Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3138372e32382e302e302f31362d3136203d3e2034323330.roa
File:                     3138372e32382e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          LqiSMu5ztLpcBJuZQO9nCwJKpfUHOSLEz3g6gQzIu4g=
Subject key identifier:   7D:1D:9F:93:B5:FC:37:24:B0:60:65:E3:D5:06:95:BC:FF:D9:FB:C2
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       0F404462DEC9B1026389D0C0AED5C68233ED6484
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3138372e32382e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:04 +0000
ROA not before:           Wed 11 Oct 2023 19:55:04 +0000
ROA not after:            Wed 09 Oct 2024 20:00:04 +0000
asID:                     4230
IP address blocks:        187.28.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:40:44:62:de:c9:b1:02:63:89:d0:c0:ae:d5:c6:82:33:ed:64:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:04 2023 GMT
            Not After : Oct  9 20:00:04 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:35:9d:0c:f3:80:37:5b:64:da:c8:3d:ad:95:
                    2c:a6:41:3d:fd:d2:22:d4:6f:03:fa:74:c4:86:ba:
                    44:2f:01:e9:12:0a:0c:cc:57:ba:cc:eb:d3:e8:56:
                    68:dd:07:11:79:b8:16:3b:16:3a:20:6b:c8:27:2b:
                    ed:7f:98:50:f5:b5:3e:53:68:28:54:55:3d:0c:b1:
                    26:70:06:40:f1:1f:51:6c:b1:b5:b3:3e:05:03:1f:
                    a4:8c:49:48:60:63:ed:e1:a2:10:d2:40:30:04:5a:
                    07:86:66:82:e5:45:d1:3d:08:0d:31:1f:2f:f0:c5:
                    ae:38:6d:e6:17:fe:55:52:98:a9:e2:69:56:3c:db:
                    1e:6d:a3:9c:5e:1e:ad:d7:c6:3e:0b:09:a4:6d:84:
                    f7:1d:50:79:7b:56:9c:0a:b8:37:be:38:7d:3d:d7:
                    aa:eb:5e:bb:e7:16:07:78:81:64:cf:a1:2c:e0:18:
                    5e:2a:61:79:66:98:7a:3a:74:55:7e:4e:e2:ed:04:
                    78:48:cf:d1:11:f4:e0:34:e5:1a:39:1e:0f:4d:9d:
                    f6:97:c2:3a:e3:97:ef:e8:67:da:18:fd:ae:83:a0:
                    c4:d9:90:9a:f0:30:ec:bc:c7:5b:fe:b6:cc:b0:79:
                    1e:77:9f:19:37:f7:bd:d6:8b:29:f8:33:ec:1e:90:
                    8d:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:1D:9F:93:B5:FC:37:24:B0:60:65:E3:D5:06:95:BC:FF:D9:FB:C2
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3138372e32382e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.28.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b2:38:41:72:08:7a:46:ed:3b:3e:ee:9b:dd:57:86:f5:c6:40:
         7b:9c:52:e3:f8:09:a3:fc:1c:a7:fc:1f:01:0f:98:59:68:17:
         41:b7:f2:86:b2:62:09:e9:96:17:33:b5:85:f1:f9:09:cb:1e:
         9a:db:8f:98:b3:71:96:8d:fd:ee:06:13:3d:0b:64:3e:a2:3f:
         4d:6b:18:d8:ce:5e:09:01:39:0c:2d:26:1c:25:ea:ed:11:ed:
         dc:5d:50:70:8c:28:f7:cc:b3:53:cb:2c:5e:f6:ce:f5:b0:f7:
         80:0b:8e:52:c2:16:37:ac:19:67:d2:c6:22:1d:98:3b:90:b2:
         a4:67:70:ce:f7:f8:13:70:54:bd:3d:a8:81:89:ea:90:fb:ab:
