Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3235312e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3235312e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          ZCGQoeDMsFg17ymooGSMJvakV9klx7dul1AWe6J+hbw=
Subject key identifier:   9A:5F:4C:18:96:8D:72:B3:57:8B:E4:51:52:6E:E1:22:83:F2:4A:EB
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       64AD28886DE5B5A893B04FDCF6B27E5A84D024FE
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3235312e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:04 +0000
ROA not before:           Wed 11 Oct 2023 19:55:04 +0000
ROA not after:            Wed 09 Oct 2024 20:00:04 +0000
asID:                     4230
IP address blocks:        200.251.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:ad:28:88:6d:e5:b5:a8:93:b0:4f:dc:f6:b2:7e:5a:84:d0:24:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:04 2023 GMT
            Not After : Oct  9 20:00:04 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:aa:57:f4:32:f9:ec:34:52:41:d0:0d:7d:a2:
                    ec:e4:60:62:5d:a2:5f:2f:04:3f:e9:f3:84:58:db:
                    d3:e6:65:91:c8:21:19:03:14:11:fd:bd:ca:65:e6:
                    74:58:2d:eb:8b:c2:a1:eb:63:e1:cc:56:05:ac:bd:
                    55:02:f3:74:6a:6b:d8:6e:bc:26:3e:63:97:0a:05:
                    d5:61:ca:9e:2b:56:ba:0a:c2:d9:d4:2e:e6:b3:c7:
                    e1:d2:1e:ff:11:cb:65:4b:64:68:2b:4d:b5:69:31:
                    cb:35:d3:d5:9e:97:16:d1:4d:03:84:f5:87:44:99:
                    63:b9:5d:09:7f:56:9a:f7:d3:0f:05:41:84:85:b5:
                    c6:f8:62:70:53:ef:dd:5b:c6:e5:16:46:fe:f2:28:
                    c4:be:34:98:a5:bc:cb:20:c6:ba:5f:6c:40:3a:6f:
                    11:67:3c:69:a5:22:ec:e2:bf:97:a4:d7:c3:9c:ac:
                    53:90:ea:53:aa:9d:94:b9:e4:8d:d6:fe:af:0c:85:
                    b7:78:55:4f:2b:73:18:de:89:10:25:3c:b3:03:6c:
                    0e:ce:34:79:96:87:60:ee:24:66:46:b4:ad:f8:43:
                    b8:46:9e:51:5b:d6:37:97:fd:34:4f:b5:93:0e:80:
                    d7:25:b6:e4:ec:d8:2f:b6:45:dc:9b:24:ca:f3:e8:
                    e2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:5F:4C:18:96:8D:72:B3:57:8B:E4:51:52:6E:E1:22:83:F2:4A:EB
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3235312e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.251.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ba:70:01:7a:4a:c8:d8:be:9a:50:9f:36:d1:7c:bf:7e:a2:5c:
         2c:9f:b6:ff:13:6b:45:5a:98:c6:fd:11:40:65:28:df:f5:3c:
         3f:3d:08:de:5d:86:ea:a5:d2:38:f2:8f:d4:8c:14:1b:fb:67:
         75:01:51:27:06:32:c7:41:bb:b1:11:c1:5c:04:05:8a:3e:87:
         a7:c9:7a:40:c9:3a:0a:74:7d:1b:82:75:0b:05:f2:be:e8:22:
         27:09:04:3e:ea:25:55:7b:3b:ee:25:a7:8f:cf:c8:df:1d:e8:
         fb:5e:b8:c2:fc:f8:11:8f:fc:2e:b5:5f:ab:7e:79:5b:8f:31:
         a4:e0:d7:d1:10:80:1d:48:a4:7f:40:85:50:bd:58:5e:ec:36:
         99:cb:d8:42:da:ce:60:83:0e:3a:62:dd:b0:14:de:fa:d3:ef:
         53:98:c2:03:5d:62:7f:d3:4f:fe:d5:9c:78:48:63:46:01:c6:
         cf:e5:d7:06:74:05:5b:e8:0d:d0:af:2f:73:08:5a:24:59:1a:
         71:bf:73:cf:d0:39:61:fe:22:fa:b4:a1:1d:51:e6:95:da:92:
         8c:9c:50:06:78:fa:0c:98:b2:9a:ae:1a:78:dc:8e:c9:b0:69:
         fe:f5:9e:d2:b5:f2:b5:61:93:f4:82:41:ee:d6:fd:4e:47:68:
         88:9e:de:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org