Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3137392e3233372e31362e302f32312d3231203d3e2034323330.roa
File:                     3137392e3233372e31362e302f32312d3231203d3e2034323330.roa (raw, json)
Hash identifier:          V0/umKyRySh85xD+n59ES6kx6rZx64mgq3p47L7iZXA=
Subject key identifier:   54:3F:2F:76:47:9A:CC:46:D9:3C:65:AC:AD:31:E0:0D:3E:5D:29:30
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       5CE3EB4E81B96F718B4BB196FA0B2E6338C16A1D
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3137392e3233372e31362e302f32312d3231203d3e2034323330.roa
Signing time:             Tue 20 Feb 2024 19:00:00 +0000
ROA not before:           Tue 20 Feb 2024 18:55:00 +0000
ROA not after:            Tue 18 Feb 2025 19:00:00 +0000
asID:                     4230
IP address blocks:        179.237.16.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:e3:eb:4e:81:b9:6f:71:8b:4b:b1:96:fa:0b:2e:63:38:c1:6a:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Feb 20 18:55:00 2024 GMT
            Not After : Feb 18 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:55:58:4a:bd:f4:03:2f:69:d3:01:07:7b:37:
                    34:ae:0e:09:e1:31:16:a8:d9:e1:b7:52:54:6b:3b:
                    7f:c1:b4:15:37:db:07:bf:7b:eb:26:39:d3:62:d7:
                    ed:6d:d2:c6:01:0f:62:e8:4f:8c:66:a5:a1:0c:31:
                    dd:a4:22:09:08:dd:76:e5:ad:6c:69:47:b5:39:bd:
                    d3:b0:c0:fc:20:7e:58:54:a7:18:19:90:87:e3:de:
                    a7:80:be:2b:7c:19:9a:62:5d:be:ea:82:23:7f:af:
                    7f:e7:7e:3a:ca:12:01:b1:1a:7c:64:de:5f:98:b1:
                    67:08:2b:9d:e5:18:f8:bf:5c:c2:a5:80:18:2c:45:
                    8c:c0:f2:32:fa:cc:28:25:f3:7f:0c:5d:84:2c:6e:
                    34:15:46:07:e8:d4:96:ae:8f:19:4c:4a:65:56:c3:
                    91:58:45:c6:35:2f:55:46:57:5c:32:8c:22:44:ee:
                    12:54:fa:48:7c:58:f1:f8:d9:84:1b:ce:20:bb:b4:
                    44:39:17:77:83:25:f6:6f:b2:0d:5e:5b:f8:80:37:
                    50:df:56:d2:04:99:e1:cd:51:c0:8d:89:1c:e2:51:
                    52:d8:c1:93:87:3e:6c:16:8d:06:ea:99:ef:a8:9e:
                    0e:1a:86:11:85:1a:7f:24:a6:fd:a2:72:70:4b:1e:
                    9f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:3F:2F:76:47:9A:CC:46:D9:3C:65:AC:AD:31:E0:0D:3E:5D:29:30
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3137392e3233372e31362e302f32312d3231203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.237.16.0/21

    Signature Algorithm: sha256WithRSAEncryption
         bd:62:89:5f:18:8a:82:cf:f4:dc:2f:73:3a:97:5e:09:aa:bb:
         fe:6d:96:4b:50:b5:2d:77:3b:47:0e:30:38:f5:5b:47:cc:ca:
         3f:83:b0:d6:17:53:2c:1d:02:68:9f:4d:89:ca:0b:53:d4:d5:
         ab:9d:ac:9a:0c:70:33:23:17:7f:a1:2d:64:cd:68:8c:96:91:
         a0:0d:98:25:7f:5f:04:e5:94:b7:7e:9c:45:52:79:7a:99:f7:
         e0:f1:3c:54:78:64:cb:61:fa:a2:f5:c7:73:fb:2a:b6:ad:91:
