Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3136372e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3136372e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          SfpolQPf0rmkC0msfxSWIQ7lQ/yv1s8NO9IHwFYe3BA=
Subject key identifier:   09:F8:24:B3:F9:22:A4:27:A0:49:1A:28:98:41:E9:47:3A:24:26:26
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       4DC1E032E519A3170F47E7CC1483BD2911EB8478
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3136372e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:02 +0000
ROA not before:           Wed 11 Oct 2023 19:55:02 +0000
ROA not after:            Wed 09 Oct 2024 20:00:02 +0000
asID:                     4230
IP address blocks:        200.167.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:c1:e0:32:e5:19:a3:17:0f:47:e7:cc:14:83:bd:29:11:eb:84:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:02 2023 GMT
            Not After : Oct  9 20:00:02 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:94:05:f5:6b:d4:88:34:aa:1c:14:7a:dd:49:
                    d2:0d:78:00:0a:26:09:74:39:b2:9d:28:0c:53:43:
                    8b:a9:32:87:eb:6f:34:b3:66:34:a4:13:f2:5b:92:
                    a2:c2:24:99:3b:5f:12:93:f4:22:b3:b7:b6:04:be:
                    ba:fa:98:3d:33:5b:8e:31:4e:7d:4c:d5:38:fb:08:
                    dd:30:2d:0c:0f:39:f0:39:48:88:60:95:c7:4c:f5:
                    d5:75:f8:9c:85:ea:c9:3c:6c:08:93:f4:f9:52:9e:
                    9c:d8:96:e1:2f:2a:a0:07:2b:9d:70:c3:3d:62:bd:
                    77:a1:db:41:ee:29:be:a6:38:a0:5b:51:ab:18:99:
                    40:2a:c3:f4:19:f7:4e:47:b2:0c:d4:e4:27:a5:20:
                    e6:c5:d3:9e:72:36:50:19:fc:f3:e6:b5:ba:4c:89:
                    e6:54:d0:cb:b5:86:dd:f5:f2:24:13:69:5b:97:78:
                    41:08:ec:66:72:94:d2:5f:47:64:43:8e:e0:94:ef:
                    3a:ea:94:50:d6:95:b8:4f:87:8a:43:61:e0:92:b4:
                    9a:73:d5:cd:5c:ae:c3:81:8d:85:c7:1b:af:37:b7:
                    21:2b:f0:38:a9:b4:4e:74:ed:5e:c0:8c:93:64:e4:
                    87:d9:bc:c7:e4:1a:45:4b:d8:2e:28:25:53:3a:a2:
                    dc:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F8:24:B3:F9:22:A4:27:A0:49:1A:28:98:41:E9:47:3A:24:26:26
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3136372e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.167.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9d:6c:12:1b:45:d1:aa:ff:02:ff:0c:a5:65:5e:1c:ea:32:12:
         dd:5b:cd:64:c0:9d:f8:5e:6e:ca:67:db:bf:f4:ff:62:ec:4a:
         78:8f:43:17:d5:ff:4b:ce:b8:86:89:34:16:59:9a:1a:4d:e3:
         61:01:14:a8:3c:a8:c9:77:da:71:a4:68:25:7a:9d:d6:98:c8:
         6b:1e:c4:7f:83:53:8f:20:71:ef:5f:67:9c:b3:6d:92:73:69:
         89:2e:a4:0c:90:84:65:c4:ab:6e:c4:17:a0:d8:7f:a5:05:46:
         78:6d:20:e5:cf:19:f6:91:45:52:ec:30:e5:b3:bf:94:f1:eb:
         fd:57:b8:d1:88:13:a9:0d:2b:b4:17:2c:04:7f:44:e1:3c:92:
         d7:7b:35:d2:7a:6c:ae:55:aa:db:11:6a:00:82:a6:da:2f:84:
         52:45:46:3d:22:34:cb:c4:96:c5:72:d9:37:6c:97:18:9e:2f:
         90:0d:b5:24:c9:d9:08:d5:b6:96:75:11:73:2e:44:fb:4d:a6:
         8d:e5:94:d8:cc:90:60:bb:f2:fa:fb:39:b3:56:eb:9e:03:db:
         ea:ca:07:a4:cf:9c:5e:27:ac:f5:e0:f6:bf:c3:a0:c4:c3:5e:
         b9:be:46:69:a8:e2:40:70:71:a1:c0:ac:bb:b6:89:85:dc:24:
         b9:44:06:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org