Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3230382e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3230382e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          tb7O61YpTbdyfBClYLQzPuxAS/FiKbOT7OjNS3KAJnQ=
Subject key identifier:   26:EA:76:A1:50:01:EA:7B:D2:9D:93:68:DD:59:82:1F:D8:F8:E3:D7
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       718D51168DD5DF0D6197ABA5204155E853FE7143
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3230382e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:04 +0000
ROA not before:           Wed 11 Oct 2023 19:55:04 +0000
ROA not after:            Wed 09 Oct 2024 20:00:04 +0000
asID:                     4230
IP address blocks:        200.208.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:8d:51:16:8d:d5:df:0d:61:97:ab:a5:20:41:55:e8:53:fe:71:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:04 2023 GMT
            Not After : Oct  9 20:00:04 2024 GMT
        Subject: CN=3082010A0282010100C09BFD3403AC1D97D95232E2DE53E841128CE662BFC5FD794CD5EAD0BB0D42F1286ABF43ABED8FFF135744612F34AF141AD97DEAF99AB68615790265B3DDE7D4CBA89F1A1EBF4E832D6359B773D88E3A07C41F92EAE41E9B693DA773D33B5C0F14253F7DF07BE5724545F296FDD2CE0BC3D472A13CC3C53B85664B6532DEB8321D8E206AF5055B09C35FB640579B7A9B143D8285790C66933E33A5AAB4D44ACEF46AA28F112DA9E00C7D331766E562D4081BA9988FBC76E835844DEDB84FAABAEDED737DDA74A52FD11C9108DDAC359B1311DC6611AEFCF383869D1853ED0AE8359FD8E1DE20F6B6DE4CAC2ECCC816EEECDA40177018FA64D04888177428C26F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9b:fd:34:03:ac:1d:97:d9:52:32:e2:de:53:
                    e8:41:12:8c:e6:62:bf:c5:fd:79:4c:d5:ea:d0:bb:
                    0d:42:f1:28:6a:bf:43:ab:ed:8f:ff:13:57:44:61:
                    2f:34:af:14:1a:d9:7d:ea:f9:9a:b6:86:15:79:02:
                    65:b3:dd:e7:d4:cb:a8:9f:1a:1e:bf:4e:83:2d:63:
                    59:b7:73:d8:8e:3a:07:c4:1f:92:ea:e4:1e:9b:69:
                    3d:a7:73:d3:3b:5c:0f:14:25:3f:7d:f0:7b:e5:72:
                    45:45:f2:96:fd:d2:ce:0b:c3:d4:72:a1:3c:c3:c5:
                    3b:85:66:4b:65:32:de:b8:32:1d:8e:20:6a:f5:05:
                    5b:09:c3:5f:b6:40:57:9b:7a:9b:14:3d:82:85:79:
                    0c:66:93:3e:33:a5:aa:b4:d4:4a:ce:f4:6a:a2:8f:
                    11:2d:a9:e0:0c:7d:33:17:66:e5:62:d4:08:1b:a9:
                    98:8f:bc:76:e8:35:84:4d:ed:b8:4f:aa:ba:ed:ed:
                    73:7d:da:74:a5:2f:d1:1c:91:08:dd:ac:35:9b:13:
                    11:dc:66:11:ae:fc:f3:83:86:9d:18:53:ed:0a:e8:
                    35:9f:d8:e1:de:20:f6:b6:de:4c:ac:2e:cc:c8:16:
                    ee:ec:da:40:17:70:18:fa:64:d0:48:88:17:74:28:
                    c2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:EA:76:A1:50:01:EA:7B:D2:9D:93:68:DD:59:82:1F:D8:F8:E3:D7
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3230382e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.208.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         66:93:25:7a:b3:e4:a6:6d:6d:f3:a6:72:bf:6f:fc:95:5e:67:
         1e:1a:07:dc:e1:0e:dc:10:ee:75:b8:65:e3:83:c4:13:76:92:
         39:72:26:81:ea:c3:94:d7:c9:29:ee:52:0c:1a:fc:24:4c:70:
         07:76:17:ac:d8:f8:6d:b6:15:b3:41:7c:10:86:65:8f:58:a7:
         f2:85:c8:49:3f:0f:9e:db:88:f8:0a:e5:36:a7:ed:18:f0:5c:
         02:85:a0:b9:05:71:7f:27:58:1f:c8:33:ec:dd:e6:41:fd:da:
         91:ed:18:34:02:1f:8f:fd:70:1d:dd:85:13:ea:62:56:70:af:
         16:15:48:4c:18:36:1e:c1:22:67:19:6c:a9:fd:5a:df:8d:1f:
         26:84:7f:4d:c8:3a:99:77:1a:41:0e:20:da:b4:79:62:98:6b:
         f7:1a:2b:02:92:a3:a3:95:a6:1b:95:91:6e:a9:2a:1a:78:d4:
         6a:b7:15:a2:1c:c4:0f:24:7c:c2:9f:66:7c:1f:af:d7:74:99:
         0c:3f:71:28:23:bb:21:1c:af:c8:69:a1:30:d5:54:97:e5:65:
         36:28:53:99:de:47:30:d9:99:53:26:9e:0c:97:19:97:d4:ee:
         d0:d7:fe:6e:2e:a9:c9:df:42:a1:c7:9b:de:0e:63:1c:1f:08:
         aa:89:26:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org