Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3139302e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3139302e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          CRxsM0oHKOLG0SKf303ZF9S/VIk8fIAJEJW3XaT88YQ=
Subject key identifier:   5A:61:A1:C0:1A:DB:6A:96:7B:56:39:DB:C2:81:42:C6:4F:98:A2:09
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       151D5EB3B4A396401E090B8585B6BE4A29DF9036
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3139302e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:03 +0000
ROA not before:           Wed 11 Oct 2023 19:55:03 +0000
ROA not after:            Wed 09 Oct 2024 20:00:03 +0000
asID:                     4230
IP address blocks:        200.190.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:1d:5e:b3:b4:a3:96:40:1e:09:0b:85:85:b6:be:4a:29:df:90:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:03 2023 GMT
            Not After : Oct  9 20:00:03 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:32:8f:d3:e7:c1:23:bd:24:6e:48:ee:52:c7:
                    cf:0a:bf:7e:52:7f:c4:74:2b:69:dc:1b:f2:58:4d:
                    69:6f:fa:2b:e8:c9:3b:65:40:d5:1c:2e:58:20:51:
                    7c:b7:95:d8:25:1d:48:4d:d2:e1:f9:fd:4c:d6:42:
                    1d:5c:b8:bc:73:6e:1f:9e:22:09:4b:5e:37:72:aa:
                    1a:66:cd:e2:c1:dd:4c:77:b6:f5:3e:e9:b4:3c:82:
                    35:61:57:7b:ba:1c:89:56:e6:b4:22:4d:a0:19:47:
                    b0:cf:95:ee:0d:55:92:53:d5:d0:18:8e:a6:6e:56:
                    f6:b8:26:e8:6c:01:ed:72:6a:7d:43:77:87:22:72:
                    a5:64:82:2d:2f:05:32:45:e0:85:f7:1b:b8:5c:2a:
                    c7:16:a8:0c:4a:7d:6a:97:46:71:0e:19:38:29:a5:
                    f4:0e:a0:e3:95:8e:aa:10:43:e4:3c:e2:72:c3:ea:
                    2d:74:b7:25:a0:e7:b2:6d:57:96:5b:ae:57:7d:6e:
                    e2:ec:94:66:40:a3:3a:d8:6f:d7:b4:9a:8c:cb:ba:
                    59:80:76:7c:b8:2a:7b:78:1f:15:3d:70:47:da:b8:
                    9c:02:d1:e3:64:25:93:0d:6b:14:5b:9a:bd:4b:e1:
                    b6:60:cd:61:ef:6b:2b:94:ea:11:eb:46:e3:4e:fb:
                    a9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:61:A1:C0:1A:DB:6A:96:7B:56:39:DB:C2:81:42:C6:4F:98:A2:09
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3139302e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.190.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         90:70:f3:f6:0c:7e:7c:5d:e3:04:bc:f2:0a:53:73:38:37:d7:
         55:c3:7e:2b:13:d4:71:24:a5:88:68:e8:4e:1b:da:a0:97:27:
         9c:ca:7b:90:13:37:ba:c4:07:5e:9b:6b:d5:9b:af:7c:1e:0c:
         29:3e:30:49:f0:87:47:f2:09:2a:89:b3:a0:02:59:d5:ba:29:
         7b:8a:92:66:7f:3e:65:24:f2:63:9a:e5:1e:82:88:48:24:e9:
         5e:09:de:3d:e9:6f:d8:c8:4c:c4:8e:d5:97:c6:5f:2d:5f:dd:
         cb:99:bb:9d:58:d0:e5:ab:6b:f9:83:00:3e:f6:94:89:da:ae:
         36:1f:b8:1f:69:35:64:61:13:69:b4:4b:4e:cd:53:2a:13:b3:
         cd:0f:12:6a:8b:98:f0:15:60:36:0a:d9:54:78:64:c4:59:1e:
         f3:3e:ad:90:12:93:3c:5a:8b:94:37:72:84:e4:e6:30:a2:0c:
         d8:ea:d7:66:11:d7:10:f8:de:33:88:8d:2d:1b:71:d5:3f:dc:
         07:58:39:c0:5f:71:ba:40:30:0c:af:dd:c5:1b:36:86:fd:9c:
         72:9f:ed:e2:78:3b:11:63:c6:52:f6:4d:e9:27:d0:e8:b5:ac:
         14:0a:a5:60:ae:fa:aa:85:3a:71:d4:81:c2:62:82:4f:37:df:
         d0:9a:41:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org