Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3138372e33302e302e302f31362d3136203d3e2034323330.roa
File:                     3138372e33302e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          Qwqq+Eww/gvSQb9WUTsLgRjYltKL4SXHKUNEIbOdIts=
Subject key identifier:   8E:0D:99:64:A1:B1:57:31:4C:E2:FB:9F:66:8E:1A:21:21:A2:7C:A7
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       6F3530BC92EE4668365901EC20B3E16E5E289AC4
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3138372e33302e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 13 Sep 2023 21:00:00 +0000
ROA not before:           Wed 13 Sep 2023 20:55:00 +0000
ROA not after:            Wed 11 Sep 2024 21:00:00 +0000
asID:                     4230
IP address blocks:        187.30.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:35:30:bc:92:ee:46:68:36:59:01:ec:20:b3:e1:6e:5e:28:9a:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Sep 13 20:55:00 2023 GMT
            Not After : Sep 11 21:00:00 2024 GMT
        Subject: CN=3082010A0282010100CBAB6F357364E79FDEEFA8ECD440619633BCCBC6F4E79F6DA54A4B2AFB66B0F618B8FA706672951BA460E4EEB5FCA069CFCCDA44514F6300A6697021B94103335E1747E1E08B204B31EE25E69868507479E67836B44E8F52D00173D012CB64D2D88FD34D49CE8E50E0B4DCB6AC073229BB2ADBF544E11A76C1B872863A19571C70BF5C3C38901131C2BD5A144E92960C2E4FECFB1D38D5D19E5C7876D59FF5D70F7EFC80984D067508DF9FF0C7FBC5A52888FC5978EF755784BC13938E3A6FF07C70204B87A23E6CB32019877009EE88DD8E733980426C8C1059EED5DA9CF1F28C71D728A2F3936E62E324330039C1ED8F37FCD8A98D7B2B2E99EB466B825B930203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ab:6f:35:73:64:e7:9f:de:ef:a8:ec:d4:40:
                    61:96:33:bc:cb:c6:f4:e7:9f:6d:a5:4a:4b:2a:fb:
                    66:b0:f6:18:b8:fa:70:66:72:95:1b:a4:60:e4:ee:
                    b5:fc:a0:69:cf:cc:da:44:51:4f:63:00:a6:69:70:
                    21:b9:41:03:33:5e:17:47:e1:e0:8b:20:4b:31:ee:
                    25:e6:98:68:50:74:79:e6:78:36:b4:4e:8f:52:d0:
                    01:73:d0:12:cb:64:d2:d8:8f:d3:4d:49:ce:8e:50:
                    e0:b4:dc:b6:ac:07:32:29:bb:2a:db:f5:44:e1:1a:
                    76:c1:b8:72:86:3a:19:57:1c:70:bf:5c:3c:38:90:
                    11:31:c2:bd:5a:14:4e:92:96:0c:2e:4f:ec:fb:1d:
                    38:d5:d1:9e:5c:78:76:d5:9f:f5:d7:0f:7e:fc:80:
                    98:4d:06:75:08:df:9f:f0:c7:fb:c5:a5:28:88:fc:
                    59:78:ef:75:57:84:bc:13:93:8e:3a:6f:f0:7c:70:
                    20:4b:87:a2:3e:6c:b3:20:19:87:70:09:ee:88:dd:
                    8e:73:39:80:42:6c:8c:10:59:ee:d5:da:9c:f1:f2:
                    8c:71:d7:28:a2:f3:93:6e:62:e3:24:33:00:39:c1:
                    ed:8f:37:fc:d8:a9:8d:7b:2b:2e:99:eb:46:6b:82:
                    5b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:0D:99:64:A1:B1:57:31:4C:E2:FB:9F:66:8E:1A:21:21:A2:7C:A7
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3138372e33302e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.30.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2b:08:36:89:35:66:6a:a6:29:57:74:b5:44:1e:f3:92:78:3d:
         69:ea:fe:40:f4:f0:69:5a:2c:79:3e:6c:b6:82:8b:8d:70:9f:
