Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3138322e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3138322e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          J8umFwqCR5z8buixrc3LYO0oMlFOLVXP56ws62LQS+Q=
Subject key identifier:   ED:FA:E7:4D:69:76:C0:D9:CE:66:6E:B3:B9:21:2A:80:64:F2:4B:D7
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       15DAFDF09EE9D90074830A242848BF467EE2A487
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3138322e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:09 +0000
ROA not before:           Wed 11 Oct 2023 19:55:09 +0000
ROA not after:            Wed 09 Oct 2024 20:00:09 +0000
asID:                     4230
IP address blocks:        200.182.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:da:fd:f0:9e:e9:d9:00:74:83:0a:24:28:48:bf:46:7e:e2:a4:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:09 2023 GMT
            Not After : Oct  9 20:00:09 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:83:2b:0d:f1:66:a9:16:8f:3c:e4:53:63:bc:
                    77:c2:f1:ba:44:5d:54:05:13:ae:07:a3:16:b5:e3:
                    66:71:18:dc:1a:cf:71:31:72:27:35:c3:89:e7:56:
                    57:bd:dc:93:1e:71:76:05:c9:8e:a0:70:7a:8a:8e:
                    00:e1:45:b2:f8:44:da:a3:6c:04:db:91:0f:77:ca:
                    a1:36:f7:55:36:70:66:03:58:fd:4b:a0:8e:fd:17:
                    dc:a9:19:16:96:1d:04:58:f7:c2:40:9c:cb:19:ab:
                    1b:4c:84:11:e7:a3:c6:36:76:23:b7:f4:95:77:b6:
                    fa:56:e7:2f:56:bd:4c:58:55:fc:59:b3:16:07:64:
                    cd:09:51:e6:fc:01:9a:05:64:c1:ff:6c:a9:55:2a:
                    e1:0b:b7:cc:f1:22:56:2f:b1:37:cd:86:5d:3e:fd:
                    56:39:82:27:26:97:b4:84:1f:4c:59:29:dc:58:3c:
                    5e:1a:5c:81:0b:d8:9d:63:a2:10:71:dd:ce:62:a2:
                    5e:59:64:64:50:14:b0:af:94:e9:7b:c6:ac:53:a3:
                    a0:92:f4:9e:a6:5e:b1:f2:b1:1f:60:c6:83:cd:3c:
                    a5:14:3d:16:47:c1:38:c7:c9:5b:bc:3d:a1:b4:c3:
                    f4:4b:27:66:29:bc:ae:4a:8b:b5:16:30:64:e0:3b:
                    2c:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:FA:E7:4D:69:76:C0:D9:CE:66:6E:B3:B9:21:2A:80:64:F2:4B:D7
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3138322e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.182.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         01:f8:03:7e:d3:0a:2e:a1:c9:ec:4a:52:de:55:95:4f:08:97:
         7c:79:93:8a:88:a1:a4:51:d2:cf:ff:45:9a:d0:62:c4:f1:b2:
         8f:f7:07:d2:1b:76:2b:bb:a9:58:63:3c:17:de:83:09:a3:4e:
         3b:b2:74:62:67:d6:ec:8c:67:99:84:81:cb:b6:6a:e1:c3:e7:
         c7:66:fa:0e:89:6f:d5:05:11:ed:6e:bf:83:b6:9a:6c:b7:19:
         f0:cb:41:18:b7:4c:92:b6:97:ae:bb:d6:96:c2:0e:69:7a:0c:
         e6:f3:5c:4b:fa:4c:b4:c8:44:40:46:65:17:ff:be:7f:8e:c1:
         fd:89:04:2e:76:bc:7e:ed:d9:91:51:96:f4:9b:65:14:96:f0:
         e1:bd:d7:19:19:30:c8:3c:ca:c3:c0:de:26:a1:78:cd:d8:3a:
         0b:8b:6f:86:06:32:63:45:62:d6:f8:bb:25:f2:e0:51:9a:fb:
         6d:72:cc:dd:e3:aa:34:f9:5d:e6:64:96:bd:b3:32:0c:50:66:
         c6:08:62:7c:bf:7b:2b:2a:22:56:5b:d9:2d:c6:f7:d7:c8:d8:
         90:79:1d:1b:98:82:e6:c7:43:3f:32:aa:b2:41:a0:47:a6:d0:
         48:c8:66:38:a2:f8:02:2f:7e:ff:87:d5:2f:a9:20:11:90:48:
         f4:6f:41:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org