Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230312e35372e302e302f31362d3136203d3e2034323330.roa
File:                     3230312e35372e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          4N8VA1iFcQgJeR//J3jCmt8jGJwz2qE+vWXkuPbJUA8=
Subject key identifier:   F4:3A:2B:02:C5:B8:BF:A7:5C:51:3C:A8:F8:5F:A1:CD:EC:8A:28:52
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       362C7538E6F397F812F957F35D47210B1001841B
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230312e35372e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:08 +0000
ROA not before:           Wed 11 Oct 2023 19:55:08 +0000
ROA not after:            Wed 09 Oct 2024 20:00:08 +0000
asID:                     4230
IP address blocks:        201.57.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:2c:75:38:e6:f3:97:f8:12:f9:57:f3:5d:47:21:0b:10:01:84:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:08 2023 GMT
            Not After : Oct  9 20:00:08 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:06:12:b5:4b:cd:ad:15:fe:e8:eb:ac:e9:77:
                    a7:6a:c0:d6:22:cd:6a:73:8d:2e:94:db:85:23:2e:
                    25:19:e4:c3:18:7e:ca:03:88:49:de:11:c6:24:29:
                    40:4c:c1:39:43:67:2f:dd:80:e6:d1:68:24:c0:35:
                    87:7d:63:7b:03:dd:6e:8e:96:82:ed:49:cc:30:74:
                    27:99:89:2e:e0:ae:24:e5:c1:03:fa:58:7e:54:e8:
                    51:79:b5:b6:8e:6a:67:60:f5:cd:7d:ce:e3:c5:b2:
                    35:2e:dc:9e:c7:0e:4b:10:0a:12:d6:c1:22:ad:ec:
                    80:5e:ca:68:ea:53:53:87:d1:d0:f9:87:ba:9f:c2:
                    36:dc:e4:46:72:a8:7f:29:ef:84:60:52:52:4b:e5:
                    2b:6e:8d:22:cf:a2:8b:1c:f5:3b:54:39:3b:55:ce:
                    cc:03:02:54:ac:31:25:d3:2f:ea:98:0a:86:39:cf:
                    d3:33:e7:d7:03:b3:0b:17:e7:0e:e6:1f:27:b3:9f:
                    69:dd:aa:44:86:b3:9c:7a:b4:73:36:25:a4:0f:47:
                    ef:d6:2e:09:91:56:3c:f4:75:a0:eb:d3:ba:7e:9d:
                    a4:0e:bf:37:9f:1d:91:ab:d4:13:39:2f:50:a1:3e:
                    e3:73:90:3b:b9:22:38:58:84:6b:94:64:26:9c:a9:
                    cf:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:3A:2B:02:C5:B8:BF:A7:5C:51:3C:A8:F8:5F:A1:CD:EC:8A:28:52
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230312e35372e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.57.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b9:21:b2:40:28:40:e8:6f:e5:db:9a:cb:42:4f:4d:8d:d2:c7:
         e6:35:78:f8:41:86:5d:41:d3:f9:d0:1a:d6:0f:5f:f8:23:09:
         26:e2:75:16:2d:1c:2d:41:f8:bd:9b:f9:77:5c:ad:f2:ba:43:
         19:81:78:1f:4f:e9:04:44:9d:9c:13:08:a6:10:7e:f9:82:38:
         6a:3b:06:17:3f:4a:33:15:d1:9a:42:db:78:a7:48:cd:84:79:
         94:02:bb:0e:39:aa:7c:a7:c8:e4:55:3b:7c:90:e2:24:f5:6f:
         57:7e:4e:3e:ca:4d:01:3f:99:a3:94:d6:f6:be:d0:49:1e:94:
         6a:21:26:fe:b1:83:0d:48:3e:74:fa:4e:46:57:f7:a2:5a:1d:
         b8:53:d0:29:6d:2f:bf:e0:5e:88:df:59:fa:14:3c:b7:e3:9e:
         06:27:48:bd:58:f9:41:cb:ec:ce:6d:a2:48:68:0b:df:51:9b:
         7e:be:96:de:f7:7b:87:d5:11:a1:68:33:48:f3:c7:d3:1f:77:
         58:33:aa:93:e7:54:9c:86:ae:23:54:56:9a:6d:75:1c:35:78:
         45:a4:2e:f0:20:7d:24:99:f9:2c:e1:19:48:c9:cc:db:04:c9:
         95:90:95:0d:da:0c:48:2c:18:8f:7e:40:ce:33:77:f0:a3:3f:
         01:b4:34:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org