Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3232382e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3232382e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          g96BPdoOZDejomalEUvJKJvynizANke1ioWpzrM9JGM=
Subject key identifier:   FF:C9:1D:6B:EC:B6:75:36:FB:41:73:C7:11:C7:39:47:90:F0:76:4A
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       625A46403C8BCDC6AEB8DF5AA87127392513750B
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3232382e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:00 +0000
ROA not before:           Wed 11 Oct 2023 19:55:00 +0000
ROA not after:            Wed 09 Oct 2024 20:00:00 +0000
asID:                     4230
IP address blocks:        200.228.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:5a:46:40:3c:8b:cd:c6:ae:b8:df:5a:a8:71:27:39:25:13:75:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:00 2023 GMT
            Not After : Oct  9 20:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:90:16:b2:0c:5e:fb:3b:bd:aa:6a:e9:22:ac:
                    32:67:f9:ce:c6:1f:aa:68:bf:73:93:3b:cc:6d:b6:
                    2e:d6:11:5e:a3:3a:62:de:0d:0b:bb:1c:67:2b:ca:
                    aa:9e:5f:a3:12:15:90:82:51:d3:d3:04:aa:76:b6:
                    35:5f:0c:01:19:f0:8c:c7:ab:25:9e:2b:f1:54:5c:
                    9e:76:82:7f:78:5f:5f:1c:60:45:a0:da:2e:36:af:
                    81:1d:b3:50:9e:d1:e2:02:c3:bd:db:19:21:3b:77:
                    49:e2:1f:f9:a0:87:f2:d4:1b:92:8c:1c:93:b1:4a:
                    b9:90:43:79:34:ba:d8:e4:77:05:e1:3b:e7:17:2c:
                    89:d0:1b:20:ad:55:b2:ad:0b:f9:20:2a:9d:d3:f5:
                    79:49:52:e9:dc:42:3e:46:28:b1:a6:79:44:b1:11:
                    b8:7f:40:73:01:3b:f7:c5:29:48:04:63:18:17:06:
                    f7:23:f5:3c:d1:e4:d0:f9:e1:09:c8:24:f1:88:59:
                    a0:60:47:41:c2:6a:66:06:28:57:e6:48:32:76:1f:
                    74:c6:fc:7e:ba:86:6b:30:c4:6f:ed:14:37:d1:4a:
                    33:05:6c:b6:0b:a0:c6:03:ea:0c:d8:af:a2:77:5c:
                    f1:03:84:fb:b3:13:15:46:c9:e6:77:c1:04:c0:dc:
                    e5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:C9:1D:6B:EC:B6:75:36:FB:41:73:C7:11:C7:39:47:90:F0:76:4A
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3232382e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.228.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9c:ac:e1:45:68:a2:8b:3b:76:3c:97:ae:f3:1c:fa:2e:44:32:
         bf:b4:3e:03:9e:84:78:5e:7a:b9:91:24:47:28:2b:40:52:cb:
         69:14:3d:29:47:67:63:f8:46:b1:2a:14:6a:21:70:29:55:86:
         bd:56:bc:5e:be:80:2c:ed:c0:07:62:6a:dc:de:db:b1:5f:e6:
         b8:6e:0d:58:9e:48:21:62:de:f7:9e:b0:7a:ee:5a:0a:d0:fb:
         af:ca:04:5c:2f:11:6c:06:6a:3d:9f:92:f6:b3:b7:15:33:6c:
         6b:f9:b7:93:ea:3a:c9:2a:21:ce:06:3f:ff:2d:fa:e1:d0:31:
         ec:0a:10:b5:7f:37:a3:7f:14:29:45:fd:aa:a7:de:80:29:49:
         83:9e:54:28:3a:29:97:31:91:bf:ae:6a:08:5b:16:af:bd:88:
         b3:5c:3b:c8:15:18:3c:fc:cf:bf:c0:b1:58:27:83:5c:32:33:
         8c:13:a5:a5:79:c0:3f:e6:65:58:62:37:79:e8:64:0f:66:0b:
         bc:e7:3e:d6:3a:68:38:cb:8a:89:cf:c8:23:95:07:74:4d:c6:
         df:70:7a:2c:8f:59:67:17:3c:70:55:5a:f7:7c:88:85:70:c3:
         f5:2e:48:87:8d:e3:d1:8a:c3:bc:fc:f4:49:83:2e:0b:fd:a5:
         54:e3:ac:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org