Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3138392e38362e302e302f31362d3136203d3e2034323330.roa
File:                     3138392e38362e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          sf1JNrWhhTmwcqRZSrP4DFBWB71Vgi0j7MdEJfcex6o=
Subject key identifier:   20:92:DB:3A:13:66:8D:E3:F1:9F:A4:F0:E5:88:F3:DA:1C:38:30:84
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       31A135F38500FEA629AE9F6DBC69CC82F6B52C51
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3138392e38362e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:08 +0000
ROA not before:           Wed 11 Oct 2023 19:55:08 +0000
ROA not after:            Wed 09 Oct 2024 20:00:08 +0000
asID:                     4230
IP address blocks:        189.86.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:a1:35:f3:85:00:fe:a6:29:ae:9f:6d:bc:69:cc:82:f6:b5:2c:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:08 2023 GMT
            Not After : Oct  9 20:00:08 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:62:7b:28:42:9b:6c:0e:db:e9:8e:24:a4:a3:
                    b6:d4:f6:23:8f:b8:ce:0e:30:3e:a4:df:7f:67:6b:
                    d8:8e:04:7c:99:d0:52:82:30:e5:08:d8:a0:81:1d:
                    24:0b:9a:f8:a6:61:1c:5a:6e:c4:f7:fc:16:85:4b:
                    60:1a:5c:97:50:08:82:78:b8:36:c4:61:75:0b:2d:
                    f4:97:21:dc:ab:d1:1b:2e:45:71:a7:7a:a3:76:05:
                    20:c7:17:d0:f3:38:93:5b:e3:f9:c1:f3:4b:59:09:
                    17:d7:87:ba:19:8a:07:59:b0:73:17:94:5a:52:fc:
                    5e:31:9b:fd:e9:25:4e:c6:1d:c5:11:a1:7c:fa:79:
                    cb:f0:9c:1e:78:c6:26:ed:b7:41:84:98:00:d8:f1:
                    90:62:01:24:7f:ff:ea:28:8b:18:06:da:da:7f:70:
                    2e:f4:d9:97:37:03:73:2c:21:4f:8d:81:7f:db:0a:
                    d1:13:34:97:71:70:fa:20:df:8d:e7:07:3e:76:88:
                    96:bc:5b:a0:7d:2f:c6:a7:cd:a2:8b:45:fe:0a:13:
                    22:49:ab:76:74:5a:00:42:2a:df:64:14:d5:f0:dd:
                    f6:76:b8:60:00:a2:fa:d7:19:78:42:ec:57:74:b8:
                    13:8c:a0:2c:95:7e:1c:a6:e9:37:95:0f:69:f5:19:
                    83:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:92:DB:3A:13:66:8D:E3:F1:9F:A4:F0:E5:88:F3:DA:1C:38:30:84
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3138392e38362e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.86.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7a:8f:93:c8:5f:4f:8d:ee:8d:80:95:3c:dc:46:14:63:3a:39:
         6d:0a:56:6f:66:29:13:5e:56:21:ac:5d:03:96:3a:6e:f6:60:
         58:4c:ec:e3:13:b2:ea:32:6a:78:ae:f8:36:2c:fb:6b:c1:e3:
         eb:7d:8d:ce:a3:3d:23:ed:99:6f:27:72:40:6c:cf:9c:30:bd:
         7a:3e:60:86:26:16:44:7c:5c:f4:81:b9:fb:8a:75:44:b0:7d:
         52:37:8f:55:72:f6:f1:3c:9b:8c:fb:4e:91:26:9d:2d:cb:25:
         0a:89:34:74:e7:22:e6:90:5d:2e:7d:ba:09:ef:7b:77:6e:f2:
         03:56:d7:34:25:3f:a1:27:3b:52:20:41:00:96:fe:a5:75:9e:
         08:69:4c:c0:18:1d:be:c4:cd:9f:80:7b:5a:8d:1f:55:cf:fa:
         8b:9b:de:ea:db:96:61:d0:b4:83:c8:da:b9:23:6d:62:51:3d:
         60:c7:dd:95:2e:b7:87:e6:d1:e6:55:30:1e:0d:4b:26:81:65:
         8b:d8:b4:3b:72:d7:09:3c:8b:c8:d1:cf:ce:44:87:f8:01:55:
         dd:6e:56:37:c0:f2:90:31:41:d1:25:d2:ed:0f:06:a9:ff:d8:
         64:ac:18:25:4e:39:21:e5:59:85:47:8d:62:6f:9c:59:54:56:
         62:88:05:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org