Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3230302e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3230302e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          kcn4ueG5ZaUksf7YVSnLjpykMnpJGnZtAnpw0cmF1Uk=
Subject key identifier:   C1:96:B6:9C:32:45:7C:B2:FB:10:8F:23:F1:2A:E3:3D:05:56:EE:85
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       3A6D536984A3238A7F7ADBB1705217271860C527
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3230302e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 21 Feb 2024 15:00:00 +0000
ROA not before:           Wed 21 Feb 2024 14:55:00 +0000
ROA not after:            Wed 19 Feb 2025 15:00:00 +0000
asID:                     4230
IP address blocks:        200.200.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:6d:53:69:84:a3:23:8a:7f:7a:db:b1:70:52:17:27:18:60:c5:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Feb 21 14:55:00 2024 GMT
            Not After : Feb 19 15:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8b:a6:c2:02:63:bb:08:d9:7f:93:d6:79:a2:
                    45:37:99:1e:e2:90:21:a1:27:7c:39:30:42:dd:a3:
                    45:42:f9:8d:27:2b:02:e6:74:66:69:77:04:88:d4:
                    46:05:c3:28:d4:39:59:d2:b2:f2:35:3d:ec:40:85:
                    f8:cb:75:a9:fd:db:9f:99:1b:6f:89:f1:c6:fa:c9:
                    16:c0:0b:4f:58:cb:b5:a5:de:11:d3:2c:8a:8e:7d:
                    33:aa:6a:6f:4a:40:b5:47:5c:83:7e:1c:82:bb:c5:
                    0c:b1:aa:05:ab:7a:bc:d6:e8:0b:f3:37:d8:f2:c6:
                    97:27:82:6a:52:48:a3:ac:97:7d:0d:46:0b:22:77:
                    30:e1:6f:07:82:b8:11:af:19:1e:82:55:19:79:fc:
                    c6:cf:6b:a9:71:dc:c0:93:95:85:ce:00:bc:9c:7b:
                    60:7c:37:5b:bc:9a:da:54:fb:19:88:c9:7f:19:6d:
                    05:bb:b7:97:b6:27:92:39:c5:e4:47:70:2f:31:76:
                    bc:b4:b1:67:aa:a4:f2:0e:f3:18:9a:bb:2c:99:86:
                    f0:54:e3:b7:10:5f:22:ac:a1:90:aa:89:c1:59:3d:
                    94:32:52:36:9f:ec:22:b6:c5:3c:98:53:d0:7c:9b:
                    55:0a:4b:5b:e9:9c:dd:fe:58:25:80:8e:05:db:59:
                    7e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:96:B6:9C:32:45:7C:B2:FB:10:8F:23:F1:2A:E3:3D:05:56:EE:85
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3230302e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.200.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a1:45:81:b1:cf:4d:3f:f4:bd:31:34:2e:ad:48:83:f7:74:60:
         3c:f6:58:32:32:e4:17:ad:b6:a3:85:07:b1:be:c7:5f:79:6d:
         8f:89:be:79:21:44:b8:0a:e0:b2:e7:87:b5:d3:9b:d5:36:81:
         09:b1:9a:42:04:70:85:ee:8f:6d:a8:b7:41:91:9b:20:96:32:
         38:25:ee:b0:cd:4c:b6:4f:8e:a5:fe:71:6b:0f:c0:05:9a:8a:
         2d:b4:fa:04:07:da:ca:c3:37:a1:ba:0d:bc:b4:50:cb:4f:9b:
         ad:87:21:f5:76:0b:2b:34:18:0f:99:2b:85:de:76:55:3b:21:
         4a:fc:44:e7:e2:15:f9:0b:43:cf:51:39:69:6b:79:c7:d7:0a:
         96:2a:1e:86:87:33:4f:57:40:43:aa:96:00:c9:c9:ed:a6:65:
         71:9b:e7:f2:f2:01:45:28:66:2f:ce:cf:4c:c5:fa:3c:e6:54:
         e7:09:cf:62:17:77:3e:2d:30:74:b4:e2:1e:56:0e:3d:53:92:
         ac:00:d9:df:79:27:b5:87:fd:48:5d:7d:70:b6:b0:f7:ed:a4:
         af:7d:e1:dc:80:44:cb:f1:55:a3:c9:c0:ad:bc:1c:db:ec:8e:
         5f:a0:96:5c:04:1d:38:00:d8:93:57:08:1c:e2:53:fc:d1:bd:
         66:49:bf:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org