Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3234322e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3234322e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          ivcnCegbo6gAdtg5D0DlrOtth5z5WZNgyABni6X2H4c=
Subject key identifier:   4D:C8:50:CB:13:DF:EA:49:F0:8E:64:3D:B4:0B:57:25:56:A0:4A:19
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       03D8247346D88622769F9FEF8D24C0C2EF32A223
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3234322e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:06 +0000
ROA not before:           Wed 11 Oct 2023 19:55:06 +0000
ROA not after:            Wed 09 Oct 2024 20:00:06 +0000
asID:                     4230
IP address blocks:        200.242.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:d8:24:73:46:d8:86:22:76:9f:9f:ef:8d:24:c0:c2:ef:32:a2:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:06 2023 GMT
            Not After : Oct  9 20:00:06 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:06:e4:f6:b9:2a:e4:02:30:e4:68:18:5b:76:
                    f0:30:09:1c:c2:6c:e8:0a:c6:5a:ad:75:7c:19:17:
                    10:f5:7c:98:28:f1:19:ad:59:6b:c9:f2:10:d3:59:
                    a7:49:2b:4f:c7:9c:9c:3c:b6:42:b4:d5:72:e8:92:
                    f2:4a:ae:43:e1:a6:91:84:6c:97:63:bb:eb:39:ce:
                    4e:37:92:60:a9:95:56:ee:96:2d:ff:b1:e9:0a:09:
                    d4:f0:e4:55:de:d3:25:0b:79:d9:d0:48:17:26:af:
                    3b:a3:25:99:ec:3c:fa:42:1b:27:43:5e:2d:33:bb:
                    16:48:03:d0:21:4f:cc:f3:f0:a5:cd:37:4d:d5:62:
                    e8:89:b4:08:49:b1:b6:06:f2:d0:c7:d9:93:12:b8:
                    b7:2e:83:00:a6:b6:57:2e:fd:64:1b:4f:b7:18:90:
                    10:be:52:5e:38:f2:b5:3d:58:83:a3:79:cc:df:0c:
                    88:3a:18:a2:29:4a:30:79:0c:dc:04:d6:02:61:7f:
                    b0:df:5e:2b:6f:8a:fb:9b:e2:17:89:34:15:64:c6:
                    66:4c:56:9f:f4:64:90:42:26:4f:6a:93:e1:c1:1e:
                    f2:30:6e:53:ce:b4:4a:d4:45:30:e6:c2:a1:52:d1:
                    f4:7f:55:61:c3:38:c2:c7:d9:95:50:36:73:32:54:
                    56:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C8:50:CB:13:DF:EA:49:F0:8E:64:3D:B4:0B:57:25:56:A0:4A:19
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3234322e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.242.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3d:70:7d:7a:5c:29:8f:40:d1:89:b1:f1:7b:5c:0d:7c:87:3e:
         a1:02:c7:1c:b5:c5:64:75:bb:79:6e:a1:21:e2:77:bf:e6:b8:
         77:7f:40:a8:e9:bb:e9:af:23:13:b1:f2:21:86:d8:be:e2:a4:
         ec:80:7f:e6:6e:43:af:22:39:16:61:54:19:49:42:10:62:b5:
         07:a6:79:cb:ae:12:3a:e7:ba:8c:8d:67:be:ed:77:a9:30:4e:
         45:76:55:3c:52:fe:76:63:d1:e7:7a:db:d2:47:ea:4b:7f:fe:
         21:a4:ff:fa:b9:56:4c:23:c3:fd:0e:0a:73:7f:1c:e3:ff:7a:
         79:0b:a1:79:68:0f:af:69:97:3c:c6:58:ad:00:f7:25:c9:f3:
         96:e9:cd:c2:8d:89:d3:69:e1:d1:aa:33:03:45:ea:03:41:fc:
         74:90:8b:80:ad:08:69:8f:44:f3:bd:f3:ab:74:d5:70:81:38:
         26:1a:b0:4f:55:3a:2e:95:0f:09:cb:c3:fe:93:1b:10:64:2a:
         ed:5b:c6:91:ed:ae:b5:9d:7d:0a:9f:d6:d3:de:94:33:77:cf:
         25:d0:34:f2:aa:3c:78:ee:e3:2a:e1:2f:ea:c9:4a:5d:af:66:
         c9:16:0e:71:d9:91:31:de:4e:07:d5:f3:71:20:ec:a2:b1:ee:
         86:4d:f9:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org