Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230312e36352e302e302f31362d3136203d3e2034323330.roa
File:                     3230312e36352e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          X/yL4THq86PmDJveqfq6Q0I9t6JAzGCwxHh/Iz3YmpY=
Subject key identifier:   53:A4:00:AF:E4:56:06:86:B6:85:C1:C8:38:3F:A8:F8:67:35:C2:2C
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       60F747685518BA0B80EC3ABE2D5CAC5726102654
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230312e36352e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:02 +0000
ROA not before:           Wed 11 Oct 2023 19:55:02 +0000
ROA not after:            Wed 09 Oct 2024 20:00:02 +0000
asID:                     4230
IP address blocks:        201.65.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:f7:47:68:55:18:ba:0b:80:ec:3a:be:2d:5c:ac:57:26:10:26:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:02 2023 GMT
            Not After : Oct  9 20:00:02 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:05:ed:c4:77:d6:47:ce:35:3e:b5:d8:d7:12:
                    92:ce:da:7c:bb:c3:ca:98:8f:5b:fe:d7:eb:84:38:
                    8b:92:96:62:26:5e:fe:a2:f4:a5:05:e3:46:93:ff:
                    e7:79:05:5c:04:e0:bf:2c:a0:6a:af:d4:df:61:5b:
                    61:96:c9:6d:32:84:67:b8:f9:ae:e1:21:b4:e4:16:
                    23:84:8a:cf:42:5a:1b:11:72:5e:bb:a0:ff:35:b3:
                    42:a3:c8:33:95:96:d2:4b:00:6b:bd:7a:90:f9:ab:
                    23:fb:31:8a:fb:6e:56:e6:ce:82:74:96:57:ca:ef:
                    52:aa:37:91:5d:be:09:18:3b:5d:fc:02:e6:39:67:
                    29:52:47:25:98:bf:e4:25:3a:58:03:97:1d:f4:20:
                    a1:67:1c:73:63:d5:69:92:12:67:e1:0d:ef:4c:bb:
                    bc:df:91:65:e7:9e:c7:85:38:ba:28:0a:24:3c:0f:
                    a3:f1:94:ba:fa:59:1b:23:ef:82:82:1e:f3:37:40:
                    09:22:17:d4:fa:d7:68:77:63:92:c6:4b:e7:76:1a:
                    6d:1b:82:9a:0b:5c:f9:03:82:21:38:59:59:dc:73:
                    0a:97:15:b4:5c:29:30:4d:76:94:d2:53:16:28:c3:
                    bb:d0:42:b1:f6:02:8e:a8:4e:15:16:5b:c1:40:91:
                    63:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:A4:00:AF:E4:56:06:86:B6:85:C1:C8:38:3F:A8:F8:67:35:C2:2C
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230312e36352e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.65.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         46:51:6f:16:50:4a:25:f1:6d:6f:55:3a:6f:46:b4:6c:ea:b1:
         f9:3c:72:4e:ea:ed:a8:b2:d3:69:68:76:4f:86:19:3d:f4:45:
         8b:9d:ce:b4:5d:8f:b5:2d:56:51:1c:0d:01:c8:11:de:70:39:
         4f:a5:26:ed:f3:88:b2:93:94:a6:26:d1:c5:72:f7:d9:38:55:
         5e:3f:8d:8b:0e:2a:59:c0:09:c6:16:6b:64:10:e3:f3:6d:f6:
         80:21:bb:f3:9c:ca:75:57:4c:b7:64:85:c7:05:ed:e2:a7:65:
         a5:ac:17:06:40:15:71:d4:1b:33:77:d6:70:17:40:d8:4b:db:
         f9:4f:ef:b7:4c:62:90:19:56:ae:cd:eb:43:d9:b7:04:d0:e3:
         e7:0c:b9:4c:81:71:77:c5:de:ee:c4:2b:71:0d:a0:42:38:fc:
         59:61:4e:e3:60:db:ec:c2:5a:cf:b4:c0:9a:46:f0:38:27:ad:
         33:54:0e:d5:7d:46:78:f2:67:ba:67:94:15:2c:22:15:8c:ed:
         84:88:a2:48:9f:9d:43:fd:cd:e5:b3:88:c4:28:8f:f5:6f:97:
         ef:12:41:15:79:93:8d:4c:2d:da:e9:d6:5f:b1:5a:60:7e:ad:
         fb:35:b9:79:4a:89:1f:16:40:43:57:43:e1:88:fb:5a:fe:b5:
         f7:b3:8d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org