Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3235352e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3235352e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          S0sON/fW0qpOll9L7WCRam4KdIkKRn/Pe6Mrg2hZGks=
Subject key identifier:   1D:13:77:9B:6D:96:6F:4B:23:EA:E2:CD:D7:17:0D:5A:20:DB:73:63
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       0EEC2BC054167B3CC404E5CFDC315C6B76522991
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3235352e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:09 +0000
ROA not before:           Wed 11 Oct 2023 19:55:09 +0000
ROA not after:            Wed 09 Oct 2024 20:00:09 +0000
asID:                     4230
IP address blocks:        200.255.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:ec:2b:c0:54:16:7b:3c:c4:04:e5:cf:dc:31:5c:6b:76:52:29:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:09 2023 GMT
            Not After : Oct  9 20:00:09 2024 GMT
        Subject: CN=3082010A0282010100F8642BB97D2CE681C9E37B64667DC634070ECE4A59CF26D612E8EFF8AC8294AC97AC1773E7F17C9774BC9FE2C9F56E383F8A121611109565E45A3041217A25370DD456616A53BC84D597D0741D53CCAC473CAD45405251A6A2770DDBC980CF4B9AF97D91A43FA138F7EBF41E7B7CB9610B4D942165812F6E59B8BDA2052CB2C20B83716468FBCB1ABE1BE5AC56ED99AE41220D952C9026CB5FB38C80CD5B81267490B7EAE9251EC471A4F8AABC482573F41D756E6B0A1F304F8A719221E491A9379E1983C21718CD9B72B0B2382751F4127FBD9EE719607CD8228AC2351186D6DDF7C811CD3E69CF85062343A21C306665E375275DB7340DFF04E7919F90E1E50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:64:2b:b9:7d:2c:e6:81:c9:e3:7b:64:66:7d:
                    c6:34:07:0e:ce:4a:59:cf:26:d6:12:e8:ef:f8:ac:
                    82:94:ac:97:ac:17:73:e7:f1:7c:97:74:bc:9f:e2:
                    c9:f5:6e:38:3f:8a:12:16:11:10:95:65:e4:5a:30:
                    41:21:7a:25:37:0d:d4:56:61:6a:53:bc:84:d5:97:
                    d0:74:1d:53:cc:ac:47:3c:ad:45:40:52:51:a6:a2:
                    77:0d:db:c9:80:cf:4b:9a:f9:7d:91:a4:3f:a1:38:
                    f7:eb:f4:1e:7b:7c:b9:61:0b:4d:94:21:65:81:2f:
                    6e:59:b8:bd:a2:05:2c:b2:c2:0b:83:71:64:68:fb:
                    cb:1a:be:1b:e5:ac:56:ed:99:ae:41:22:0d:95:2c:
                    90:26:cb:5f:b3:8c:80:cd:5b:81:26:74:90:b7:ea:
                    e9:25:1e:c4:71:a4:f8:aa:bc:48:25:73:f4:1d:75:
                    6e:6b:0a:1f:30:4f:8a:71:92:21:e4:91:a9:37:9e:
                    19:83:c2:17:18:cd:9b:72:b0:b2:38:27:51:f4:12:
                    7f:bd:9e:e7:19:60:7c:d8:22:8a:c2:35:11:86:d6:
                    dd:f7:c8:11:cd:3e:69:cf:85:06:23:43:a2:1c:30:
                    66:65:e3:75:27:5d:b7:34:0d:ff:04:e7:91:9f:90:
                    e1:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:13:77:9B:6D:96:6F:4B:23:EA:E2:CD:D7:17:0D:5A:20:DB:73:63
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3235352e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.255.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         99:86:b7:93:3d:fc:13:3d:a7:f8:08:35:88:5f:d3:b8:94:18:
         11:d8:19:36:33:b4:2c:1c:ce:28:d5:51:7c:d4:52:ac:4a:a0:
         c5:7a:1f:74:ed:b7:2f:a1:f9:4e:74:b7:b2:f7:04:c8:76:78:
         4d:37:4f:e9:3d:3d:20:74:f6:f8:b0:aa:fc:a1:cd:b1:bd:c4:
         5e:20:d3:0e:0b:c9:7d:c7:b5:fc:17:ad:20:31:f7:ba:b5:1b:
         ac:ed:68:88:78:03:96:23:5d:84:cc:64:2f:c4:8b:78:ca:b5:
         b8:d8:f9:ab:50:be:c2:9f:3a:64:04:a5:40:e8:06:39:a7:da:
         db:e0:a2:62:e9:77:43:fd:a0:14:32:2a:bb:6b:cb:0d:d6:2b:
         b0:b7:36:4d:e2:5e:f9:6d:8d:4b:ce:50:0d:2d:50:6b:3d:c9:
         ef:b1:98:1a:f5:16:25:3c:68:01:21:c5:12:1f:3c:cf:33:bb:
         74:fc:c3:8c:91:75:c4:2e:ce:4f:95:b6:5c:b5:93:fe:5d:05:
         e0:06:dc:1b:93:e7:36:c4:20:73:6a:ca:8c:49:18:ca:87:e3:
         d1:91:f8:d9:3d:8f:34:61:07:e0:3d:ed:c7:59:18:36:8a:25:
         8c:0d:67:6a:d8:f2:28:d2:ed:40:6f:8e:f6:fa:fb:e0:c2:53:
         e0:12:e6:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org