Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3234392e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3234392e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          6ZT/IHXDEinpaYg+FgRO/TbVb2pbRFXKYge1pSsOO6k=
Subject key identifier:   AF:9C:BC:10:79:CD:74:E3:D9:61:77:3B:7B:41:52:6B:3C:3A:8F:99
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       34ECDF8C30BCFD73131CAC5D77F6809A209F6206
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3234392e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:00 +0000
ROA not before:           Wed 11 Oct 2023 19:55:00 +0000
ROA not after:            Wed 09 Oct 2024 20:00:00 +0000
asID:                     4230
IP address blocks:        200.249.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:ec:df:8c:30:bc:fd:73:13:1c:ac:5d:77:f6:80:9a:20:9f:62:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:00 2023 GMT
            Not After : Oct  9 20:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:06:5e:9a:fa:94:da:b4:62:5a:b9:30:0e:25:
                    ec:02:4d:48:ed:f6:24:43:c7:58:9d:eb:71:cb:0e:
                    a3:3a:03:0c:cc:60:a6:57:77:a2:61:10:bf:70:7a:
                    c1:36:02:6d:1f:99:8e:59:62:27:39:8b:88:c9:ff:
                    e2:39:22:b1:2f:9d:01:ef:ae:dd:d4:9b:9e:2d:28:
                    a0:e8:a7:da:63:27:91:cf:e8:dd:fa:74:ab:50:ad:
                    1d:e8:9d:d9:3f:d0:5b:93:b3:14:61:8a:1b:a7:80:
                    c8:a0:6b:cf:d3:09:72:d6:ac:d2:ec:34:ce:b8:7a:
                    c7:33:2f:ed:f4:65:30:4b:3a:c4:f2:ce:b2:d5:52:
                    cd:98:ba:56:ed:c3:26:50:a1:14:2c:6b:8d:7b:ad:
                    16:c9:3d:08:63:22:b1:be:9c:28:93:04:c6:dd:71:
                    19:46:33:7d:18:ec:b4:d9:2a:2b:31:fd:44:20:86:
                    51:1f:6e:19:b4:78:9d:90:9b:86:1c:06:be:bc:b5:
                    fb:58:6d:9f:3a:26:85:e5:0a:e5:25:8f:54:a9:fb:
                    14:8f:f8:8e:05:ef:48:2b:fa:db:59:ab:59:5c:05:
                    43:9c:ca:40:0a:9a:cb:85:8f:22:90:36:af:1c:86:
                    0e:41:43:2a:ee:f1:f5:66:7b:cc:aa:27:c7:84:58:
                    71:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:9C:BC:10:79:CD:74:E3:D9:61:77:3B:7B:41:52:6B:3C:3A:8F:99
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3234392e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.249.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2d:18:66:53:80:65:53:37:d7:d5:9f:96:8e:8b:3d:6e:1d:ab:
         32:f0:4a:d5:1d:0e:d3:7e:9e:5e:b9:b5:5d:be:c4:34:d0:20:
         11:04:68:ae:bd:b9:f4:e4:e1:32:c7:1c:b3:54:1c:f0:38:65:
         4b:69:3a:e5:aa:b2:8c:d7:d9:79:9e:af:14:d3:29:75:99:03:
         04:95:a7:fa:7a:dc:03:02:4c:76:94:55:41:8f:64:99:74:a0:
         7c:ad:45:94:e1:48:89:fc:7f:5a:4d:b9:29:28:7a:08:e9:bb:
         d3:01:a1:3c:54:90:a5:4c:aa:3d:93:83:74:9d:c3:90:50:23:
         cc:01:b2:7f:dc:8c:3d:38:b3:27:35:1a:cb:80:f4:b9:39:d1:
         42:92:28:8a:e4:0b:da:36:f9:70:65:fc:60:27:24:7c:66:11:
         91:73:27:ce:a6:d9:04:e1:db:f7:20:f3:9a:72:12:58:9f:f7:
         3f:31:86:6f:cf:ee:f9:31:5e:0d:a9:46:64:7f:5f:0b:d2:67:
         2b:7b:5f:b5:ce:27:04:39:dc:f1:d4:f4:e2:34:fd:13:e2:2d:
         c2:ad:d5:01:12:8d:b2:dc:1c:24:a6:cb:fc:1f:32:f2:1e:76:
         48:50:82:1c:a5:81:89:32:20:67:15:ee:60:31:8a:55:f3:06:
         3c:0b:8d:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org