Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3232372e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3232372e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          VSYeMZSaFjggXF1JCzpmJcRR192eVjH1Y4J5Y6KWr80=
Subject key identifier:   A0:31:5D:F4:17:CD:2F:FD:A5:9F:58:1A:B8:C1:1F:06:F8:C0:14:53
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       2544B04ACA821AA9B213E8685A8DC3A52A233399
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3232372e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:01 +0000
ROA not before:           Wed 11 Oct 2023 19:55:01 +0000
ROA not after:            Wed 09 Oct 2024 20:00:01 +0000
asID:                     4230
IP address blocks:        200.227.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:44:b0:4a:ca:82:1a:a9:b2:13:e8:68:5a:8d:c3:a5:2a:23:33:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:01 2023 GMT
            Not After : Oct  9 20:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:23:f3:05:fe:a5:a4:3b:4e:bf:12:16:3d:bf:
                    6b:61:d8:e3:2e:56:8f:bf:13:e0:e8:48:c9:93:8e:
                    f4:91:7f:3c:26:ca:14:f5:d9:cf:34:af:8d:3d:e7:
                    8f:fb:9e:37:1f:83:26:f8:7a:6f:02:7a:4a:b5:69:
                    ad:4e:7c:81:3e:af:ac:c9:4c:71:25:5a:67:88:28:
                    c1:7e:ec:28:2b:53:d7:77:e7:b1:df:d9:02:8e:81:
                    01:2d:4d:06:89:1f:2c:77:ab:ba:1c:9c:0c:49:65:
                    49:96:53:ab:1b:cb:45:4d:a6:75:69:12:3f:b3:bc:
                    86:ed:1a:58:de:28:5a:f2:95:c7:ae:27:17:6a:4b:
                    a6:93:a1:48:d5:5a:8d:be:ae:ca:ca:a1:84:49:d6:
                    a6:43:de:f4:bd:6a:bc:59:ba:96:e7:69:17:30:a1:
                    42:6c:0c:5d:d1:61:15:ef:4b:0a:2e:f0:03:0f:8d:
                    1f:71:89:f6:51:9a:52:e9:21:c1:22:33:0d:ef:71:
                    82:0f:62:e7:7f:f4:6d:b7:99:19:b4:25:cd:6d:3f:
                    e1:ce:96:aa:3a:50:37:8c:cf:2f:17:96:69:97:bc:
                    df:25:d7:7d:b5:b7:35:32:03:e3:79:ae:8a:78:10:
                    92:47:dd:3d:a6:bc:ba:8e:3d:05:ef:7e:44:49:e9:
                    fd:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:31:5D:F4:17:CD:2F:FD:A5:9F:58:1A:B8:C1:1F:06:F8:C0:14:53
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3232372e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.227.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         23:ed:76:45:f1:e3:1e:04:ec:1f:11:d9:61:3d:7e:f7:b4:d3:
         df:fb:47:d5:a1:c7:25:45:88:cf:f0:7b:4d:f1:f8:8e:3d:5c:
         30:75:34:bd:8f:9c:7c:0c:e7:d6:8e:b2:c5:46:23:12:d1:d5:
         ef:c1:8e:ea:96:a0:ef:25:52:73:38:bf:3a:0e:43:a0:84:99:
         0d:16:20:f3:54:89:b5:b1:91:cd:4f:c3:75:56:84:b4:21:4d:
         36:6b:29:87:b2:ce:eb:f4:32:c3:df:a1:29:2d:0c:4c:10:e4:
         eb:5a:da:2d:f6:88:c0:a2:56:57:7e:a9:9c:0e:11:a1:5f:93:
         40:c1:db:17:d5:6d:49:26:58:07:74:fc:d8:25:c6:51:ec:3a:
         69:78:7a:9a:e5:a7:dc:66:25:93:fa:af:a7:9f:3c:37:41:ad:
         a0:80:3f:1e:44:5d:e5:76:c4:5c:6f:28:15:60:e0:6f:33:32:
         74:34:ed:d1:0a:1b:a8:e4:ee:d8:eb:e8:a1:ac:67:27:e7:36:
         a8:f3:ba:a4:0f:b9:eb:e8:ea:72:f6:26:03:c1:83:c9:52:33:
         52:5a:eb:08:8b:16:42:ac:07:4c:5d:cc:d9:f8:3e:b1:60:bc:
         3a:5e:0b:19:3b:22:24:fa:93:3e:49:68:5d:0b:b0:a9:35:a7:
         e1:26:da:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org