Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3136362e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3136362e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          8+IWvp2PtiwpTAJ8w9F/Ns5Fkb4JSKrGQOoUOd1fKWg=
Subject key identifier:   53:9A:38:01:5E:E0:95:3C:5A:25:01:EC:C0:9C:B6:43:B2:C2:79:6D
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       1712440A830D1FD76940E93CE4F1B6495040D9A9
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3136362e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:08 +0000
ROA not before:           Wed 11 Oct 2023 19:55:08 +0000
ROA not after:            Wed 09 Oct 2024 20:00:08 +0000
asID:                     4230
IP address blocks:        200.166.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:12:44:0a:83:0d:1f:d7:69:40:e9:3c:e4:f1:b6:49:50:40:d9:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:08 2023 GMT
            Not After : Oct  9 20:00:08 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b3:be:61:ae:88:2b:fe:01:b6:de:2c:7e:2f:
                    bc:d4:58:1c:06:5e:b9:53:33:f9:07:f4:77:58:17:
                    a6:18:a1:a4:5b:fd:19:9c:39:07:53:05:62:cb:c8:
                    bf:10:e1:35:e1:8d:98:93:84:c3:27:e8:df:5e:ab:
                    58:87:e1:5b:59:e8:61:78:45:ae:e3:4d:22:55:8c:
                    70:e0:d4:b4:a9:47:72:66:6e:03:8a:dc:bd:2c:5e:
                    6d:88:21:ff:47:96:b8:53:1b:4e:1a:f0:83:75:87:
                    d5:cd:ac:a1:6d:49:b5:d6:2b:94:03:4e:0c:52:f0:
                    b8:0e:83:23:6a:7a:60:5e:c7:b0:8d:33:6a:db:eb:
                    ae:15:73:ff:cf:db:48:39:94:1a:35:8b:ce:7d:1a:
                    62:02:2b:84:e8:22:b9:01:9a:6a:cd:3d:eb:c3:f8:
                    8a:c4:cb:f9:58:41:91:95:eb:ac:3d:3d:67:a9:96:
                    63:ca:90:01:5d:5d:02:a4:a5:42:89:24:b1:46:be:
                    66:e1:f6:ae:d6:18:04:83:85:80:b5:40:32:89:89:
                    ed:10:7d:5f:53:7e:7d:c6:e9:fa:d5:9f:85:5e:5e:
                    b1:c2:c0:8d:26:2d:8d:27:b1:82:f0:37:75:fb:c1:
                    8d:b4:c2:d4:91:0d:39:76:5f:75:0c:6e:48:3e:6a:
                    61:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:9A:38:01:5E:E0:95:3C:5A:25:01:EC:C0:9C:B6:43:B2:C2:79:6D
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3136362e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.166.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5e:98:4d:5d:25:46:c0:d3:92:61:7c:c8:75:a6:4b:93:7f:f8:
         74:fa:a8:ee:5e:48:23:b9:d9:7d:db:bd:ac:95:87:02:69:15:
         96:0d:0b:fc:28:1d:f4:ed:0c:30:d6:78:2f:ea:78:5c:d6:ec:
         fd:ce:ce:65:76:95:ec:34:ea:ea:06:ca:30:ee:70:ec:48:64:
         09:5d:70:07:04:4e:58:3d:c4:d9:b0:ee:f8:d8:5f:8c:46:3f:
         9c:42:9d:9a:0e:08:9c:dd:4c:0d:11:da:f5:aa:ca:34:1c:0a:
         00:5c:c0:ec:a0:31:3c:3e:2c:0e:b3:7b:20:43:bb:96:0b:3b:
         c8:6a:cc:2e:51:83:b3:86:0f:e5:14:21:14:0f:1b:e7:c3:fc:
         bf:7a:48:67:4e:59:28:58:7c:78:25:30:30:4f:02:26:61:2f:
         cd:48:4c:36:ea:16:03:63:02:66:79:01:b6:8f:11:c2:34:17:
         3a:56:81:2f:16:39:28:f6:09:55:60:c7:bc:47:ef:1b:5a:1e:
         fd:c5:34:19:c1:05:ab:98:2b:77:fd:37:ea:56:df:cd:19:54:
         c7:70:5b:aa:3c:0c:91:0e:bd:20:de:cd:a0:13:c9:c7:46:7c:
         c7:18:8d:67:fa:10:9a:38:f4:d4:7f:49:49:f7:9f:7d:25:e9:
         a6:dc:48:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org