Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3234352e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3234352e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          6uNo0pmv08CaU7eeA/pr68NJNfG/3LfFCJd1Ql4HmzQ=
Subject key identifier:   F6:FC:4F:DF:F8:28:ED:3A:DE:6B:85:A5:A2:C7:2E:FC:91:E9:42:68
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       3B0B302F63FC51B6F16AB8A89A0126D52B27DEEB
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3234352e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:03 +0000
ROA not before:           Wed 11 Oct 2023 19:55:03 +0000
ROA not after:            Wed 09 Oct 2024 20:00:03 +0000
asID:                     4230
IP address blocks:        200.245.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:0b:30:2f:63:fc:51:b6:f1:6a:b8:a8:9a:01:26:d5:2b:27:de:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:03 2023 GMT
            Not After : Oct  9 20:00:03 2024 GMT
        Subject: CN=3082010A0282010100DA8AAB1A83871DC211CF734FFCFC7CCD06E0D947FE34C3D819FA3B0A2166C22A008A0F544096FA464CE1BF088F6EAE4375BF01D4791D863D30BCCA17C4196AF08286C9DCD8468C89EED75F22D29B8C0E948627943E679AE31E454ADEF3F8CFDADD148588F18CC805AB1F1A818CEF39D9AF32437899765B2EFC1278BDE24C9F512B0B120D0C668DD460E6347EFEC8B9935F00FE646476D44DF5074C26D5B92463C07CDBD36C5D50ACE04D652D4C89937199445EBE1663825F50B9B2749EBEBE162D30548484D02B89514785B3CCCF5BCC346B1FEDCCE05EE27E0E90A61F763832C9B53E286C9B7EC404C183E6858F8D8EAF9CFACB9AD6BDA2A374F654B1F8BBBB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:8a:ab:1a:83:87:1d:c2:11:cf:73:4f:fc:fc:
                    7c:cd:06:e0:d9:47:fe:34:c3:d8:19:fa:3b:0a:21:
                    66:c2:2a:00:8a:0f:54:40:96:fa:46:4c:e1:bf:08:
                    8f:6e:ae:43:75:bf:01:d4:79:1d:86:3d:30:bc:ca:
                    17:c4:19:6a:f0:82:86:c9:dc:d8:46:8c:89:ee:d7:
                    5f:22:d2:9b:8c:0e:94:86:27:94:3e:67:9a:e3:1e:
                    45:4a:de:f3:f8:cf:da:dd:14:85:88:f1:8c:c8:05:
                    ab:1f:1a:81:8c:ef:39:d9:af:32:43:78:99:76:5b:
                    2e:fc:12:78:bd:e2:4c:9f:51:2b:0b:12:0d:0c:66:
                    8d:d4:60:e6:34:7e:fe:c8:b9:93:5f:00:fe:64:64:
                    76:d4:4d:f5:07:4c:26:d5:b9:24:63:c0:7c:db:d3:
                    6c:5d:50:ac:e0:4d:65:2d:4c:89:93:71:99:44:5e:
                    be:16:63:82:5f:50:b9:b2:74:9e:be:be:16:2d:30:
                    54:84:84:d0:2b:89:51:47:85:b3:cc:cf:5b:cc:34:
                    6b:1f:ed:cc:e0:5e:e2:7e:0e:90:a6:1f:76:38:32:
                    c9:b5:3e:28:6c:9b:7e:c4:04:c1:83:e6:85:8f:8d:
                    8e:af:9c:fa:cb:9a:d6:bd:a2:a3:74:f6:54:b1:f8:
                    bb:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:FC:4F:DF:F8:28:ED:3A:DE:6B:85:A5:A2:C7:2E:FC:91:E9:42:68
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3234352e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.245.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b3:83:d1:98:99:a1:94:a1:58:24:09:2c:03:96:25:5e:80:68:
         0c:ee:51:68:74:fb:7b:90:02:59:68:53:bb:c4:e5:1f:ef:37:
         3d:30:bd:bf:86:e7:9f:f0:23:dd:9c:87:f3:39:05:e5:5e:ed:
         d1:60:5a:fa:36:d2:8f:93:f0:0c:e4:3e:51:2b:92:6f:01:c8:
         50:c7:f1:f6:49:72:89:a2:e2:b6:e9:4a:6c:17:3e:18:16:7f:
         5a:a6:c8:0f:20:cd:6a:61:7f:ff:e4:cf:bc:d8:83:85:b0:c6:
         bf:f6:bc:5f:5d:20:75:69:23:9a:72:5e:10:85:20:06:f4:c7:
         5e:2e:c6:8e:ba:96:fa:91:36:96:08:21:0b:c7:b1:20:36:fb:
         0e:97:73:89:1a:a7:6d:27:f8:63:2a:41:55:82:f6:1d:9e:c5:
         06:cf:24:39:2d:93:13:87:8e:f0:5c:94:71:8c:ae:da:c8:16:
         50:17:9b:dc:5c:a1:7c:34:6c:e7:58:f9:b0:f8:99:4f:24:2e:
         96:31:a9:eb:72:2e:2d:79:1a:18:a7:70:e7:d7:46:a0:0a:e7:
         8a:fb:10:52:67:d4:1c:77:85:9b:5d:3b:24:96:ab:af:2b:14:
         b2:14:c1:cc:24:5d:d7:d7:2d:71:cb:e0:3c:22:51:a6:c2:77:
         f1:22:77:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org