Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230312e33392e302e302f31362d3136203d3e2034323330.roa
File:                     3230312e33392e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          UrFHe06BVNp3+jQyfTtRrLCjLgWT9+wmImgVfAXH4jo=
Subject key identifier:   19:24:7D:C2:E5:E9:D1:3A:B5:D3:82:90:C6:11:2B:79:93:F9:42:DE
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       7334F08A36F76B047065639604FC176D2C72D7B5
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230312e33392e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:07 +0000
ROA not before:           Wed 11 Oct 2023 19:55:07 +0000
ROA not after:            Wed 09 Oct 2024 20:00:07 +0000
asID:                     4230
IP address blocks:        201.39.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:34:f0:8a:36:f7:6b:04:70:65:63:96:04:fc:17:6d:2c:72:d7:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:07 2023 GMT
            Not After : Oct  9 20:00:07 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:9c:cf:0f:27:50:02:f9:90:8e:ff:c7:4f:e4:
                    68:51:5a:78:aa:92:00:e5:ba:51:1d:93:99:46:e8:
                    68:84:84:98:d3:71:6c:90:13:ef:d4:23:bd:e3:e7:
                    0c:62:5b:ec:8f:87:92:53:a5:81:07:49:5e:ef:5c:
                    e2:7b:89:99:0a:d8:6e:2a:d4:b0:e2:47:a2:12:64:
                    17:07:8e:f0:19:9d:35:7f:6a:14:37:18:f6:73:1e:
                    20:3e:12:ff:a2:3c:a4:27:3e:bb:f9:5a:4a:ef:7a:
                    c4:7a:24:1e:55:b9:cf:49:fa:3a:db:2a:bd:cb:88:
                    59:21:c1:cd:56:be:96:b0:7f:67:bd:ad:1e:db:30:
                    53:78:56:c1:ec:80:f4:9f:2a:38:da:b5:cd:43:f2:
                    e7:b2:81:02:18:88:8a:b1:16:27:5e:b2:ef:5b:c0:
                    88:f5:20:0f:21:ad:e5:ef:72:2e:38:dc:3a:ae:7f:
                    67:ab:ac:20:40:64:7b:b5:08:02:3f:dc:db:5f:7c:
                    37:d7:49:7e:b1:15:ed:2d:7b:12:b2:01:33:df:5b:
                    3d:9a:0c:81:4b:b5:a9:f8:16:2c:b2:57:70:72:da:
                    af:42:18:6f:8a:37:25:60:97:b9:58:3a:4d:01:85:
                    a1:da:4f:c6:38:7d:0b:46:c1:a6:c5:a8:19:a3:d2:
                    d6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:24:7D:C2:E5:E9:D1:3A:B5:D3:82:90:C6:11:2B:79:93:F9:42:DE
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230312e33392e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.39.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         28:40:6c:28:3e:9d:dd:ee:3b:d8:f2:84:ec:41:0a:9f:ce:53:
         61:b0:a9:6c:87:66:97:93:54:cf:b9:0c:4f:49:18:54:18:a8:
         3a:b0:37:f2:de:1e:b1:3f:43:d9:9a:06:9a:83:34:38:3f:52:
         5a:8b:bb:22:87:73:e1:36:7d:61:0b:11:4c:aa:14:55:a7:da:
         be:46:b0:b3:36:0e:79:2d:d3:4e:3d:c1:30:c9:aa:68:2d:e8:
         d0:dd:31:25:c0:5b:27:6a:74:91:d2:f1:68:ba:ec:ad:9c:c4:
         84:e8:6c:82:fe:b5:43:ee:e3:1c:f6:97:d4:20:d0:d6:a9:72:
         61:33:76:c0:6c:17:5f:a1:21:62:54:3e:8a:4f:3f:4c:d3:48:
         b5:bd:b0:1a:69:4e:ce:b2:49:f0:bb:df:96:4a:43:04:2a:90:
         1b:d6:8a:f1:5b:dc:f7:a3:a9:d3:86:14:f3:24:56:62:76:13:
         05:33:63:57:ab:c2:21:a1:9b:5c:7b:9a:d9:5a:ee:ba:34:cb:
         55:ca:e1:c9:76:69:86:19:81:d7:b8:4e:70:63:cb:d0:e4:55:
         c1:0f:6c:fa:33:b1:72:0f:e5:f0:39:7e:65:35:70:00:24:84:
         79:ad:38:14:fd:24:dc:ec:2a:87:39:d4:3a:f7:01:a6:5f:b4:
         9e:1a:c2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org