Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230312e36342e302e302f31362d3136203d3e2034323330.roa
File:                     3230312e36342e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          ujCE65a2hPrIA2/YKIxWr4pPGSZnX7Gt67XHGhzfuRw=
Subject key identifier:   BB:CB:65:5E:74:E6:18:F4:2B:C2:D6:7A:9F:AC:0C:8D:4B:D8:C0:2A
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       462DCA557BD2AC054069B17D3EEE5B79C10DDD7D
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230312e36342e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 19:00:00 +0000
ROA not before:           Wed 11 Oct 2023 18:55:00 +0000
ROA not after:            Wed 09 Oct 2024 19:00:00 +0000
asID:                     4230
IP address blocks:        201.64.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:2d:ca:55:7b:d2:ac:05:40:69:b1:7d:3e:ee:5b:79:c1:0d:dd:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 18:55:00 2023 GMT
            Not After : Oct  9 19:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cd:ee:3a:68:44:32:d1:e7:1a:ee:2a:13:b8:
                    1b:b4:f6:21:f9:2a:90:1a:27:f7:15:2c:97:61:45:
                    6b:88:20:2b:ef:48:e2:67:4f:44:4b:38:31:97:cc:
                    16:a5:26:1a:34:27:82:42:c7:07:31:4a:13:0e:92:
                    35:0e:c3:d2:bc:99:04:4d:48:e7:4e:4a:d8:f6:80:
                    50:52:5a:2a:8b:23:f3:a2:9e:cf:08:0f:14:91:a4:
                    6c:f6:80:b4:2d:6e:b6:2d:67:58:08:05:3f:2d:83:
                    f3:ac:9c:a1:31:c6:64:47:88:7e:93:bf:9e:13:64:
                    1f:60:0e:d1:0e:5b:94:59:28:f4:bf:26:89:2f:20:
                    18:5d:6d:c9:d8:1c:ad:1b:b7:c1:11:c4:b4:ff:2d:
                    f8:bf:de:cf:78:69:c9:c3:80:4f:ff:f0:53:71:c8:
                    33:c5:23:10:48:da:98:1e:ca:5d:05:4d:e3:22:89:
                    64:c0:09:46:24:8d:9a:ec:66:cd:c7:92:d9:49:22:
                    d2:52:84:e6:0d:2f:a8:0e:08:09:5d:b2:08:59:6e:
                    74:9a:7d:90:89:36:90:37:be:f4:15:77:5c:93:ec:
                    c8:e7:da:c5:d0:cf:d4:0d:d4:54:97:f2:b2:ee:4d:
                    e5:46:23:e9:6b:50:2a:21:62:49:95:e8:dd:e3:d4:
                    3b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:CB:65:5E:74:E6:18:F4:2B:C2:D6:7A:9F:AC:0C:8D:4B:D8:C0:2A
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230312e36342e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.64.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2a:d0:62:70:23:49:0e:05:9d:36:d4:ae:ea:3c:01:cb:72:0b:
         6a:59:91:f2:f6:81:bb:08:da:bc:1f:05:c3:33:1f:1b:4e:b4:
         1e:3e:f1:ce:46:cf:a6:e0:9b:6a:6b:a7:5b:d1:37:b1:8d:7f:
         5e:75:5e:57:c3:00:5f:26:24:70:51:9a:17:f9:86:0e:f2:8e:
         93:77:5d:cc:6f:d5:2a:f9:60:53:00:ff:bd:98:4d:93:82:ca:
         0e:78:3f:51:66:70:79:32:10:71:c7:2f:59:11:58:73:72:ed:
         3e:9a:ab:58:71:51:a8:a1:8c:75:e7:57:a6:5d:e3:bb:55:af:
         f4:2a:d0:2f:1f:2a:47:f5:f2:d2:d1:79:87:5e:d1:e0:a9:e4:
         9a:92:f8:25:13:69:22:b8:13:3f:6a:06:f2:56:0d:e8:94:ed:
         a6:ba:0f:44:59:98:5d:04:3f:ce:c3:bb:0a:27:fc:f7:28:66:
         43:ad:49:09:9d:b3:fa:86:f7:19:20:2d:d3:fa:71:8f:4c:7e:
         2e:c5:8b:2b:b9:af:6a:17:74:48:76:e7:7e:41:74:b4:4b:fe:
         44:d1:3a:34:3d:a1:e5:b0:2f:55:1d:3d:ac:98:3f:ad:93:32:
         68:3e:09:fa:92:ac:d1:11:cb:46:ee:b2:ea:19:5c:f3:a5:c5:
         18:77:09:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org