Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3235302e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3235302e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          UWTaoTTnQ/2Nvo59wLjsdDFdHkgoJhv84+YyEvIZRh0=
Subject key identifier:   95:CC:26:F3:67:16:40:03:35:71:B4:EB:1D:E3:F1:B3:66:55:B4:32
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       5D8402E313FC8A12EC1ABF1BD029E52028AFA8D3
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3235302e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:05 +0000
ROA not before:           Wed 11 Oct 2023 19:55:05 +0000
ROA not after:            Wed 09 Oct 2024 20:00:05 +0000
asID:                     4230
IP address blocks:        200.250.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:84:02:e3:13:fc:8a:12:ec:1a:bf:1b:d0:29:e5:20:28:af:a8:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:05 2023 GMT
            Not After : Oct  9 20:00:05 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:59:b9:53:91:af:0c:6d:47:05:e7:34:f5:94:
                    35:f0:72:66:03:65:0b:31:1f:cd:f3:5a:cb:db:6f:
                    11:85:44:df:81:b2:32:82:c9:38:86:71:4f:da:54:
                    8e:64:50:4a:43:55:19:c5:82:59:a2:b9:20:dc:ed:
                    4f:ca:6c:1a:80:f8:fa:92:55:a3:75:1e:af:78:0b:
                    54:17:63:d8:ab:4c:58:c6:be:d6:1d:c1:2f:dd:d3:
                    52:77:40:2a:6c:7d:81:de:dc:b8:ed:76:6e:0c:be:
                    0d:aa:01:ad:26:33:6b:b4:8e:7c:7d:d9:f1:a5:95:
                    7e:cb:e7:bc:07:80:af:a1:f5:7e:05:a8:82:c2:51:
                    4c:33:a9:6d:a3:7e:b9:ba:79:b4:96:73:65:82:f7:
                    54:88:0c:8f:81:9c:e7:45:83:32:5b:03:24:a9:97:
                    6a:b8:b1:e2:e2:1f:e3:70:b0:b3:19:40:9c:93:23:
                    65:7a:7c:19:cf:1d:ed:28:e2:9d:c2:d6:71:d1:be:
                    df:81:76:78:ac:be:8f:34:cd:6b:6f:d7:0a:f7:95:
                    06:d5:6f:b3:e3:52:ac:f0:0b:e1:92:2d:79:7f:12:
                    70:8e:a7:26:d5:9e:2a:fe:e4:8e:6b:6f:89:3f:02:
                    4f:9a:c3:4b:24:bc:b1:b9:d6:39:3d:ac:ab:23:68:
                    94:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:CC:26:F3:67:16:40:03:35:71:B4:EB:1D:E3:F1:B3:66:55:B4:32
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3235302e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.250.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         01:98:0f:1e:ad:ba:51:67:47:28:35:f0:48:19:c9:f7:ca:9f:
         88:1a:4e:57:4a:c2:cb:e3:96:64:e7:4a:1c:b1:dd:ec:f0:1c:
         4b:81:68:58:74:f2:a3:b5:53:a4:1e:96:5c:63:7d:ac:3a:32:
         36:a7:9f:c3:ef:40:4e:da:43:15:b7:93:1a:94:59:2c:5c:80:
         58:11:d1:b6:c8:fe:d4:a6:58:ef:75:9f:37:8c:df:64:d1:e6:
         dd:a4:e1:e1:6e:ff:a9:fe:e6:94:e1:4f:2d:06:ec:25:54:e9:
         76:12:e6:39:55:6f:35:ed:79:f4:90:94:18:68:23:de:13:8f:
         ab:99:0a:a8:53:89:f3:24:af:31:e4:aa:c2:0b:c7:c9:12:1b:
         23:6e:4b:14:24:cf:36:cd:bc:52:ef:50:e8:5b:20:a0:3a:48:
         10:82:72:7e:94:53:a7:5c:9b:6e:f0:35:05:92:39:fc:cf:92:
         23:71:7f:4c:ed:21:1e:3c:1f:b0:76:aa:18:a1:12:37:d8:eb:
         6c:85:76:d1:08:e4:0b:ea:64:64:bc:60:8c:ae:1a:d1:d5:e1:
         94:c5:1a:03:f4:c4:bc:3a:df:d5:76:f2:47:89:8a:67:7e:51:
         62:26:93:28:f3:c2:39:92:01:69:a0:e6:d4:cf:68:a8:a6:45:
         76:cc:c2:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org