Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3235342e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3235342e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          lh0H+kCwJJ41YFUrPs3ObDylNACfO9k6onoGbDrlad4=
Subject key identifier:   0D:65:D9:C7:C5:EA:61:82:53:93:DD:32:51:D4:BA:FE:56:3B:E0:BE
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       354305D34D910C6C6907D8B314BC3AD7289A3B1F
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3235342e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:03 +0000
ROA not before:           Wed 11 Oct 2023 19:55:03 +0000
ROA not after:            Wed 09 Oct 2024 20:00:03 +0000
asID:                     4230
IP address blocks:        200.254.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:43:05:d3:4d:91:0c:6c:69:07:d8:b3:14:bc:3a:d7:28:9a:3b:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:03 2023 GMT
            Not After : Oct  9 20:00:03 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:d7:63:90:00:46:12:bd:2b:6f:e0:03:cb:e7:
                    2d:f7:7e:13:7a:a4:2d:15:f2:cc:cc:66:6d:6c:be:
                    99:77:53:bd:7e:80:5c:a6:3b:e6:be:f5:7d:34:ff:
                    05:74:55:a6:e0:05:73:9d:f3:8d:ad:44:44:08:ff:
                    a7:ac:85:f2:2d:fe:48:a2:c3:9b:62:cc:4b:9a:e6:
                    d5:fc:b3:16:77:0d:3e:c2:6f:03:ea:17:2d:39:2c:
                    83:6f:ed:d5:37:67:c8:e9:42:7c:6f:f1:fb:20:ec:
                    ed:99:f3:df:ac:1f:18:4d:a3:10:5c:e0:96:22:9e:
                    49:0e:0a:df:0c:33:75:4f:aa:d7:b7:50:3c:99:65:
                    d5:a0:37:7f:e3:50:6e:a5:71:52:86:02:af:bc:c6:
                    4b:55:1b:46:b9:cc:76:0f:28:fd:2f:a7:a4:1b:72:
                    72:7e:f1:ab:64:8e:22:e9:d4:41:3e:4a:e7:04:3a:
                    cd:dc:ec:09:16:5f:f7:e1:5f:88:42:d7:aa:99:5d:
                    dc:1b:ab:25:00:35:0c:62:e5:e0:af:7b:a5:6c:96:
                    19:4c:d6:1e:d1:b0:18:bc:71:17:9b:6e:a3:17:01:
                    c9:e7:9b:ae:1e:1a:5d:72:9f:0e:1c:a5:ba:a0:b6:
                    ec:dd:0f:d5:ac:5d:3b:61:0d:e2:bb:c9:dc:d2:dd:
                    ba:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:65:D9:C7:C5:EA:61:82:53:93:DD:32:51:D4:BA:FE:56:3B:E0:BE
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3235342e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.254.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         74:a4:c7:9a:13:7f:fa:32:db:cd:13:10:1d:e5:99:af:41:57:
         03:95:07:75:4e:20:26:8d:0f:84:b3:ef:e4:c5:05:be:e1:20:
         72:09:61:c2:60:3a:a1:32:e8:d4:04:6d:5e:fe:4e:dc:67:e6:
         62:a2:9f:ce:9c:fd:6a:32:7d:0a:47:90:0b:d3:ab:b3:69:02:
         e9:9c:2f:db:82:24:5e:91:6b:70:e4:95:88:62:27:e1:37:f8:
         e9:cb:af:a3:80:d5:81:4b:13:b1:86:6f:4a:c4:4b:d0:b7:3f:
         2e:21:09:70:d8:5d:78:3a:bb:73:67:c9:99:71:43:1e:ca:1d:
         3f:e6:35:8d:71:c2:b7:27:06:12:d0:95:72:e2:e2:91:28:76:
         f5:4b:6d:b0:78:e8:37:16:2e:4a:a2:33:72:9a:99:00:cf:d8:
         ad:77:aa:a9:13:00:99:27:3b:9a:fb:0e:6f:84:ce:a8:85:be:
         33:65:34:44:1c:bd:40:2f:aa:cb:a9:d9:93:4f:df:12:84:e4:
         a7:90:cf:e9:9e:cf:ae:3c:38:d2:aa:1a:be:ef:bc:c8:d7:9d:
         10:19:6a:c6:d1:3e:8f:8e:da:52:e3:05:90:16:ea:86:c9:df:
         08:f7:ae:d0:76:5d:31:98:54:77:62:6c:65:95:cf:8e:d3:c1:
         c2:3a:ff:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org