Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3233312e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3233312e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          UiQQDn31NKkrsLUFPqwsFJKUZArJTkmolTck2owH3p4=
Subject key identifier:   6C:D0:B8:DF:01:DD:8E:A7:99:6F:05:0E:6B:FF:9C:3D:5C:65:F9:0A
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       021A4E0E43B0AF16BE8A77148BEE19A3E21B3A2E
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3233312e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:05 +0000
ROA not before:           Wed 11 Oct 2023 19:55:05 +0000
ROA not after:            Wed 09 Oct 2024 20:00:05 +0000
asID:                     4230
IP address blocks:        200.231.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:1a:4e:0e:43:b0:af:16:be:8a:77:14:8b:ee:19:a3:e2:1b:3a:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:05 2023 GMT
            Not After : Oct  9 20:00:05 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:6a:d5:86:8b:25:3b:6c:75:0b:aa:54:00:73:
                    8d:68:b8:5d:4e:b3:ae:9e:21:96:d9:fd:62:8a:c0:
                    dd:b2:b3:5d:37:db:04:ba:2b:28:7b:61:4e:04:33:
                    13:e9:c3:2d:d6:5f:16:2b:85:fd:4c:64:85:43:b8:
                    4e:88:fa:95:d7:28:b8:0b:6a:f1:2f:1d:b9:70:ce:
                    d4:ff:4f:fc:c3:bc:6f:7b:b3:8f:d9:ba:3f:4b:8b:
                    f1:26:da:5d:b0:51:99:93:6c:d6:7a:2b:fe:ce:cb:
                    73:80:fd:c4:f2:a5:55:6c:89:28:08:76:ac:de:33:
                    48:0d:b5:0a:9a:bc:42:ef:3e:86:d5:11:9e:09:36:
                    83:32:d8:62:0d:25:ef:05:a6:68:ac:15:b8:a2:5d:
                    95:4f:e4:a6:2e:75:38:86:46:2a:f0:1b:db:f1:97:
                    5d:a6:d9:be:43:44:b2:f1:86:e5:ce:dd:4a:74:da:
                    65:86:17:5a:e4:57:ab:07:a9:c2:22:ff:5c:66:f3:
                    8b:a7:06:23:72:b7:f6:ec:02:2e:8a:ea:74:17:e0:
                    1a:dc:ed:28:b3:82:2d:8b:c5:c6:59:50:7b:20:e4:
                    9a:1c:24:f1:af:21:ec:79:5d:48:fb:20:ca:cc:f2:
                    93:7f:9f:70:79:f5:dd:df:6e:e1:b6:39:91:e1:cd:
                    30:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:D0:B8:DF:01:DD:8E:A7:99:6F:05:0E:6B:FF:9C:3D:5C:65:F9:0A
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3233312e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.231.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         bf:8d:89:2e:05:91:31:9a:af:80:11:85:47:c6:b4:69:f1:75:
         47:cc:86:36:96:49:9f:cb:36:61:65:8d:c9:a0:7b:59:40:16:
         c7:a8:d2:33:de:6a:98:e6:27:de:9b:08:71:f0:b4:1f:05:54:
         08:50:31:0d:d5:21:eb:02:6f:2b:c7:64:84:a5:fc:19:db:71:
         81:c3:b2:22:bd:06:77:d6:ba:09:69:d5:8f:b6:f7:53:fc:36:
         2c:46:89:9b:d2:56:c8:be:83:eb:a7:82:71:70:bd:02:41:65:
         3f:6a:83:27:f7:26:94:92:27:83:8f:52:34:90:66:ad:96:29:
         10:0a:ef:c0:8d:f2:3e:ce:f1:04:a3:62:14:6f:71:e2:14:de:
         dd:9b:29:56:b3:c7:42:8e:21:2a:58:99:18:42:e5:3d:22:45:
         21:63:0c:79:51:d3:2a:f7:e2:8a:a5:4f:89:2b:2c:fb:1f:a7:
         9f:40:08:7e:01:12:84:e2:b7:2f:07:97:c1:3a:26:3c:f6:ec:
         cc:f8:03:78:83:dc:d2:0c:88:d5:db:30:27:c6:c9:bf:99:12:
         2f:e4:8c:b3:05:14:55:4f:ff:d8:35:bc:97:9a:fb:26:44:ed:
         00:a4:ce:87:76:f1:55:89:5f:49:f4:b5:5f:3e:8f:7b:28:b8:
         fb:13:13:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org