Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3139312e35362e302e302f31342d3134203d3e2034323330.roa
File:                     3139312e35362e302e302f31342d3134203d3e2034323330.roa (raw, json)
Hash identifier:          u7VkF/+AlwX+kmA7cYuXo78I+gxkMgFlN27kcRJB2Uk=
Subject key identifier:   1F:59:3E:01:CA:8C:34:A5:13:CE:2B:3E:69:CF:13:61:B1:91:AE:BA
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       2C83E6695FD9B2EE3B4EFECA3AFD4567ED3A450E
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3139312e35362e302e302f31342d3134203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 19:00:00 +0000
ROA not before:           Wed 11 Oct 2023 18:55:00 +0000
ROA not after:            Wed 09 Oct 2024 19:00:00 +0000
asID:                     4230
IP address blocks:        191.56.0.0/14 maxlen: 14

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:83:e6:69:5f:d9:b2:ee:3b:4e:fe:ca:3a:fd:45:67:ed:3a:45:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 18:55:00 2023 GMT
            Not After : Oct  9 19:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:eb:07:09:5f:1f:32:67:8e:5c:bd:fe:fd:2d:
                    e2:8c:14:39:95:3e:4f:1d:84:0f:f6:91:29:3f:7e:
                    a1:a8:23:69:6f:3e:e4:3a:3a:09:42:e6:64:d7:44:
                    9a:d0:9b:6d:94:5d:11:c6:7c:35:4f:fc:8f:bc:dc:
                    78:03:0c:d0:66:ce:8e:ff:d2:cb:a3:b6:7f:66:43:
                    7d:59:f7:60:79:cd:89:e2:45:21:22:20:a2:17:7b:
                    38:54:fd:af:85:4e:1c:df:f9:2d:d9:34:48:dc:42:
                    4d:f8:6b:5b:5d:12:e9:43:49:1d:55:c5:f9:f8:4c:
                    79:84:b7:ed:40:ce:9f:79:8d:f3:ae:25:23:69:1b:
                    34:36:09:fe:87:ce:36:f5:74:25:9e:bb:86:6c:d3:
                    44:eb:dc:bf:89:8b:89:43:55:3c:c6:2a:54:a7:1b:
                    98:43:e6:4e:c9:f8:49:30:74:92:19:96:39:46:47:
                    65:dd:ba:6c:73:cf:6c:e9:df:20:67:9f:54:f1:87:
                    79:5b:16:21:93:c4:6b:51:11:dc:df:a7:7b:36:9c:
                    a7:90:95:9e:16:d1:95:bd:39:bc:7a:b8:d2:1a:58:
                    36:46:fe:9c:b0:ab:ff:94:e7:28:f1:56:cc:15:a2:
                    49:bd:20:2e:34:94:fb:88:7f:bd:d0:41:d0:f4:be:
                    32:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:59:3E:01:CA:8C:34:A5:13:CE:2B:3E:69:CF:13:61:B1:91:AE:BA
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3139312e35362e302e302f31342d3134203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.56.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         95:16:c2:3d:92:53:85:b9:87:f1:4e:79:6a:f6:23:20:7a:53:
         26:fa:12:bd:59:a2:0c:76:ee:22:4e:75:c7:4e:6a:4a:2e:58:
         1c:71:66:c9:5c:e8:a4:a7:4f:73:7f:b4:e6:f2:b0:af:56:4f:
         e1:59:67:00:7a:19:23:ba:7d:4e:0a:e5:ad:9d:f2:05:a8:cd:
         c7:c8:db:e7:5d:2b:af:9f:96:32:b7:ee:60:a2:34:01:15:db:
         03:01:6d:96:b9:9b:38:01:a4:0d:fd:17:b7:b0:7c:3b:dc:12:
         ca:66:52:04:42:c8:0d:9e:e6:bf:48:27:99:f0:88:37:43:84:
         14:54:f9:3d:81:44:89:af:f1:a0:cb:a7:6b:8d:79:81:b4:f7:
         36:06:96:c8:aa:41:9c:d9:19:81:d4:ae:83:0b:70:83:6b:23:
         39:09:9c:99:53:d0:b9:4a:7c:a9:a8:d9:16:a1:58:f5:2f:04:
         d3:81:df:46:59:69:c9:3e:39:01:eb:dc:53:d2:60:e1:91:bc:
         0e:26:95:d2:97:a3:fb:ae:f7:e2:75:fd:fa:3b:75:28:f4:78:
         3f:af:43:3f:b0:65:d3:c6:44:ef:1f:54:42:fa:f2:25:4d:f4:
         70:de:d3:c8:60:05:1f:a8:51:05:fc:ae:9f:90:a8:0e:5c:e6:
         1c:04:cc:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org