Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230312e33302e302e302f31362d3136203d3e2034323330.roa
File:                     3230312e33302e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          tgBJcmpeF/ka+DW6G1LGu6/QdG1Sh3Z6DSTK3RKrZYA=
Subject key identifier:   83:35:6D:32:CA:D3:50:20:02:6A:5D:74:F8:46:CB:E6:52:54:F1:EC
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       49C469ADF83B3E5503FE23E3EB0CA22B56DF6919
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230312e33302e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:06 +0000
ROA not before:           Wed 11 Oct 2023 19:55:06 +0000
ROA not after:            Wed 09 Oct 2024 20:00:06 +0000
asID:                     4230
IP address blocks:        201.30.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:c4:69:ad:f8:3b:3e:55:03:fe:23:e3:eb:0c:a2:2b:56:df:69:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:06 2023 GMT
            Not After : Oct  9 20:00:06 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b8:31:d2:93:b8:75:d4:96:4d:54:d1:d7:b8:
                    ad:60:21:58:36:f3:95:61:a0:2d:f7:57:0b:e0:60:
                    e2:52:87:50:11:0e:f5:0f:01:60:2c:c4:eb:a0:a4:
                    07:d6:bc:2d:61:c4:e4:c6:95:7c:1b:a7:40:48:c4:
                    9d:f0:76:57:5b:49:f6:0f:ea:50:e4:3f:6f:2c:c5:
                    45:c1:12:5f:12:0f:85:c4:de:78:f9:3d:06:b8:01:
                    e4:a2:fa:ec:08:34:05:00:55:39:46:44:85:67:6a:
                    c5:59:10:04:ff:ac:db:95:44:0f:57:01:ec:e3:be:
                    a3:0d:80:60:3f:0d:4e:81:59:7b:83:5c:6b:e5:c6:
                    4f:18:cb:f1:7d:40:90:5d:a4:26:48:dd:b4:16:47:
                    3c:f6:9d:ee:71:eb:e7:e0:b4:5c:69:ca:1f:f1:19:
                    ba:44:2b:8a:80:93:8f:48:b0:5a:24:09:bb:6b:da:
                    c5:21:ce:b9:2c:82:bf:03:01:2a:dc:a2:d2:98:9e:
                    d5:85:07:9d:62:ff:0a:49:d5:9e:0e:5f:3b:0e:e2:
                    57:8b:b4:db:bb:75:c7:2f:25:63:e2:fa:ea:60:20:
                    ef:d3:d1:03:8c:79:85:50:10:2f:26:2c:8e:5b:94:
                    c8:60:4a:5c:b6:57:33:41:0f:63:98:2f:58:55:c8:
                    20:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:35:6D:32:CA:D3:50:20:02:6A:5D:74:F8:46:CB:E6:52:54:F1:EC
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230312e33302e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.30.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0a:61:ff:ed:f9:51:cd:72:a5:f8:ae:79:1f:23:d6:78:6b:8a:
         b7:fc:12:63:93:b3:98:4c:81:60:22:02:fd:64:c7:0b:e1:c7:
         bb:36:02:91:bc:50:df:f1:5b:23:00:40:40:8f:4d:f7:80:6e:
         c2:97:5e:ef:f3:a4:4c:fe:5c:5b:d8:7b:ab:1a:57:cb:16:81:
         ae:56:bb:20:d6:38:88:e9:d8:d2:8d:0c:02:ec:56:29:f0:c0:
         67:58:70:f4:86:14:9d:d7:6a:c6:21:dd:d7:66:37:d0:1e:3d:
         8a:5b:45:19:b6:06:48:e5:7e:e5:2e:ad:2b:35:5c:9e:c6:1b:
         ef:0e:35:d9:b9:ff:08:8b:e2:ef:ab:24:a0:a1:f8:57:e0:b4:
         5c:82:a4:15:29:c3:a2:86:f5:5c:93:e3:34:ba:98:b0:33:f4:
         bf:ee:40:aa:e8:e9:dc:35:ac:68:d6:8d:4d:00:89:37:df:b8:
         d0:24:23:ab:e9:f4:12:3c:3e:ab:55:b6:d5:91:d3:15:63:76:
         68:96:3b:0b:55:4c:03:d1:11:09:5a:63:6b:d5:83:24:69:b3:
         43:0a:d9:4f:52:3e:bd:79:30:82:a1:c0:31:9f:3b:cf:0b:0b:
         24:f3:62:6a:3b:9b:9e:8e:4e:48:62:04:17:a0:fb:05:ff:a9:
         2b:1a:25:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org