Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3139322e302e302f31382d3138203d3e2034323330.roa
File:                     3230302e3139322e302e302f31382d3138203d3e2034323330.roa (raw, json)
Hash identifier:          v6ylzD5E4rjRanqpomOc9zZ80VLICIN00bs4tTGkZx4=
Subject key identifier:   AC:B0:62:92:F7:AD:83:25:DF:65:44:9E:66:7D:F5:8E:EC:0E:CD:7F
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       5259E083E12AF2316ED2E7BC80DA11E68DB4F5AC
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3139322e302e302f31382d3138203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:06 +0000
ROA not before:           Wed 11 Oct 2023 19:55:06 +0000
ROA not after:            Wed 09 Oct 2024 20:00:06 +0000
asID:                     4230
IP address blocks:        200.192.0.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:59:e0:83:e1:2a:f2:31:6e:d2:e7:bc:80:da:11:e6:8d:b4:f5:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:06 2023 GMT
            Not After : Oct  9 20:00:06 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:5c:85:1b:1a:4e:ea:fd:fc:e6:02:0c:4b:37:
                    7b:85:9c:80:c9:b4:33:ef:4b:64:f5:7d:4d:aa:60:
                    f1:20:54:71:c5:65:3f:13:dd:a3:d9:93:bd:39:65:
                    38:6f:35:4d:a2:02:1c:04:01:67:fb:1e:c0:2d:f5:
                    e9:41:e5:c4:44:e6:df:43:17:23:e3:75:46:1e:bc:
                    a9:0e:d1:cb:74:d7:fb:ec:8e:59:d8:6a:dd:f0:71:
                    92:9c:69:ce:bf:c8:f8:f3:da:ac:56:7d:26:0c:c4:
                    77:24:c5:e3:87:14:a1:27:77:d7:d1:ef:8a:f3:65:
                    f9:b7:8d:d2:8e:8f:8f:e7:cd:1c:a7:83:2f:87:7a:
                    1c:5b:05:55:2d:81:36:ff:94:54:40:1c:03:2b:3c:
                    47:6e:19:f7:a1:70:0a:b0:f9:2c:9d:91:5d:7d:46:
                    0b:94:e4:9a:ef:4f:2a:cb:6c:66:fd:21:72:3a:0a:
                    7d:c5:a0:f3:c6:1e:72:5f:af:02:33:68:b7:c5:d8:
                    28:7f:15:27:8d:69:5d:4a:22:86:c5:64:1e:36:90:
                    d5:80:0a:bb:65:48:28:12:3b:13:c6:ee:4f:15:5d:
                    55:fd:03:c9:c0:6c:8a:73:8b:b9:98:f8:44:7e:c7:
                    05:fe:5a:86:50:4e:59:43:43:82:c8:44:11:a2:c3:
                    f3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:B0:62:92:F7:AD:83:25:DF:65:44:9E:66:7D:F5:8E:EC:0E:CD:7F
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3139322e302e302f31382d3138203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.192.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         aa:91:75:54:96:49:6d:bc:fb:09:70:b1:07:60:27:b6:44:db:
         74:e8:b9:05:9a:5e:a6:f0:3d:18:32:f9:17:0c:ce:0e:9d:3b:
         dc:ec:f6:06:c6:37:d5:2b:7b:6b:26:97:f9:df:a5:f2:f9:13:
         8b:83:cf:6a:e5:76:43:ba:e9:87:00:e0:3b:f4:ed:99:9d:90:
         e3:8f:96:0b:c4:98:ef:19:e8:64:05:9b:52:c5:57:43:e1:55:
         ba:37:8f:12:c0:78:82:3a:92:bc:c4:53:1c:39:38:a9:c7:eb:
         2a:94:c9:f5:70:04:ce:fe:8b:2e:b3:38:c5:f6:ff:62:4d:17:
         9c:f5:5c:82:99:2c:5f:99:3f:d5:00:19:33:ae:85:88:ce:04:
         ab:af:c1:50:f5:c8:dc:42:0a:42:ee:51:5d:f2:eb:eb:b2:a1:
         fa:c8:ca:f7:33:b1:a5:48:90:16:22:ff:00:c3:b3:d9:bc:c2:
         14:8a:90:d4:26:04:49:b1:d3:3e:1a:13:42:bd:64:24:5c:b2:
         52:f7:88:26:61:35:78:e8:46:58:28:18:34:41:e8:62:34:04:
         3d:3f:f0:55:00:1c:af:03:0a:7f:a0:7e:b6:01:d5:ae:e5:20:
         4a:7e:9b:9e:02:49:51:17:6c:ec:84:cf:e5:e3:4b:ef:f8:e5:
         0a:27:4a:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org