Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3231332e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3231332e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          TE99+N8WGOY/Si+0Q5lh0jxBeNMPPTKQRS6ut6PAeAs=
Subject key identifier:   0E:49:8C:EC:3B:20:BE:08:AA:43:C4:F5:6E:FC:0A:02:6D:49:DB:3A
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       58860B06AFE36212FE3FEDDADC9506D7A143F7B3
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3231332e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:02 +0000
ROA not before:           Wed 11 Oct 2023 19:55:02 +0000
ROA not after:            Wed 09 Oct 2024 20:00:02 +0000
asID:                     4230
IP address blocks:        200.213.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:86:0b:06:af:e3:62:12:fe:3f:ed:da:dc:95:06:d7:a1:43:f7:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:02 2023 GMT
            Not After : Oct  9 20:00:02 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:81:0c:c6:9f:87:95:6a:3d:a8:19:98:89:68:
                    48:8d:86:6a:3d:7b:02:5e:49:ae:6b:ef:71:90:97:
                    17:af:f2:ef:a7:ba:9d:91:c1:28:e5:d7:58:93:59:
                    e8:1e:b5:8f:c8:db:36:9f:f0:29:ec:96:02:63:39:
                    c1:77:ea:51:6b:22:b0:25:7b:6a:d9:26:fd:a6:61:
                    70:1b:12:29:40:c7:97:ae:17:0e:ee:19:48:9b:3e:
                    5d:4a:91:96:9b:2a:24:ba:42:70:da:ec:9d:c9:eb:
                    13:1d:d6:65:77:e7:f5:79:2e:33:f4:e7:f3:cc:e1:
                    d7:5f:1b:60:42:83:ba:30:f1:da:f7:38:a2:d7:04:
                    ad:85:dd:01:d2:eb:b2:13:e8:30:a1:2a:fc:44:d4:
                    7e:98:96:03:6d:b1:df:9b:fb:e9:4b:62:1b:93:45:
                    78:20:24:63:c7:b4:f4:ba:90:47:e2:85:a6:a4:76:
                    24:11:5b:55:2b:59:fd:d4:0a:aa:c1:5d:36:35:68:
                    28:85:54:6f:29:31:0c:2d:16:eb:67:f4:d7:e1:e0:
                    36:55:ef:5c:c2:16:d7:d5:2c:b9:2d:6d:55:c3:04:
                    99:bc:87:f0:cf:b3:fe:87:06:b7:c2:e4:58:0c:04:
                    97:06:d4:a3:50:e2:c8:bd:5c:14:20:9f:b8:48:d4:
                    1d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:49:8C:EC:3B:20:BE:08:AA:43:C4:F5:6E:FC:0A:02:6D:49:DB:3A
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3231332e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.213.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         94:f7:13:95:89:1d:d3:de:15:42:af:6c:04:5d:b4:83:11:b5:
         c4:de:2d:da:45:02:ac:fa:1b:ac:d1:79:b0:7d:43:df:74:98:
         22:b0:28:25:0b:2f:10:3d:45:0c:55:f6:d3:a3:3e:a9:f8:b3:
         36:ce:1c:23:0e:ea:73:4d:6e:b0:00:44:60:d8:e7:e9:74:28:
         7f:d2:93:12:50:5e:50:1d:86:fc:6b:16:47:17:c8:4b:73:6a:
         94:34:48:e0:9c:c4:c1:bd:97:c2:8c:ee:55:ca:b8:39:b6:da:
         a0:51:26:02:9c:73:31:d6:60:a6:04:d8:53:d9:7e:42:45:78:
         0e:1d:be:53:1a:96:7e:87:54:35:5d:8d:fc:9a:bd:3d:1c:a3:
         17:7a:42:4c:bd:a0:ad:7f:fa:bb:8c:36:36:2e:85:e3:89:0f:
         1a:33:d3:2b:17:ff:3e:83:84:7f:9e:16:7c:b9:06:d1:91:b1:
         ec:fa:cd:6f:16:8f:db:2f:2f:ce:3b:28:83:af:e8:0d:20:3e:
         e2:1a:e0:fd:99:b7:46:49:9d:cd:6d:1d:ce:91:62:71:26:3d:
         5d:20:49:76:0c:39:5c:99:be:f7:f9:78:3c:8d:3c:db:89:89:
         d1:4d:0f:e2:ed:00:3f:ee:41:14:b6:be:2c:5e:06:81:00:5d:
         e3:0a:54:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org