Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3230392e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3230392e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          1cK+grO65df9whZfHx+UZmjosLMY1+HMGTw07Vcv0Z8=
Subject key identifier:   E0:9F:6C:B0:21:F7:6A:FD:68:00:B2:88:ED:06:3C:97:AA:16:C0:53
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       286B90DFFCE92ECA1FD721F5C12222EE239D769C
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3230392e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:06 +0000
ROA not before:           Wed 11 Oct 2023 19:55:06 +0000
ROA not after:            Wed 09 Oct 2024 20:00:06 +0000
asID:                     4230
IP address blocks:        200.209.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:6b:90:df:fc:e9:2e:ca:1f:d7:21:f5:c1:22:22:ee:23:9d:76:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:06 2023 GMT
            Not After : Oct  9 20:00:06 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e2:72:2f:e1:d4:e6:57:fd:25:32:a6:f4:e7:
                    c8:64:b1:22:84:17:d3:b6:ee:cf:b6:11:0b:60:80:
                    1b:bd:0a:27:19:1a:30:81:5d:44:67:35:88:e6:24:
                    43:2f:29:a1:55:31:13:e4:62:69:8b:47:3e:59:3a:
                    e8:1f:63:05:6e:c9:7f:8a:07:fc:4d:b3:e4:8c:5e:
                    16:b8:6c:17:f8:c3:9c:08:f6:9b:5c:34:b2:dd:84:
                    2f:7e:7f:da:72:ee:c2:f6:ef:bd:8e:a2:25:ec:35:
                    84:34:86:bb:bf:f0:d3:75:e3:03:83:01:97:78:61:
                    81:16:29:91:11:9e:1a:3b:de:66:56:21:4d:d5:6a:
                    ce:94:46:6d:80:31:3d:2d:09:94:e2:24:df:7d:30:
                    c1:f4:56:be:4f:64:9f:c0:d9:0d:55:25:29:9d:9c:
                    bb:e1:f8:4a:e4:1b:06:1b:3f:a8:76:6f:37:68:f7:
                    a5:e3:f0:52:95:8c:cc:f5:e1:2b:72:f2:9b:c1:7b:
                    3d:eb:da:bd:16:c0:c4:48:0b:df:fd:97:78:f7:aa:
                    fc:71:27:dc:fa:c3:a2:1d:46:41:cc:b6:e7:0c:e8:
                    49:05:bf:01:0e:48:7b:09:e9:01:ea:d6:6c:22:9d:
                    1e:c9:09:a5:0c:7d:55:93:ac:12:60:ed:7b:3d:88:
                    8f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:9F:6C:B0:21:F7:6A:FD:68:00:B2:88:ED:06:3C:97:AA:16:C0:53
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3230392e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.209.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0a:3c:5c:02:11:e2:83:6e:e6:0d:55:6c:e5:0d:9c:37:79:37:
         0c:65:4d:42:59:6c:6e:24:cc:6d:00:82:ee:7c:89:bc:89:e0:
         7f:10:9f:c6:51:73:ab:ba:14:f0:77:e0:d8:0b:ae:d5:f2:b8:
         10:d2:9f:e4:5f:1d:d1:70:89:d9:38:e8:69:f9:0c:03:5b:cb:
         b6:05:ec:a5:00:b5:34:6c:7a:54:8b:3e:6d:b6:b4:e0:3b:cf:
         00:fe:b3:2c:bb:c2:36:5e:21:2b:ed:66:3f:86:81:60:b7:b1:
         bf:5d:24:c7:c6:8b:ce:01:69:80:86:97:cf:c7:68:8c:22:94:
         27:81:f0:8c:51:20:4b:da:aa:62:37:45:5b:fd:6d:4c:ca:fe:
         22:0f:93:2b:0c:1e:ff:d1:f5:7e:5a:43:0f:83:65:81:63:8a:
         51:07:dc:2c:d9:82:c1:1b:f7:b5:b0:dc:2d:fa:c1:ed:12:0b:
         0a:0a:b5:1e:61:c3:d4:e4:cf:10:f9:56:94:3d:3e:c7:c2:06:
         9a:57:b1:41:3a:b4:07:3c:13:1c:37:84:2c:47:ab:01:76:6b:
         3c:a0:e5:20:45:30:b1:c1:6b:c0:c2:f7:7d:e7:9d:98:f0:c6:
         e3:e5:88:df:79:8a:61:5e:86:e1:d9:50:53:fd:f4:fc:4a:c6:
         3e:98:9e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org