Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3138392e38382e302e302f31362d3136203d3e2034323330.roa
File:                     3138392e38382e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          pfCQNNpiINQNxEpHB8mlJmhivEp3dSVl871yahkIIHc=
Subject key identifier:   14:47:69:35:F4:2A:A4:19:88:2A:A4:2A:32:CA:C3:D8:6C:1B:5A:54
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       723FA0B96029B315A55B9A580653C4A435B6A1C3
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3138392e38382e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:00 +0000
ROA not before:           Wed 11 Oct 2023 19:55:00 +0000
ROA not after:            Wed 09 Oct 2024 20:00:00 +0000
asID:                     4230
IP address blocks:        189.88.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:3f:a0:b9:60:29:b3:15:a5:5b:9a:58:06:53:c4:a4:35:b6:a1:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:00 2023 GMT
            Not After : Oct  9 20:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:07:01:98:03:85:8a:1e:ac:db:6d:5d:bf:d8:
                    f6:e0:ac:34:2c:79:bb:c2:f1:f5:6d:96:63:1d:ae:
                    ae:4e:53:1e:73:88:af:51:eb:79:b9:fd:42:96:27:
                    96:48:16:1f:03:ce:49:06:94:8b:45:36:13:ad:41:
                    be:74:24:a3:6b:97:84:83:fe:70:ae:48:1a:09:d4:
                    72:87:fb:0d:0a:26:31:af:b7:67:5d:2a:7c:af:40:
                    ec:00:d0:8d:3c:f5:37:ae:65:63:ff:8a:06:71:f7:
                    09:83:7a:32:df:b4:a1:8e:f4:00:3c:93:12:1b:f2:
                    3d:42:66:19:3b:f4:c3:bc:cf:f4:62:50:84:c3:18:
                    82:70:a8:58:12:8a:41:55:21:91:44:df:45:37:18:
                    e6:0e:d6:e0:97:70:06:0a:93:e4:bd:9c:79:8b:3b:
                    da:2e:2f:e8:8f:e2:33:7f:5f:10:ca:83:9b:6b:90:
                    3d:17:9e:be:d4:65:80:a9:42:94:d4:68:bf:10:9a:
                    07:04:cd:e9:72:68:d4:c3:2a:07:d7:80:1f:94:ea:
                    b1:3a:ac:eb:de:bd:47:72:86:70:66:71:81:80:5f:
                    58:e1:2e:e8:1b:26:22:bd:c3:47:62:c8:0e:b5:28:
                    c5:7a:1d:9b:bd:76:08:cd:d5:3e:38:8c:f8:69:0b:
                    b2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:47:69:35:F4:2A:A4:19:88:2A:A4:2A:32:CA:C3:D8:6C:1B:5A:54
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3138392e38382e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.88.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         34:bd:3e:44:91:8a:8e:6e:d0:c9:40:d2:1e:28:38:21:b5:69:
         e9:46:08:f5:ac:6f:1b:11:1a:19:cc:95:4b:21:c3:31:d1:1f:
         56:44:a4:65:91:7a:c8:7a:1d:77:c0:f8:e8:06:9f:93:9e:53:
         38:bd:ea:ca:14:7e:cb:0c:38:80:22:e4:11:d7:54:42:07:f9:
         a8:90:f8:41:88:b9:30:f0:e0:72:d8:bb:82:78:31:16:1e:70:
         49:39:e7:b1:d4:55:3b:57:88:51:00:02:c4:80:ca:9c:17:a3:
         4a:5e:ed:20:a6:b5:b1:63:fe:51:68:b0:f3:57:0a:52:fb:5c:
         c2:f4:ac:db:66:dc:4a:37:22:85:9f:b2:1a:a3:fc:9e:ae:32:
         a0:65:7b:07:f0:2d:de:eb:b7:34:47:3d:50:5c:10:aa:7c:bb:
         de:80:33:f4:c8:2f:e7:c8:19:97:01:73:0c:10:55:7a:71:4a:
         28:d4:1e:64:ff:6f:71:f2:17:3a:4a:82:14:a4:b6:19:49:fa:
         63:88:bb:7d:ce:18:a2:7f:a0:e9:46:0f:ea:61:10:48:73:29:
         91:83:85:37:c2:ce:64:cc:b7:fe:c1:e1:b7:35:0f:1c:4e:03:
         ab:ed:a6:22:7f:9a:b5:76:7b:4a:1f:aa:44:e8:23:fe:80:10:
         c7:32:6b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org