Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230312e37322e302e302f31362d3136203d3e2034323330.roa
File:                     3230312e37322e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          A3mSBlvwR7L2g4h8DQb8YIdYgLIxzV+WSeobZgWRTDQ=
Subject key identifier:   AA:D8:C1:F6:D8:E8:9B:21:A4:3F:D3:14:35:41:C1:E3:94:E8:A5:89
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       01D3DD20F8DC0BAC00D834724A495917EA7710DA
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230312e37322e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:01 +0000
ROA not before:           Wed 11 Oct 2023 19:55:01 +0000
ROA not after:            Wed 09 Oct 2024 20:00:01 +0000
asID:                     4230
IP address blocks:        201.72.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:d3:dd:20:f8:dc:0b:ac:00:d8:34:72:4a:49:59:17:ea:77:10:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:01 2023 GMT
            Not After : Oct  9 20:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:0d:35:c6:4e:12:b5:cb:c5:1a:fa:02:f6:c1:
                    74:cd:d7:a6:7d:61:23:76:02:82:21:f9:c8:33:84:
                    c6:73:ba:ce:80:60:89:c3:52:6a:bb:83:a4:05:63:
                    ca:8f:2c:f9:6a:6c:aa:af:df:a2:3a:1e:34:d2:cf:
                    68:53:24:79:8f:24:29:73:01:cf:67:f0:90:0d:50:
                    01:28:00:d5:ba:7b:84:1a:c7:c9:11:2b:35:20:d2:
                    f7:34:17:e5:9a:ab:b6:e5:dc:e3:48:7d:5b:a5:45:
                    c8:14:95:e3:7f:e3:8a:8a:52:a9:8d:f6:0c:93:00:
                    20:e0:b9:71:e9:84:5e:78:61:40:7a:a9:36:aa:e1:
                    6c:b3:e1:d1:f0:24:57:bd:0f:cd:47:74:b2:00:6b:
                    2f:35:14:39:ff:17:00:5e:30:f4:a8:6a:0f:40:ba:
                    4f:85:9c:ff:7d:2f:0c:4c:2e:78:bc:49:b2:ee:10:
                    1c:4b:70:52:7b:e7:e2:d8:17:ce:9d:ba:28:83:45:
                    b3:1a:df:1c:7c:b9:14:04:00:50:e5:3f:bf:c1:ad:
                    6f:f3:c0:be:3a:c2:2e:29:9f:9d:a0:b8:00:b1:15:
                    10:ed:77:c8:9e:26:b9:eb:d8:02:ec:17:93:da:f7:
                    e2:9f:6c:06:07:7e:8e:0d:ee:c6:cf:1c:1e:43:c5:
                    3b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:D8:C1:F6:D8:E8:9B:21:A4:3F:D3:14:35:41:C1:E3:94:E8:A5:89
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230312e37322e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.72.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0e:91:fb:fb:9b:66:42:c5:dd:b0:f7:2d:f8:06:ce:da:49:f1:
         b8:62:d7:bf:83:fe:f5:7b:bb:bd:33:64:d2:90:86:ce:28:5d:
         a8:39:d7:8e:e3:ad:5a:07:95:6f:ef:39:b9:fa:b4:29:95:a0:
         4f:66:4e:f4:cc:3e:dd:78:ac:60:d6:ff:38:5b:e7:b8:f3:51:
         21:8e:c6:7e:b3:2a:e2:1e:e5:bf:65:45:39:7e:39:78:a2:a6:
         55:7a:5b:70:94:ab:07:3e:14:f9:0a:3b:f2:81:6a:19:ad:5d:
         f6:6f:c9:02:3a:e6:31:16:03:da:a0:17:f3:a6:fb:eb:09:49:
         3a:84:94:7a:64:9d:97:3b:b2:2b:19:ea:69:12:73:18:a9:38:
         4d:fb:d7:d7:71:77:21:c1:ce:2d:2d:4c:d4:77:0f:67:b6:36:
         62:d2:1c:71:bb:07:96:22:4a:aa:52:5c:be:2d:9a:ea:17:47:
         e6:60:e8:9f:c7:53:36:d9:bf:7d:61:c8:bc:15:fa:0d:23:55:
         ab:56:49:f3:a5:be:96:1e:e1:b8:c1:8d:10:84:6a:81:50:e6:
         9e:ab:aa:d2:3c:25:f2:98:3c:9e:e3:2d:14:cb:1e:ab:e9:1a:
         5d:b7:53:de:25:96:ee:d2:66:e4:78:3d:d8:3a:8d:2f:f9:d3:
         e2:3b:41:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org