Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3231322e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3231322e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          UQ5LSvtburY+kYqary3S4mLTTUcw9rN0w08sjImy3oU=
Subject key identifier:   95:B3:CF:39:41:86:D8:42:DD:CC:BE:79:A7:6B:C5:15:43:2E:0B:43
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       4C79708F29281035F3FFDBA23B7621CDF38E9500
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3231322e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:03 +0000
ROA not before:           Wed 11 Oct 2023 19:55:03 +0000
ROA not after:            Wed 09 Oct 2024 20:00:03 +0000
asID:                     4230
IP address blocks:        200.212.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:79:70:8f:29:28:10:35:f3:ff:db:a2:3b:76:21:cd:f3:8e:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:03 2023 GMT
            Not After : Oct  9 20:00:03 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:84:f0:06:b4:53:18:40:61:6a:9c:8b:c6:83:
                    7a:93:dd:36:d1:35:d4:01:99:a5:97:31:13:cb:7a:
                    b8:25:11:a9:5e:74:59:8e:5a:df:58:7b:bd:46:54:
                    83:e3:5b:47:c9:5e:e2:d4:1d:83:b3:0b:cf:51:c2:
                    c7:e5:d6:e3:8d:44:41:7d:65:2f:94:d8:75:d7:5d:
                    39:f4:59:94:a4:db:d1:92:98:8c:50:f7:c5:18:61:
                    f0:8b:82:b6:5c:4f:d8:79:ae:fe:ba:d0:27:8c:7e:
                    c4:1b:2e:ab:05:d1:03:2a:ab:41:1f:ed:27:61:b0:
                    c9:b5:5f:8e:14:92:fd:09:82:8d:b5:bb:46:5b:db:
                    ca:02:e9:56:1b:f5:28:b7:8a:bd:21:61:bf:21:98:
                    d7:fc:75:31:42:2f:18:7e:0d:c5:c6:30:6a:b1:8d:
                    9a:0e:9d:fe:3f:ee:14:6b:c3:89:a2:38:85:30:5a:
                    a0:ad:f1:f1:b1:a9:21:22:30:e3:d1:70:d3:46:11:
                    8d:81:a9:14:da:8b:75:cf:38:45:d0:ec:5e:94:37:
                    97:be:31:60:43:65:a3:f5:54:1f:b3:36:2c:ee:d1:
                    5f:f0:83:d9:80:c9:5f:4e:be:12:ae:53:fe:f2:86:
                    67:61:31:e4:19:93:4f:e4:7e:5c:ec:1b:c3:c0:2b:
                    14:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:B3:CF:39:41:86:D8:42:DD:CC:BE:79:A7:6B:C5:15:43:2E:0B:43
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3231322e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.212.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         38:ed:56:af:b4:17:fa:9a:d2:1c:b3:37:21:ca:ac:3d:da:ab:
         3a:2b:0e:2d:eb:18:a4:02:de:ff:0a:56:a8:b9:97:28:32:86:
         9d:de:12:fe:c1:65:3d:2c:82:99:f0:b1:80:fa:bc:36:a8:cb:
         d9:2d:ca:e8:29:46:c5:1e:10:d7:e6:10:36:15:fe:15:02:c5:
         86:c5:c2:51:8e:ac:81:42:4f:53:a5:c0:47:57:72:bc:db:a9:
         62:67:e0:8e:c5:67:38:65:86:ba:79:0e:ac:13:0c:d2:e4:19:
         30:54:54:89:fb:b7:f2:db:51:17:58:5e:56:85:20:89:71:04:
         d3:d1:26:22:63:54:de:8b:3d:8f:f9:ab:8a:00:00:95:57:d8:
         9b:0e:84:e1:fb:ea:c7:b0:55:db:40:d2:6f:0b:39:05:d8:95:
         39:fc:2b:f5:29:05:4b:3f:e3:69:00:59:ad:f2:0c:b1:c9:6d:
         76:dd:49:7c:2a:d2:ce:7e:66:8d:0f:f0:2e:6e:5a:5b:d0:f8:
         63:37:b2:25:53:8f:6e:08:ee:ba:fe:25:cb:d2:11:cf:3c:6d:
         d7:0b:8e:65:46:90:c9:c7:19:3f:16:ac:a2:a1:13:8b:d4:93:
         c1:ae:86:f6:9e:e1:6a:df:78:f5:34:21:be:b5:fb:97:32:a3:
         8f:ea:ec:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org