Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3233302e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3233302e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          g6i/jKzA96O1MidTQPkjIbIB7v7oSUt3EFOgWjarNhM=
Subject key identifier:   40:2C:2D:0F:EA:18:F8:A1:F4:50:41:9A:50:72:33:46:58:2A:7E:BB
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       60F5359B39DF2B55A49B28BB2476586B32CA8934
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3233302e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:00 +0000
ROA not before:           Wed 11 Oct 2023 19:55:00 +0000
ROA not after:            Wed 09 Oct 2024 20:00:00 +0000
asID:                     4230
IP address blocks:        200.230.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:f5:35:9b:39:df:2b:55:a4:9b:28:bb:24:76:58:6b:32:ca:89:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:00 2023 GMT
            Not After : Oct  9 20:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:79:31:78:4d:7e:de:66:86:b9:0d:7b:4d:cf:
                    90:49:e4:c8:c0:af:91:f4:cb:79:ed:8b:84:d5:ca:
                    a1:d0:a7:a5:2e:2f:5b:23:4b:25:28:31:b7:bd:19:
                    87:34:c3:52:c6:56:d6:3d:77:ba:11:d9:be:a5:b3:
                    37:94:6b:56:e5:92:12:b7:a6:8a:00:25:97:4a:aa:
                    34:fe:a9:97:4c:8c:6e:94:a2:ec:5b:48:2f:8e:2d:
                    6f:d4:2c:b2:53:41:74:61:cf:64:03:4e:f7:41:ab:
                    af:a6:15:44:8a:6f:50:00:57:2e:00:c9:9d:84:0a:
                    78:36:77:28:e2:5e:8d:12:a0:f2:3d:ba:d1:af:ee:
                    51:2c:b0:3f:56:c1:d1:92:54:ed:08:9d:44:96:cf:
                    30:6a:17:0e:95:7d:10:ec:8b:5d:cc:7f:7d:46:93:
                    48:fc:0a:21:dc:ab:97:69:9b:da:e5:15:7d:05:f6:
                    55:1c:0f:e7:c7:4b:e4:c1:ec:10:a9:8a:6c:77:34:
                    ed:00:fe:4a:a1:e9:56:c6:d7:76:05:af:8d:7f:9f:
                    33:bb:e9:2f:9f:ba:c1:d8:5c:92:6d:b6:77:c4:4c:
                    38:21:a7:64:54:a3:28:b2:38:3e:86:df:eb:7c:88:
                    b4:35:b2:44:69:54:b7:33:ad:63:01:b9:18:f8:af:
                    83:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:2C:2D:0F:EA:18:F8:A1:F4:50:41:9A:50:72:33:46:58:2A:7E:BB
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3233302e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.230.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ac:1e:bc:80:97:dd:2d:b4:b0:20:9e:be:f8:7c:63:31:d4:92:
         45:0c:cb:33:e3:33:f5:08:50:d8:c1:ea:40:db:27:89:8d:f3:
         ef:d7:aa:db:4c:6d:ba:0e:e6:5a:dc:20:63:10:03:65:57:d7:
         6b:78:92:aa:a2:2c:42:65:fd:a8:ad:84:38:18:51:e5:bd:87:
         33:13:23:7d:ee:2b:a5:39:a5:a4:9f:c3:8c:d1:a2:12:a3:42:
         62:fe:f7:a5:e9:83:d3:79:d0:ce:32:89:b5:2e:5c:f3:86:eb:
         c8:08:b3:15:7e:e8:d3:d7:66:99:d0:72:1c:79:df:df:85:e4:
         43:8a:0a:df:98:b3:cb:76:78:30:a9:a2:b0:f1:12:d3:ad:8a:
         14:1a:b6:a4:be:ce:21:9e:f6:78:4f:df:f0:2b:5f:76:22:6e:
         11:17:e6:db:24:a3:f2:5e:6d:da:07:22:88:13:59:71:e9:85:
         c0:64:fb:9c:d2:e4:c2:07:73:40:19:46:e9:ec:0a:46:dd:b3:
         82:56:3b:3d:c1:d9:2c:f5:f3:5d:75:db:3d:b4:4a:b7:53:b6:
         e0:7a:ea:4d:3a:50:79:70:bd:10:27:5f:be:f2:67:31:35:4d:
         9f:2c:93:46:28:7e:73:77:14:a0:44:6b:95:25:b3:1d:bb:5c:
         90:66:a7:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org