Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3137322e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3137322e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          gHnjBIPhEVCYK1eEcPNX2/GkUkK8vYazNPGh3pZIqh4=
Subject key identifier:   CD:ED:CA:C0:B6:E5:1E:76:82:53:37:D7:89:06:3D:8C:86:16:09:3F
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       01AF382C557BD4E137E76A3C68457C24E66BF6AF
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3137322e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:04 +0000
ROA not before:           Wed 11 Oct 2023 19:55:04 +0000
ROA not after:            Wed 09 Oct 2024 20:00:04 +0000
asID:                     4230
IP address blocks:        200.172.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:af:38:2c:55:7b:d4:e1:37:e7:6a:3c:68:45:7c:24:e6:6b:f6:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:04 2023 GMT
            Not After : Oct  9 20:00:04 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:84:0c:59:1f:86:69:cb:66:2f:fb:3f:a6:4e:
                    9b:28:b9:22:72:86:07:e4:37:01:24:7c:48:ff:5a:
                    12:2a:3d:4a:22:9e:de:a0:aa:18:0a:34:ae:54:73:
                    8b:84:c9:6f:b4:39:f2:db:32:e8:e6:f9:bc:b0:98:
                    d9:33:1f:eb:3c:30:27:9f:87:21:4d:ed:dd:0f:ed:
                    9e:9a:30:01:f3:af:82:53:54:ab:10:db:35:d6:b7:
                    2f:99:d6:64:8d:27:5b:a4:51:9f:c5:97:68:07:3f:
                    67:ba:bf:13:1b:34:9f:5f:4b:13:09:d8:49:15:6e:
                    e3:8a:4c:dc:72:4e:fa:00:57:ad:68:92:3f:24:f2:
                    6f:ca:76:5b:e9:6e:e8:3f:6d:92:bb:8c:cd:78:2c:
                    38:97:1c:f8:cd:80:91:1e:ad:54:f9:74:76:58:27:
                    a0:c7:17:18:08:68:0a:ab:e9:b7:0f:14:50:23:9a:
                    57:87:3f:84:2e:55:a8:7e:ba:01:20:c6:08:8b:a3:
                    92:86:3e:2e:d6:9f:e7:3d:af:81:db:7e:d5:4e:9a:
                    5f:5a:b6:d4:4e:b5:b6:2d:14:0f:52:8c:de:4f:03:
                    da:c2:0c:7b:1c:a6:be:02:9d:a9:84:ec:d7:e7:4b:
                    7c:04:0c:65:b8:03:a5:10:a3:9b:3c:e4:7c:61:9d:
                    a1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:ED:CA:C0:B6:E5:1E:76:82:53:37:D7:89:06:3D:8C:86:16:09:3F
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3137322e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.172.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         57:d9:5b:78:d4:bf:2b:b9:a4:4d:84:0b:ab:c1:66:8d:0e:92:
         fb:f6:5a:4d:8e:dc:78:83:de:7f:60:29:bb:be:34:11:0d:47:
         c3:76:6a:a6:ca:ed:d2:97:4c:f0:02:ef:dc:82:d1:e3:98:95:
         8a:41:02:52:d5:5b:ba:1a:19:4c:d0:8c:d5:f5:e5:3f:39:0e:
         8f:e3:8d:9f:19:dd:8b:10:96:d9:ab:e5:ac:c6:3f:27:19:fe:
         ed:75:e5:6a:d6:d6:91:c9:30:cc:86:51:4d:6d:fe:74:73:8f:
         f7:d5:fc:30:3b:49:3e:a4:2d:cd:53:1b:bd:df:dd:50:4f:1b:
         c2:8c:be:ef:a2:11:87:a7:e2:27:3c:ab:43:44:05:fb:58:41:
         88:77:9d:ae:09:14:d0:f4:c9:5d:12:65:ca:79:19:bf:64:36:
         3e:81:04:da:11:22:55:eb:07:de:76:94:2f:2a:6d:72:96:d1:
         72:be:08:cf:14:81:aa:5e:f9:3a:7c:2a:ca:3c:29:1a:c9:87:
         b0:ee:83:ed:db:17:d3:48:af:81:2e:46:ce:64:70:b3:29:ea:
         78:08:20:6d:4c:b0:c7:b3:23:ec:08:3a:46:59:3f:0f:5d:ea:
         a6:8c:ce:e1:4b:80:9f:8b:2a:bf:af:a7:d6:dd:15:de:01:50:
         1c:d6:e0:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org