Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3234312e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3234312e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          cKweJliBguJc19Tzt+od9nv2PGcbCHjQD4nkROtot8Y=
Subject key identifier:   C1:90:02:A7:CE:65:5A:D8:E2:A5:74:8D:DB:85:AA:76:E3:0E:7D:6C
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       528C2AB5681CC9DF0AA6BD1BB4D50E538F691B5D
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3234312e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:07 +0000
ROA not before:           Wed 11 Oct 2023 19:55:07 +0000
ROA not after:            Wed 09 Oct 2024 20:00:07 +0000
asID:                     4230
IP address blocks:        200.241.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:8c:2a:b5:68:1c:c9:df:0a:a6:bd:1b:b4:d5:0e:53:8f:69:1b:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:07 2023 GMT
            Not After : Oct  9 20:00:07 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:dd:48:b9:fe:fc:fe:47:f0:2d:71:56:30:b8:
                    f7:56:00:a3:d2:92:7b:92:b7:67:a7:7a:d8:fb:71:
                    1e:a7:e1:db:4d:4e:c9:64:2a:fe:b0:bf:4a:8b:45:
                    50:e9:ac:ea:a9:9d:ee:22:d2:68:61:0d:92:ca:0a:
                    76:4d:59:3d:ff:35:dd:75:5f:14:72:02:f7:51:20:
                    3e:cf:2d:b4:68:01:86:92:95:db:5e:04:00:c5:7e:
                    7a:99:ad:35:a1:27:22:43:9c:bf:6f:2c:d9:5b:96:
                    a6:30:7d:4c:81:16:32:0f:c2:68:45:09:2d:15:88:
                    69:d3:05:6f:bb:ce:07:19:8b:75:b4:ef:54:e3:bc:
                    8a:61:1f:a2:3d:b9:ed:8a:6f:cc:3d:b0:5a:ea:86:
                    55:1b:cc:fc:b3:f3:de:5f:40:5e:ae:1c:50:49:6d:
                    b5:37:00:79:c7:f6:be:e4:32:81:eb:fb:ae:01:24:
                    db:a8:c2:60:cd:21:37:43:78:ff:d4:50:ab:c7:cf:
                    fa:51:65:57:6e:dd:e3:98:c2:f1:14:1c:43:51:84:
                    a9:06:52:83:56:e8:d5:0a:98:bb:af:d7:b3:17:05:
                    e3:4f:51:a3:7a:70:4e:f2:39:44:73:47:16:75:68:
                    61:e9:2c:b4:cb:08:1d:90:a0:fe:af:c1:95:04:9d:
                    5c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:90:02:A7:CE:65:5A:D8:E2:A5:74:8D:DB:85:AA:76:E3:0E:7D:6C
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3234312e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.241.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         51:52:4e:13:ec:78:e3:75:9c:ce:ad:c1:48:72:20:6c:26:70:
         54:1f:c5:5b:b3:34:4a:64:ff:1d:ff:31:c3:3c:df:ee:fe:4c:
         c7:a8:16:0d:39:58:b1:8b:29:e1:fb:2b:bb:cb:5c:b8:82:e0:
         0b:06:b7:7a:f5:c4:d1:d5:0a:32:e3:71:63:1e:da:fe:f3:0d:
         e2:3d:9d:00:27:46:72:58:a1:f3:6c:49:0a:44:a7:9d:65:5d:
         f1:3b:75:fb:53:8e:09:e5:58:33:63:f6:90:50:05:d7:ce:93:
         5b:bb:b5:af:61:15:35:88:5a:d1:12:9c:13:5c:65:42:fb:86:
         f4:83:ec:fa:b0:75:19:16:58:f3:de:fa:68:c7:00:aa:6b:2d:
         e5:30:17:da:b5:48:5d:71:4f:66:0e:4f:17:b3:fa:c1:61:b9:
         a2:33:60:06:ed:bb:ae:c2:fa:f5:ca:43:02:e6:82:ab:39:52:
         4c:42:51:9c:42:7f:f3:2b:8a:5b:a4:04:49:d5:0f:dd:a8:e4:
         ed:d9:d4:8b:43:c0:e6:ad:38:66:0a:8a:e6:f4:d4:66:ad:3b:
         2b:20:89:ca:72:a4:40:63:24:61:19:b6:11:ff:00:d9:e4:2f:
         89:f8:42:a0:86:f0:cd:7c:f8:e8:b6:99:69:25:a9:f1:0c:f8:
         08:66:46:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org