         8f:18:f5:00:ae:f2:39:89:f6:78:1c:ef:29:0a:ae:f9:65:0b:
         ce:e3:19:00:5a:3a:b9:5a:bc:0b:a4:1c:c5:80:89:36:75:b5:
         04:a6:c5:88:1f:c1:61:2e:f9:e0:96:ae:ea:25:fe:27:22:02:
         fa:43:66:02:35:99:91:9d:e4:9d:e6:e9:61:cd:cb:bf:29:9c:
         63:84:75:0e:2a:1a:6f:0b:57:06:c1:93:ca:61:bf:bc:b8:45:
         99:25:a1:e8:f4:1e:84:aa:83:ee:e1:33:be:99:8c:20:dd:06:
         7e:d6:81:eb
-----BEGIN CERTIFICATE-----
MIIHOjCCBiKgAwIBAgIUD0BEYt7JsQJjidDArtXGgjPtZIQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODM5RDI4QkU2NENGRkE2NTFENDhGQzEzMjg0NDEwNkRB
MDI0NDlEMjAeFw0yMzEwMTExOTU1MDRaFw0yNDEwMDkyMDAwMDRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjAzNTlEMENGMzgwMzc1QjY0
REFDODNEQUQ5NTJDQTY0MTNERkREMjIyRDQ2RjAzRkE3NEM0ODZCQTQ0MkYwMUU5
MTIwQTBDQ0M1N0JBQ0NFQkQzRTg1NjY4REQwNzExNzlCODE2M0IxNjNBMjA2QkM4
MjcyQkVEN0Y5ODUwRjVCNTNFNTM2ODI4NTQ1NTNEMENCMTI2NzAwNjQwRjExRjUx
NkNCMUI1QjMzRTA1MDMxRkE0OEM0OTQ4NjA2M0VERTFBMjEwRDI0MDMwMDQ1QTA3
ODY2NjgyRTU0NUQxM0QwODBEMzExRjJGRjBDNUFFMzg2REU2MTdGRTU1NTI5OEE5
RTI2OTU2M0NEQjFFNkRBMzlDNUUxRUFERDdDNjNFMEIwOUE0NkQ4NEY3MUQ1MDc5
N0I1NjlDMEFCODM3QkUzODdEM0REN0FBRUI1RUJCRTcxNjA3Nzg4MTY0Q0ZBMTJD
RTAxODVFMkE2MTc5NjY5ODdBM0E3NDU1N0U0RUUyRUQwNDc4NDhDRkQxMTFGNEUw
MzRFNTFBMzkxRTBGNEQ5REY2OTdDMjNBRTM5N0VGRTg2N0RBMThGREFFODNBMEM0
RDk5MDlBRjAzMEVDQkNDNzVCRkVCNkNDQjA3OTFFNzc5RjE5MzdGN0JERDY4QjI5
RjgzM0VDMUU5MDhEMjcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAsDWdDPOAN1tk2sg9rZUspkE9/dIi1G8D+nTEhrpELwHpEgoMzFe6
zOvT6FZo3QcRebgWOxY6IGvIJyvtf5hQ9bU+U2goVFU9DLEmcAZA8R9RbLG1sz4F
Ax+kjElIYGPt4aIQ0kAwBFoHhmaC5UXRPQgNMR8v8MWuOG3mF/5VUpip4mlWPNse
baOcXh6t18Y+CwmkbYT3HVB5e1acCrg3vjh9Pdeq61675xYHeIFkz6Es4BheKmF5
Zph6OnRVfk7i7QR4SM/REfTgNOUaOR4PTZ32l8I645fv6GfaGP2ug6DE2ZCa8DDs
vMdb/rbMsHked58ZN/e91osp+DPsHpCNJwIDAQABo4ICSDCCAkQwHQYDVR0OBBYE
FH0dn5O1/DcksGBl49UGlbz/2fvCMB8GA1UdIwQYMBaAFIOdKL5kz/plHUj8EyhE
EG2gJEnSMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dVUjRKZWR2WlNuYjho
S21NVWdRNjg3YjRNWFhtMzVtU1pETUxRTkhTRnBwLzAvODM5RDI4QkU2NENGRkE2
NTFENDhGQzEzMjg0NDEwNkRBMDI0NDlEMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84MzlEMjhCRTY0Q0ZGQTY1MUQ0OEZDMTMyODQ0MTA2REEwMjQ0
OUQyLmNlcjCBpgYIKwYBBQUHAQsEgZkwgZYwgZMGCCsGAQUFBzALhoGGcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVVI0SmVkdlpTbmI4aEttTVVn
UTY4N2I0TVhYbTM1bVNaRE1MUU5IU0ZwcC8wLzMxMzgzNzJlMzIzODJlMzAyZTMw
MmYzMTM2MmQzMTM2MjAzZDNlMjAzNDMyMzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDALscMA0GCSqG
SIb3DQEBCwUAA4IBAQCyOEFyCHpG7Ts+7pvdV4b1xkB7nFLj+Amj/Byn/B8BD5hZ
aBdBt/KGsmIJ6ZYXM7WF8fkJyx6a24+Ys3GWjf3uBhM9C2Q+oj9NaxjYzl4JATkM
LSYcJertEe3cXVBwjCj3zLNTyyxe9s71sPeAC45SwhY3rBln0sYiHZg7kLKkZ3DO
9/gTcFS9PaiBieqQ+6uPGPUArvI5ifZ4HO8pCq75ZQvO4xkAWjq5WrwLpBzFgIk2
dbUEpsWIH8FhLvnglq7qJf4nIgL6Q2YCNZmRneSd5ulhzcu/KZxjhHUOKhpvC1cG
wZPKYb+8uEWZJaHo9B6EqoPu4TO+mYwg3QZ+1oHr
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org