Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3231312e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3231312e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          lkZfmlQEsHS5qOB1MhFpxwi5h4xU/oomDXZKJ1ZUIwg=
Subject key identifier:   BF:79:51:36:67:AC:2C:06:85:17:7E:29:31:FA:0B:C4:91:BD:25:F9
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       50E6FB416DB2040D99A58F38F052E1026596F41B
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3231312e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:01 +0000
ROA not before:           Wed 11 Oct 2023 19:55:01 +0000
ROA not after:            Wed 09 Oct 2024 20:00:01 +0000
asID:                     4230
IP address blocks:        200.211.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:e6:fb:41:6d:b2:04:0d:99:a5:8f:38:f0:52:e1:02:65:96:f4:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:01 2023 GMT
            Not After : Oct  9 20:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cf:a4:c2:4f:d0:58:fd:47:bc:56:16:35:8e:
                    24:39:02:55:e9:fc:b3:69:7d:db:da:f4:11:3e:cb:
                    26:8b:9f:1f:83:fe:24:7a:3b:79:54:b5:68:da:c4:
                    7e:69:45:53:f4:66:2d:6c:3f:49:8b:e7:a3:d1:9d:
                    7e:d6:ff:c7:7d:ae:17:5d:2b:ef:fb:4a:38:70:b7:
                    97:02:0d:6e:a0:18:82:5a:56:d6:b3:bb:a0:18:e3:
                    23:99:e7:38:36:f1:08:73:fe:cd:48:a9:35:52:6b:
                    6b:49:eb:b4:00:2e:b2:21:cf:05:6e:3a:b2:3c:62:
                    98:0c:db:26:f2:0e:c2:8a:1c:70:e6:08:1f:fa:c1:
                    8b:01:50:b9:f9:45:08:3d:24:3d:3e:32:a9:25:33:
                    15:53:1a:f0:f9:9e:e9:51:9c:3c:d4:6c:25:7a:cb:
                    56:26:6c:73:ac:4e:36:80:9d:fe:dd:a1:e0:a4:14:
                    88:3b:01:07:62:e6:48:f4:85:ad:fb:22:38:35:7a:
                    d3:47:a0:9d:0a:79:48:36:08:ef:4f:4c:50:47:3d:
                    0b:2d:4b:8c:e8:54:77:94:17:e3:af:0e:a0:19:61:
                    99:2b:be:ea:82:d5:4a:55:53:81:62:3e:ae:3e:7a:
                    ad:14:5c:8d:a1:af:71:eb:8b:33:1b:37:b3:cf:3d:
                    09:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:79:51:36:67:AC:2C:06:85:17:7E:29:31:FA:0B:C4:91:BD:25:F9
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3231312e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.211.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         38:b8:dd:a4:d7:b8:8c:df:dc:c0:a1:cf:e3:cd:a0:14:cd:91:
         6d:67:b8:d1:f9:f9:19:2f:e6:4a:e9:b4:ff:42:f5:59:1c:5f:
         6e:0b:dc:3e:c1:9a:fb:23:a7:67:3a:62:62:45:9a:8e:48:6b:
         96:74:03:9c:f1:04:3c:21:ab:d3:51:72:fd:13:5b:3d:f8:e9:
         0c:a0:b2:c0:3f:09:29:54:67:03:2f:25:fb:68:4d:06:46:a9:
         06:23:45:f8:17:63:a2:98:95:d2:e1:16:3b:db:6c:d0:0c:bd:
         43:20:85:38:b3:ef:2b:b1:29:65:ea:7d:54:cb:ab:14:3b:5b:
         a8:99:f5:44:08:39:f3:91:54:16:e2:ba:09:8e:1d:db:b5:4a:
         df:24:d3:d1:46:46:66:46:a8:a4:89:c9:f4:41:09:ee:d2:9f:
         b1:e3:26:76:7b:bc:68:30:fe:72:09:51:1f:8a:fa:18:e7:87:
         6c:f7:b2:a8:4f:6f:68:04:fa:e5:8b:bd:f2:58:ea:a3:54:8c:
         04:13:24:91:e9:26:e3:e6:7d:54:61:89:b7:41:fa:ad:f5:ec:
         19:28:b8:25:a4:e7:8d:32:33:29:fa:15:f7:5f:e6:41:8b:ac:
         01:96:47:b3:3d:7e:a6:81:d0:da:6c:cc:6f:ee:f6:21:52:10:
         67:1b:c3:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org