Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230312e39302e302e302f31362d3136203d3e2034323330.roa
File:                     3230312e39302e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          1lvWzUZxknyCaaLGrdJ5WvbSeHVDtEjqszVFnzVOkVg=
Subject key identifier:   DB:F8:6F:4A:35:70:B0:8D:3A:05:39:A7:26:65:92:27:E8:9C:77:F0
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       1D15B29BA2A0E16E018444AF359EC843FBD227EA
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230312e39302e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:00 +0000
ROA not before:           Wed 11 Oct 2023 19:55:00 +0000
ROA not after:            Wed 09 Oct 2024 20:00:00 +0000
asID:                     4230
IP address blocks:        201.90.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:15:b2:9b:a2:a0:e1:6e:01:84:44:af:35:9e:c8:43:fb:d2:27:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:00 2023 GMT
            Not After : Oct  9 20:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f4:c5:cb:da:9d:07:81:69:7b:bc:39:12:99:
                    13:de:78:d9:f2:48:50:84:70:94:99:5c:be:e7:90:
                    c6:fc:da:2a:d1:77:41:ce:fd:16:b6:0e:ed:17:a4:
                    70:ce:bb:61:a2:f8:13:18:35:57:22:61:84:28:83:
                    2c:65:0f:b7:04:e8:f5:82:ad:94:4c:39:7e:ba:94:
                    2b:06:33:7d:5f:a6:ad:42:c4:3c:ee:2b:18:92:e3:
                    91:34:83:3a:d2:aa:d6:b5:2d:83:73:31:e0:7c:f9:
                    c6:15:0d:fe:59:6f:b7:d6:52:82:bb:3e:72:05:91:
                    63:84:96:54:65:cb:2d:d9:12:97:48:b0:ea:ba:7e:
                    1e:d2:46:08:97:9c:0a:75:96:30:15:0e:f0:45:40:
                    ee:34:0d:89:bf:87:7e:50:e0:9f:c0:46:9d:62:3e:
                    4b:14:61:60:3e:60:5d:ea:47:60:ad:16:a9:f2:5a:
                    5b:62:59:a4:3c:be:3d:55:ce:56:45:2f:65:97:9d:
                    6a:e9:1b:37:8b:87:d6:aa:9c:05:14:e8:a3:ef:33:
                    24:e0:49:70:99:5f:d1:d2:69:51:46:e2:59:bb:b8:
                    75:eb:23:28:19:9d:69:68:2e:7c:c8:ca:6f:9d:90:
                    85:01:b7:fd:bc:a7:e8:cb:5c:e3:1a:22:39:e4:66:
                    b1:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F8:6F:4A:35:70:B0:8D:3A:05:39:A7:26:65:92:27:E8:9C:77:F0
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230312e39302e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.90.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         12:dc:e8:48:03:ac:5b:2b:26:3b:a9:7e:56:fe:cd:3e:ae:34:
         5c:0f:9e:87:66:bf:7f:a1:94:51:2a:28:1d:84:55:fb:78:c0:
         de:c6:da:c0:50:83:a2:f1:b9:74:b9:b5:a9:1a:09:ec:5b:80:
         c9:2f:f0:33:73:a1:5a:0f:52:ca:f2:c8:74:cc:44:1b:44:dd:
         e4:6e:85:91:86:a7:75:ef:8d:1b:2e:87:10:48:b1:72:fc:87:
         ee:e3:2f:b2:6d:7d:9d:14:00:b3:0d:55:c8:b1:2c:5b:d9:f8:
         28:ba:0d:a0:6b:8f:6b:1a:9b:11:79:38:f1:3b:f1:ab:2e:7c:
         b6:5c:ee:00:43:3a:59:ff:97:87:7d:a2:dc:c1:21:17:03:19:
         c6:b1:a0:a8:ec:17:25:81:4c:a6:98:99:1a:07:32:ff:86:54:
         1e:4c:ce:04:4a:d2:82:fb:15:77:9a:fc:87:be:0a:b2:01:6b:
         f3:4f:5d:b9:98:9e:e6:67:df:e4:21:0f:15:c0:11:a0:1c:6e:
         c1:fa:db:f4:db:f4:f1:0c:f8:ca:be:aa:6d:60:71:4c:68:c5:
         68:9c:cc:d7:eb:32:c1:a9:90:07:52:70:7c:bd:23:63:dc:9d:
         f3:a4:84:3c:60:a9:a6:02:fb:1e:38:73:34:a9:90:44:25:e4:
         fc:00:76:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org