:3f:2d:f3:12:18:90:c8:
         ff:13:75:15:fe:15:df:4f:42:6d:6e:7e:50:b4:0b:ff:1a:79:
         62:ce:bd:75:f4:db:eb:96:f3:0a:44:4e:25:af:1f:6e:8a:87:
         01:48:72:4d:91:5f:63:98:d4:35:9f:a3:be:b3:41:fe:79:78:
         12:c0:53:c3:59:bf:65:74:de:08:70:19:4d:0b:83:6e:f8:98:
         a7:b1:b0:13:f5:62:59:a9:a9:35:62:26:a1:04:f4:a3:c7:64:
         ac:58:26:16:81:94:da:c8:7b:bf:c9:2d:d3:56:e4:e4:66:13:
         a6:f6:88:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org