Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3138392e38372e302e302f31362d3136203d3e2034323330.roa
File:                     3138392e38372e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          w0di5d6WL+OYKGBZYGQegOnbmYS9pr4xk32dkmxdydU=
Subject key identifier:   E9:78:4B:91:ED:4D:B5:AD:6D:8A:9C:74:AC:82:08:C1:76:CE:94:AA
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       04EE6BA5B91D0AD6D16B646B39DBC278B92E4620
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3138392e38372e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:01 +0000
ROA not before:           Wed 11 Oct 2023 19:55:01 +0000
ROA not after:            Wed 09 Oct 2024 20:00:01 +0000
asID:                     4230
IP address blocks:        189.87.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:ee:6b:a5:b9:1d:0a:d6:d1:6b:64:6b:39:db:c2:78:b9:2e:46:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:01 2023 GMT
            Not After : Oct  9 20:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:94:3b:b5:8e:07:be:b4:b2:86:d0:d4:df:e5:
                    ff:a1:9c:24:97:74:5c:c8:8e:21:7a:b0:8e:2f:46:
                    2b:ff:33:ea:ee:41:fc:3c:45:c6:9d:e6:9a:df:2b:
                    20:e5:0a:18:01:35:f4:35:db:e2:eb:73:b8:1e:8e:
                    3b:c3:10:10:0a:d4:63:b8:fa:1a:a9:ce:d8:45:83:
                    31:6e:89:9c:ad:e7:ab:3f:43:e5:ae:87:95:9b:03:
                    84:29:14:d8:8e:89:d9:4b:f6:e5:68:03:23:44:ee:
                    10:5f:3b:58:21:9a:0a:19:1a:57:b8:8c:86:55:c5:
                    5b:34:01:ff:e7:d5:ce:80:70:7c:ad:e9:2d:9c:40:
                    fb:71:fd:9a:99:4c:0c:47:13:40:4e:28:8a:65:d3:
                    7c:78:a4:bf:d6:ef:01:62:24:a4:9a:86:d1:3b:bf:
                    e7:33:5a:b0:0d:e5:66:86:06:db:16:67:db:df:91:
                    a9:ef:f4:ed:dd:6e:14:b5:e2:aa:01:3e:da:89:59:
                    0f:0f:2a:42:a0:5f:4e:3d:fd:ad:99:f3:f9:ee:1c:
                    e9:04:5f:e8:e2:a1:c7:f0:8b:59:8a:c1:54:6a:8b:
                    14:19:70:00:31:40:7d:79:c3:fa:83:b3:83:7d:07:
                    0b:92:93:f8:7f:6b:fb:d2:eb:ab:43:1b:fb:9a:52:
                    e3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:78:4B:91:ED:4D:B5:AD:6D:8A:9C:74:AC:82:08:C1:76:CE:94:AA
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3138392e38372e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.87.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         01:0d:6e:ee:5d:31:64:c6:87:59:c0:b1:79:01:94:97:5c:88:
         19:7b:f4:de:e0:23:0e:75:70:4e:d3:70:4e:de:df:35:32:e1:
         02:68:6a:0e:1c:18:53:f6:50:33:2f:d5:67:ae:c6:34:97:d5:
         7e:3a:61:09:fd:8d:d2:71:bc:8b:c7:e7:6a:97:3b:23:bd:60:
         5d:4d:09:38:2f:c3:db:cb:ae:15:43:67:c9:12:7d:21:c3:82:
         ee:81:58:17:dd:e0:87:15:24:1f:ca:71:28:14:e0:e5:ef:b1:
         88:97:fb:38:00:f9:d7:45:38:7c:bf:d0:da:69:8d:71:15:ab:
         72:94:d6:ab:83:eb:7a:ea:40:0a:5d:05:17:b8:99:eb:b1:96:
         97:fb:e3:b0:b0:a5:5c:b0:69:4d:a9:d4:26:ee:20:9e:e3:8f:
         34:53:f8:a2:c1:f8:f9:c1:aa:e5:a5:44:47:34:80:2e:8a:28:
         15:56:60:5c:23:e2:49:78:a6:86:e5:f3:cc:6f:37:a4:6a:dc:
         d0:0e:ad:03:37:08:c5:eb:d7:37:96:58:ce:e5:84:90:d2:21:
         0b:33:99:43:20:73:dd:62:03:31:6a:d1:6e:37:cf:be:30:7c:
         d5:c4:c1:ce:1e:6e:d5:8b:84:ff:3d:7b:05:43:30:e2:6f:25:
         38:8b:86:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org