Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230312e33382e302e302f31362d3136203d3e2034323330.roa
File:                     3230312e33382e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          fvWwUBOxnwVULXcpfnx7bbpQlKWTUD+7WlwrLQSYPWE=
Subject key identifier:   32:48:C8:BB:7D:96:6C:E9:CB:CD:5A:2A:A5:18:DC:59:75:B4:D3:F9
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       711336E1328108D229FA9C9E235ACE2764C26F90
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230312e33382e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:08 +0000
ROA not before:           Wed 11 Oct 2023 19:55:08 +0000
ROA not after:            Wed 09 Oct 2024 20:00:08 +0000
asID:                     4230
IP address blocks:        201.38.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:13:36:e1:32:81:08:d2:29:fa:9c:9e:23:5a:ce:27:64:c2:6f:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:08 2023 GMT
            Not After : Oct  9 20:00:08 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fa:4f:d6:ed:54:bb:04:a2:39:6a:18:78:e1:
                    b3:96:e1:8c:82:9c:1d:8c:90:d3:46:b2:2d:bd:05:
                    a5:3f:01:39:fe:fe:e3:71:91:a6:6f:4b:5c:89:f6:
                    ac:ef:00:62:ce:02:71:b7:59:b2:6e:2c:cf:e7:6f:
                    21:f6:3e:df:94:f9:54:26:47:ab:8d:c4:84:c3:43:
                    20:38:88:aa:14:a1:0c:15:87:84:51:68:d8:10:63:
                    dc:95:39:ad:9b:cd:33:0e:78:6d:ae:e6:bb:9e:f4:
                    d8:c9:20:42:99:22:30:12:10:0b:2c:09:9b:82:59:
                    6f:54:be:53:f6:24:66:69:74:60:ef:19:2b:e8:c4:
                    d6:37:b9:b9:d4:49:bf:fc:22:5d:89:8e:ef:d1:a7:
                    4b:93:3e:ed:fa:84:ae:4d:e5:4d:db:a2:4d:81:fc:
                    5c:ce:fa:2e:e9:17:fb:72:2c:5b:7d:07:ad:f5:de:
                    f3:39:93:a2:b7:eb:99:10:1d:90:79:9a:fa:92:09:
                    96:e7:38:63:1f:22:00:14:dd:4b:c6:5e:c5:63:28:
                    75:93:fc:61:f6:ad:53:50:1c:cf:fc:21:d3:32:3f:
                    73:6a:6c:f1:41:30:b0:3b:61:d3:bc:63:56:68:c6:
                    65:45:9f:e8:3b:72:b0:ef:b5:31:80:34:8a:f6:db:
                    47:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:48:C8:BB:7D:96:6C:E9:CB:CD:5A:2A:A5:18:DC:59:75:B4:D3:F9
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230312e33382e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.38.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         49:34:4e:4b:f6:58:ba:1f:47:c8:89:8f:89:86:d2:ca:47:fa:
         36:8f:a9:24:3f:6b:4c:88:58:bb:be:7c:60:b2:8b:44:1e:05:
         41:22:8b:83:e9:57:fc:09:06:06:62:10:54:99:c0:a6:56:e2:
         26:cb:c3:f1:8c:7e:3a:0f:e9:6c:89:74:ec:03:e3:7a:c1:17:
         eb:a1:97:72:ac:ef:69:e0:d9:c4:05:80:2f:0b:78:ac:e8:ae:
         33:63:04:79:a4:e6:6e:28:b2:8c:55:f3:84:39:cd:17:cf:3b:
         58:f4:10:dc:b6:d2:43:df:eb:c4:6b:5b:c4:2c:be:1e:31:bb:
         dd:76:d0:af:23:cd:ad:4e:a9:26:04:03:5f:de:ee:35:11:d0:
         5e:1d:e4:19:8d:dd:5a:72:e6:7d:24:b4:72:0a:0e:b6:b8:6a:
         05:70:d4:e1:bd:21:db:01:a8:f0:ea:39:ad:79:89:9c:c4:45:
         9d:ac:31:37:33:a6:c9:2e:c3:dc:c8:c4:0c:b9:de:9a:b2:15:
         2e:d6:0b:49:3d:05:8f:e0:cd:f2:0f:3b:f4:e1:cd:81:af:7f:
         5d:fa:03:08:c5:82:8e:8d:ae:31:33:8a:16:89:f8:38:82:ac:
         7e:eb:8a:62:d2:97:81:ef:30:35:f0:6c:cd:21:a1:ad:ec:c5:
         36:d9:9a:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org