Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230312e34352e302e302f31362d3136203d3e2034323330.roa
File:                     3230312e34352e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          d4t4wLh+KQnoyGQcrpY5LhnsXlAh/rFr+0wRlQmmSYo=
Subject key identifier:   43:0E:B9:3C:55:67:5F:98:85:AC:76:0A:B5:73:A3:D9:34:63:1C:BF
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       48807E54D268CF719F7F43DC6A2A5F0A978E1382
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230312e34352e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:03 +0000
ROA not before:           Wed 11 Oct 2023 19:55:03 +0000
ROA not after:            Wed 09 Oct 2024 20:00:03 +0000
asID:                     4230
IP address blocks:        201.45.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:80:7e:54:d2:68:cf:71:9f:7f:43:dc:6a:2a:5f:0a:97:8e:13:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:03 2023 GMT
            Not After : Oct  9 20:00:03 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a6:18:e8:b6:03:ca:ab:d2:8f:bd:dd:a3:43:
                    24:f7:0e:e4:71:51:ea:02:3a:8b:99:83:b2:b4:c0:
                    1d:6a:11:bf:5e:d5:92:1b:db:c4:9f:30:51:d1:a5:
                    a2:a9:58:d2:8e:57:1b:51:62:d5:36:cf:fc:98:47:
                    76:4e:2a:d3:45:7e:58:d5:97:33:e2:04:a1:47:ce:
                    1c:83:ca:d0:a8:a0:c8:69:b1:c8:23:40:0f:58:ad:
                    5a:74:17:7b:67:0c:de:c6:f6:8d:aa:ee:94:87:50:
                    16:78:d4:34:9e:35:29:8a:c8:a3:5e:b3:5a:93:f1:
                    5d:98:4b:3c:16:3e:90:98:78:6f:b3:cf:3a:7e:d0:
                    89:d6:e2:7e:c2:66:a4:a4:06:ea:cf:97:90:8b:a5:
                    5a:23:cd:88:38:a2:a7:98:9a:b4:1b:44:37:18:a2:
                    66:98:3c:ac:d2:11:62:62:bf:15:63:b6:5a:33:e2:
                    e6:8a:0c:4a:eb:c2:e7:92:ec:06:8c:72:4b:f8:7d:
                    04:ec:84:82:8b:a2:30:ad:9c:7c:07:1f:8b:10:30:
                    eb:0f:0d:24:cf:db:2b:6f:32:52:b0:a6:45:45:c5:
                    07:4e:d8:6e:54:86:1c:9c:92:67:0b:96:db:9f:59:
                    c7:c9:91:b2:4d:b6:0f:75:8e:b6:d0:58:40:2b:b1:
                    4b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:0E:B9:3C:55:67:5F:98:85:AC:76:0A:B5:73:A3:D9:34:63:1C:BF
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230312e34352e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.45.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         85:7e:e8:3e:49:18:26:15:00:4c:67:8c:bf:4f:50:cb:3c:2e:
         3d:41:23:57:62:8b:69:6b:3a:0f:98:e4:33:ed:ec:14:a9:74:
         ca:d8:f4:12:12:92:18:65:69:d2:90:70:71:91:8e:f7:90:c5:
         a4:e5:45:d8:ca:4f:d8:3c:02:62:eb:5e:fa:c3:07:98:3a:31:
         af:8e:ad:9c:1d:90:80:ba:58:42:e3:00:21:cd:94:b0:26:31:
         b0:85:6b:51:75:bf:c3:c9:f4:04:55:40:a0:a7:b6:11:6b:1e:
         dc:9f:11:fc:65:e9:8c:62:fe:21:da:79:99:92:b7:e5:33:fd:
         9c:08:8c:a4:ea:93:29:fd:67:57:ce:8a:09:4c:d6:b5:4f:f1:
         1b:eb:97:71:f9:67:ab:96:5a:0b:24:c2:c0:45:4c:05:d0:16:
         a3:a5:cf:16:a3:19:7a:8a:46:4e:ea:09:09:ee:24:9b:ba:50:
         a4:19:2b:11:b6:6c:a1:e8:9c:80:21:76:ed:75:e1:40:c5:5c:
         2a:b5:17:2c:95:b7:19:c9:34:50:7b:93:01:f8:54:63:af:a9:
         05:91:55:52:7d:22:bb:11:81:e9:3b:89:a2:ca:7a:24:80:99:
         07:31:2c:da:11:ea:cf:4a:9b:ea:94:76:e8:75:c9:1a:35:72:
         ba:78:c4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org