Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3231342e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3231342e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          k7aJNxYl6kWBrBXtsJl7U1uApSnH2F0iR6Tc7aGimBk=
Subject key identifier:   1B:CC:A1:52:D0:DC:65:20:B4:19:E1:03:A1:14:49:8B:30:60:4E:D9
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       3C75C3BF25C351691A97506280AE45F190BD6422
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3231342e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:04 +0000
ROA not before:           Wed 11 Oct 2023 19:55:04 +0000
ROA not after:            Wed 09 Oct 2024 20:00:04 +0000
asID:                     4230
IP address blocks:        200.214.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:75:c3:bf:25:c3:51:69:1a:97:50:62:80:ae:45:f1:90:bd:64:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:04 2023 GMT
            Not After : Oct  9 20:00:04 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ec:6b:13:c1:72:0b:fb:59:87:78:7c:b2:06:
                    f0:23:62:81:00:8f:86:9e:17:74:7f:2f:64:1d:ed:
                    b6:8b:3f:d8:c0:c0:6e:14:05:e2:ab:52:0d:67:9e:
                    44:5a:0b:13:57:a5:ed:20:38:92:7d:33:03:7d:8e:
                    05:e1:c7:30:40:2d:d8:e4:59:a4:75:8a:9a:ac:48:
                    e2:c2:31:15:58:58:b1:d3:64:61:3d:64:d3:d2:88:
                    47:bc:e2:da:47:d2:34:ac:56:10:85:b0:a4:84:80:
                    ff:fb:15:ac:aa:42:90:75:74:ab:31:ed:a3:b1:0f:
                    d8:ee:ea:0c:fd:d6:75:de:fc:16:a8:40:be:84:68:
                    65:cb:75:ee:c8:25:e5:11:c9:0c:b0:e7:00:ac:c0:
                    07:7c:4a:c6:3e:fe:4c:d4:c0:75:7b:41:2e:04:61:
                    38:95:5b:e5:68:6a:8f:61:4a:9f:14:7b:df:a9:44:
                    c6:f7:e3:83:8d:74:21:03:27:aa:10:d6:1a:80:ac:
                    39:8f:30:43:78:73:4c:9d:c0:67:11:0b:1f:2f:f7:
                    80:fd:aa:7b:bf:e4:d1:60:73:c5:a5:02:42:42:39:
                    92:68:9d:17:74:17:94:37:86:59:7b:56:e6:1b:18:
                    b5:b7:14:cc:db:c5:3f:1f:cd:d8:5a:c8:53:64:53:
                    5e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:CC:A1:52:D0:DC:65:20:B4:19:E1:03:A1:14:49:8B:30:60:4E:D9
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3231342e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.214.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b5:06:e2:6d:47:b5:df:1d:70:03:27:41:af:a7:fb:67:4a:68:
         e5:ed:11:58:7e:1f:35:70:1c:49:11:0b:e6:59:e1:e1:0e:9b:
         74:3b:6a:a9:a0:32:35:32:ba:cd:24:f4:dd:4a:7e:48:71:4a:
         72:01:c9:bf:cb:9c:15:df:d4:9e:6d:fb:97:63:46:28:42:fe:
         b4:47:91:72:58:58:2c:c2:37:1b:ff:bc:16:23:4d:31:8a:5d:
         e0:50:97:c3:a7:ea:b3:ec:3f:b1:44:5d:c1:37:cf:1b:40:b7:
         cc:19:7e:13:94:2d:fe:be:d6:c1:d0:4f:98:76:8b:73:cc:a7:
         db:7f:39:84:09:32:e9:1e:c7:68:75:53:79:5c:7f:23:61:27:
         ee:28:36:37:74:38:9c:ad:ee:ec:39:f7:c8:2e:68:cc:3c:c5:
         fe:44:29:34:e9:d1:e6:65:75:29:51:94:69:50:24:e8:fe:67:
         19:84:87:40:2c:39:3b:11:48:9f:57:37:6c:06:e9:5a:14:b7:
         ee:15:00:00:72:b5:21:d7:33:27:1b:d7:7a:e7:c9:ac:12:de:
         fb:a5:22:c7:17:6e:1a:08:fe:f5:e3:0c:7e:13:48:4b:6d:47:
         1d:ab:0f:63:d6:d9:81:54:16:0b:f7:bf:90:57:cb:da:90:06:
         4f:79:50:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org