Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230312e34342e302e302f31362d3136203d3e2034323330.roa
File:                     3230312e34342e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          kx0FQnGGRGPXEg/IYvjn0DjI+728iqpCt6Qtm2fTEgc=
Subject key identifier:   FB:03:EA:48:EE:4E:26:0F:40:06:F7:5D:92:6C:A1:1A:02:A0:1A:FC
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       16A3FB3DCC9AC6FC79FF6AD5E09A9427987E4371
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230312e34342e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:03 +0000
ROA not before:           Wed 11 Oct 2023 19:55:03 +0000
ROA not after:            Wed 09 Oct 2024 20:00:03 +0000
asID:                     4230
IP address blocks:        201.44.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:a3:fb:3d:cc:9a:c6:fc:79:ff:6a:d5:e0:9a:94:27:98:7e:43:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:03 2023 GMT
            Not After : Oct  9 20:00:03 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:83:ba:d6:6b:01:2c:e6:3c:48:b1:9e:2f:87:
                    9c:0a:c5:64:1e:c5:38:63:15:40:8e:bd:c4:84:03:
                    28:ff:2c:65:e4:c1:89:13:50:c0:0c:d2:90:da:ea:
                    41:45:43:22:fb:78:db:ab:57:f9:ea:a5:69:62:fc:
                    68:a1:c7:4e:73:c7:86:9c:b9:c8:95:96:20:9f:32:
                    cd:13:cb:a4:9e:9c:ec:4e:6e:99:a8:d8:31:5f:f0:
                    be:30:2f:8d:16:00:0f:b7:ca:3e:5c:cb:a0:01:b6:
                    86:71:34:29:10:00:8e:77:c1:26:16:9d:71:5e:87:
                    f8:5e:be:c5:76:c0:09:c5:77:9c:39:9e:0a:25:11:
                    73:dc:f0:8e:70:4f:b9:8e:ca:d2:0e:86:47:c5:1c:
                    19:0c:83:db:8c:01:30:1d:89:9a:4c:dc:b4:12:50:
                    6e:86:28:43:b9:d4:fa:e6:4a:a1:74:fd:04:2a:0e:
                    89:ca:e5:69:04:f2:91:69:f2:20:73:1c:5f:3d:b4:
                    d4:ff:01:ab:a3:11:7d:fb:50:22:cd:01:98:50:15:
                    92:c3:bb:08:5d:44:c6:dc:37:de:71:99:45:7c:9b:
                    80:af:ff:e8:a5:51:c5:30:f5:50:f3:d2:5d:c9:92:
                    1f:cd:df:dd:f6:55:61:20:00:cc:31:40:14:d2:f1:
                    9b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:03:EA:48:EE:4E:26:0F:40:06:F7:5D:92:6C:A1:1A:02:A0:1A:FC
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230312e34342e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.44.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         60:9b:f7:3a:b2:e4:7a:42:8c:dc:40:94:cf:fa:c1:3a:c4:1d:
         de:7c:81:e6:ca:c4:dc:66:f6:89:d2:bf:fd:50:03:54:27:d1:
         c0:3c:3f:a2:3a:65:e9:6c:5d:30:60:ea:f7:c5:e9:d3:e9:42:
         8e:20:67:70:d8:2d:82:a6:5e:9a:51:11:db:3d:63:89:ef:25:
         c1:db:60:b3:34:d7:bd:f6:25:ee:a6:5e:28:be:f1:55:4b:01:
         96:f5:b8:af:28:fc:13:d6:fe:c3:c4:8c:ed:c1:cf:a6:f3:ec:
         c1:d6:95:ef:58:6e:76:80:bd:54:26:44:da:06:55:08:5b:a7:
         a7:28:18:38:79:a8:28:8e:31:0d:74:75:4d:d3:d9:27:d5:09:
         09:a1:bf:a6:19:dd:7c:58:67:de:24:9b:50:1a:91:cc:93:50:
         97:26:9d:df:55:83:d8:9b:73:f7:1d:53:af:a0:15:09:05:ed:
         3f:64:81:b7:93:ee:ca:10:38:6c:e9:68:42:9e:0c:40:cd:fe:
         60:4b:27:b8:98:0d:bc:d4:b1:50:5e:e8:28:5b:45:9d:d1:82:
         5b:f7:d0:20:b4:5e:4a:72:91:31:d8:c3:6c:97:9f:92:e0:ec:
         f0:c4:69:cb:fa:94:d4:a5:f4:8a:39:c4:98:93:8c:35:26:fe:
         ce:64:58:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org