Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3231302e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3231302e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          3W2I2u6UX0iOSM1SzKCgVQmUepnFa3n1DMTADzSDJ6E=
Subject key identifier:   3D:91:9B:DE:AE:D0:57:18:F0:72:E2:80:2B:0D:1F:90:4E:76:50:FB
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       2F21DAD4B1F71A303B01FF3B628E10CBFC0F0300
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3231302e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:07 +0000
ROA not before:           Wed 11 Oct 2023 19:55:07 +0000
ROA not after:            Wed 09 Oct 2024 20:00:07 +0000
asID:                     4230
IP address blocks:        200.210.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:21:da:d4:b1:f7:1a:30:3b:01:ff:3b:62:8e:10:cb:fc:0f:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:07 2023 GMT
            Not After : Oct  9 20:00:07 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:dc:40:77:d5:d4:2a:22:bc:a0:20:ed:96:be:
                    7f:93:f9:36:8d:83:7e:75:53:4b:2e:6b:53:c2:fc:
                    f0:5e:8a:09:14:10:f5:af:5c:57:53:95:9f:ea:87:
                    e9:a7:1f:08:d6:86:e3:4d:4e:14:a7:44:c2:66:d1:
                    84:81:5c:bb:b3:a1:4b:71:99:87:34:f9:d5:c8:17:
                    94:0e:ce:12:71:c4:bb:73:6e:71:31:c6:20:0c:2e:
                    c2:8f:4f:8c:d7:fc:0c:6e:87:c4:61:8e:e0:27:c3:
                    ce:90:1c:df:84:8a:75:19:6b:aa:8c:13:32:40:4b:
                    a4:11:d3:bd:40:d2:ae:9b:c9:fd:be:04:46:1d:cf:
                    8f:02:e7:6f:58:74:8d:cc:8f:06:3d:5e:4c:63:a9:
                    28:9e:91:2f:72:8e:08:b8:de:2c:4d:50:46:76:74:
                    68:e0:79:59:df:75:51:1b:9d:5c:20:c7:1e:89:33:
                    d2:32:c0:e6:97:1b:97:08:46:d1:97:e5:72:01:51:
                    0d:99:08:0d:28:0d:61:e8:c5:c2:ca:90:3d:ef:a1:
                    f5:89:de:b4:f4:8a:cc:6a:19:7f:a0:f9:bd:14:9d:
                    50:39:7e:f4:35:ad:fd:03:30:a8:4b:4b:81:9a:ac:
                    25:f0:fc:c4:ea:ac:cc:7a:c1:c5:e1:2d:bf:bd:ef:
                    72:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:91:9B:DE:AE:D0:57:18:F0:72:E2:80:2B:0D:1F:90:4E:76:50:FB
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3231302e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.210.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         41:f1:d1:50:ec:aa:05:16:4c:98:f0:8d:2a:2f:bc:ab:72:d1:
         69:3a:7c:58:09:94:97:6c:57:39:da:d0:fe:1b:92:cb:c8:d4:
         89:3d:94:43:76:39:32:54:22:e7:0c:4f:91:6d:cc:ce:55:9c:
         af:1f:06:8e:18:b7:11:d0:ce:8c:92:1a:49:c1:92:28:fd:55:
         1f:65:94:49:83:a0:e0:41:f2:12:a3:75:37:51:17:ac:7c:f5:
         c8:74:b5:f7:58:96:a1:a1:86:5f:e8:dc:da:32:54:b0:0a:48:
         4c:3d:d5:55:01:d4:75:47:12:db:3a:08:f0:68:62:a5:a2:f3:
         d7:30:89:2c:cf:42:d6:92:ff:48:fd:92:c7:65:ac:dd:3c:6d:
         88:d8:88:ef:08:98:09:91:1e:0f:69:22:d7:f5:88:50:88:00:
         79:a4:c2:c9:73:6f:72:72:38:f9:85:38:ad:7d:89:bc:3c:94:
         81:d3:bf:0f:a4:89:59:d2:ce:62:16:3d:7d:45:d1:e8:fa:2d:
         b7:ed:53:e0:a4:c8:42:de:71:ac:fa:5b:ba:a9:9f:6a:4a:f4:
         e0:6e:81:88:a8:de:b7:ac:68:b0:db:a1:df:48:22:92:f6:e9:
         4b:77:78:6e:7a:9f:65:b3:55:ff:b9:8a:d6:7c:f2:bb:be:57:
         25:c8:8d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org