         19:41:c2:2f:28:98:ef:a1:b0:29:67:ef:3b:ef:61:6e:ff:80:
         72:d3:da:26:7a:87:9e:bc:72:4a:10:80:bc:4b:01:3c:bb:47:
         a7:a9:4e:48:fa:30:da:79:53:ab:96:81:a4:94:8c:a3:a7:5d:
         cf:65:9f:39:b4:ff:f6:6a:a0:47:8b:dc:70:6a:17:8b:41:f4:
         87:19:81:65:e1:7a:0a:56:87:f7:e4:76:e4:84:7a:90:7a:6c:
         bf:8b:1b:50:bf:c9:04:fa:e0:f3:34:f0:5f:99:1c:21:f9:0c:
         b5:70:81:e4:33:01:f1:e9:b1:49:3e:30:9a:eb:83:0e:94:78:
         60:90:89:7b:23:ef:a2:da:ca:10:9f:9f:45:30:3f:fb:ab:fb:
         98:2b:c8:07
-----BEGIN CERTIFICATE-----
MIIHPzCCBiegAwIBAgIUXOPrToG5b3GLS7GW+gsuYzjBah0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODM5RDI4QkU2NENGRkE2NTFENDhGQzEzMjg0NDEwNkRB
MDI0NDlEMjAeFw0yNDAyMjAxODU1MDBaFw0yNTAyMTgxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkI1NTU4NEFCREY0MDMyRjY5
RDMwMTA3N0IzNzM0QUUwRTA5RTEzMTE2QThEOUUxQjc1MjU0NkIzQjdGQzFCNDE1
MzdEQjA3QkY3QkVCMjYzOUQzNjJEN0VENkREMkM2MDEwRjYyRTg0RjhDNjZBNUEx
MEMzMUREQTQyMjA5MDhERDc2RTVBRDZDNjk0N0I1MzlCREQzQjBDMEZDMjA3RTU4
NTRBNzE4MTk5MDg3RTNERUE3ODBCRTJCN0MxOTlBNjI1REJFRUE4MjIzN0ZBRjdG
RTc3RTNBQ0ExMjAxQjExQTdDNjRERTVGOThCMTY3MDgyQjlERTUxOEY4QkY1Q0My
QTU4MDE4MkM0NThDQzBGMjMyRkFDQzI4MjVGMzdGMEM1RDg0MkM2RTM0MTU0NjA3
RThENDk2QUU4RjE5NEM0QTY1NTZDMzkxNTg0NUM2MzUyRjU1NDY1NzVDMzI4QzIy
NDRFRTEyNTRGQTQ4N0M1OEYxRjhEOTg0MUJDRTIwQkJCNDQ0MzkxNzc3ODMyNUY2
NkZCMjBENUU1QkY4ODAzNzUwREY1NkQyMDQ5OUUxQ0Q1MUMwOEQ4OTFDRTI1MTUy
RDhDMTkzODczRTZDMTY4RDA2RUE5OUVGQTg5RTBFMUE4NjExODUxQTdGMjRBNkZE
QTI3MjcwNEIxRTlGNkYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAu1VYSr30Ay9p0wEHezc0rg4J4TEWqNnht1JUazt/wbQVN9sHv3vr
JjnTYtftbdLGAQ9i6E+MZqWhDDHdpCIJCN125a1saUe1Ob3TsMD8IH5YVKcYGZCH
496ngL4rfBmaYl2+6oIjf69/5346yhIBsRp8ZN5fmLFnCCud5Rj4v1zCpYAYLEWM
wPIy+swoJfN/DF2ELG40FUYH6NSWro8ZTEplVsORWEXGNS9VRldcMowiRO4SVPpI
fFjx+NmEG84gu7REORd3gyX2b7INXlv4gDdQ31bSBJnhzVHAjYkc4lFS2MGThz5s
Fo0G6pnvqJ4OGoYRhRp/JKb9onJwSx6fbwIDAQABo4ICTTCCAkkwHQYDVR0OBBYE
FFQ/L3ZHmsxG2TxlrK0x4A0+XSkwMB8GA1UdIwQYMBaAFIOdKL5kz/plHUj8EyhE
EG2gJEnSMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dVUjRKZWR2WlNuYjho
S21NVWdRNjg3YjRNWFhtMzVtU1pETUxRTkhTRnBwLzAvODM5RDI4QkU2NENGRkE2
NTFENDhGQzEzMjg0NDEwNkRBMDI0NDlEMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84MzlEMjhCRTY0Q0ZGQTY1MUQ0OEZDMTMyODQ0MTA2REEwMjQ0
OUQyLmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVVI0SmVkdlpTbmI4aEttTVVn
UTY4N2I0TVhYbTM1bVNaRE1MUU5IU0ZwcC8wLzMxMzczOTJlMzIzMzM3MmUzMTM2
MmUzMDJmMzIzMTJkMzIzMTIwM2QzZTIwMzQzMjMzMzAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAOz7RAw
DQYJKoZIhvcNAQELBQADggEBAL1iiV8YioLP9NwvczqXXgmqu/5tlktQtS13O0cO
MDj1W0fMyj+DsNYXUywdAmifTYnKC1PU1audrJoMcDMjF3+hLWTNaIyWkaANmCV/
XwTllLd+nEVSeXqZ9+DxPFR4ZMth+qL1x3P7KratkRlBwi8omO+hsCln7zvvYW7/
gHLT2iZ6h568ckoQgLxLATy7R6epTkj6MNp5U6uWgaSUjKOnXc9lnzm0//ZqoEeL
3HBqF4tB9IcZgWXhegpWh/fkduSEepB6bL+LG1C/yQT64PM08F+ZHCH5DLVwgeQz
AfHpsUk+MJrrgw6UeGCQiXsj76LayhCfn0UwP/ur+5gryAc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org