         fe:82:18:67:81:22:a9:26:21:6b:dd:87:1f:f6:cf:7e:ad:b1:
         f3:c9:05:02:70:99:da:f3:4c:7b:b5:5d:21:32:c3:2b:d8:c8:
         56:20:9f:8a:af:96:3f:05:93:ad:e5:9c:db:7b:f5:6a:18:b5:
         52:b4:27:a8:2f:0b:0a:11:5d:56:12:96:82:82:27:fb:0b:e9:
         89:8b:e5:65:00:18:5f:09:84:92:6a:90:a4:96:1e:f0:0c:58:
         ed:6e:74:25:fd:96:54:72:9f:f2:8d:68:2e:a9:c9:92:48:91:
         87:39:73:ef:8c:e1:6a:98:18:ce:bd:a4:35:40:ba:23:f9:f3:
         44:5e:27:26:d2:5d:4f:a5:96:16:99:ad:11:6c:d6:0c:6f:08:
         62:2c:d8:55:e7:62:82:bb:09:6d:32:a5:bf:5f:6c:04:60:41:
         d0:f2:70:cd:49:2b:40:7e:c2:c9:55:b2:f3:6e:af:9d:0a:40:
         ec:dd:07:40:b3:b3:ea:3b:6f:e5:34:73:77:22:7b:49:41:4a:
         b0:e4:32:d5:2b:90:25:17:6f:4d:5d:ea:6c:f9:6f:1b:69:62:
         8d:de:58:0f
-----BEGIN CERTIFICATE-----
MIIHOjCCBiKgAwIBAgIUbzUwvJLuRmg2WQHsILPhbl4omsQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODM5RDI4QkU2NENGRkE2NTFENDhGQzEzMjg0NDEwNkRB
MDI0NDlEMjAeFw0yMzA5MTMyMDU1MDBaFw0yNDA5MTEyMTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0JBQjZGMzU3MzY0RTc5RkRF
RUZBOEVDRDQ0MDYxOTYzM0JDQ0JDNkY0RTc5RjZEQTU0QTRCMkFGQjY2QjBGNjE4
QjhGQTcwNjY3Mjk1MUJBNDYwRTRFRUI1RkNBMDY5Q0ZDQ0RBNDQ1MTRGNjMwMEE2
Njk3MDIxQjk0MTAzMzM1RTE3NDdFMUUwOEIyMDRCMzFFRTI1RTY5ODY4NTA3NDc5
RTY3ODM2QjQ0RThGNTJEMDAxNzNEMDEyQ0I2NEQyRDg4RkQzNEQ0OUNFOEU1MEUw
QjREQ0I2QUMwNzMyMjlCQjJBREJGNTQ0RTExQTc2QzFCODcyODYzQTE5NTcxQzcw
QkY1QzNDMzg5MDExMzFDMkJENUExNDRFOTI5NjBDMkU0RkVDRkIxRDM4RDVEMTlF
NUM3ODc2RDU5RkY1RDcwRjdFRkM4MDk4NEQwNjc1MDhERjlGRjBDN0ZCQzVBNTI4
ODhGQzU5NzhFRjc1NTc4NEJDMTM5MzhFM0E2RkYwN0M3MDIwNEI4N0EyM0U2Q0Iz
MjAxOTg3NzAwOUVFODhERDhFNzMzOTgwNDI2QzhDMTA1OUVFRDVEQTlDRjFGMjhD
NzFENzI4QTJGMzkzNkU2MkUzMjQzMzAwMzlDMUVEOEYzN0ZDRDhBOThEN0IyQjJF
OTlFQjQ2NkI4MjVCOTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAy6tvNXNk55/e76js1EBhljO8y8b0559tpUpLKvtmsPYYuPpwZnKV
G6Rg5O61/KBpz8zaRFFPYwCmaXAhuUEDM14XR+HgiyBLMe4l5phoUHR55ng2tE6P
UtABc9ASy2TS2I/TTUnOjlDgtNy2rAcyKbsq2/VE4Rp2wbhyhjoZVxxwv1w8OJAR
McK9WhROkpYMLk/s+x041dGeXHh21Z/11w9+/ICYTQZ1CN+f8Mf7xaUoiPxZeO91
V4S8E5OOOm/wfHAgS4eiPmyzIBmHcAnuiN2OczmAQmyMEFnu1dqc8fKMcdcoovOT
bmLjJDMAOcHtjzf82KmNeysumetGa4JbkwIDAQABo4ICSDCCAkQwHQYDVR0OBBYE
FI4NmWShsVcxTOL7n2aOGiEhonynMB8GA1UdIwQYMBaAFIOdKL5kz/plHUj8EyhE
EG2gJEnSMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dVUjRKZWR2WlNuYjho
S21NVWdRNjg3YjRNWFhtMzVtU1pETUxRTkhTRnBwLzAvODM5RDI4QkU2NENGRkE2
NTFENDhGQzEzMjg0NDEwNkRBMDI0NDlEMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84MzlEMjhCRTY0Q0ZGQTY1MUQ0OEZDMTMyODQ0MTA2REEwMjQ0
OUQyLmNlcjCBpgYIKwYBBQUHAQsEgZkwgZYwgZMGCCsGAQUFBzALhoGGcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVVI0SmVkdlpTbmI4aEttTVVn
UTY4N2I0TVhYbTM1bVNaRE1MUU5IU0ZwcC8wLzMxMzgzNzJlMzMzMDJlMzAyZTMw
MmYzMTM2MmQzMTM2MjAzZDNlMjAzNDMyMzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDALseMA0GCSqG
SIb3DQEBCwUAA4IBAQArCDaJNWZqpilXdLVEHvOSeD1p6v5A9PBpWix5Pmy2gouN
cJ/+ghhngSKpJiFr3Ycf9s9+rbHzyQUCcJna80x7tV0hMsMr2MhWIJ+Kr5Y/BZOt
5Zzbe/VqGLVStCeoLwsKEV1WEpaCgif7C+mJi+VlABhfCYSSapCklh7wDFjtbnQl
/ZZUcp/yjWguqcmSSJGHOXPvjOFqmBjOvaQ1QLoj+fNEXicm0l1PpZYWma0RbNYM
bwhiLNhV52KCuwltMqW/X2wEYEHQ8nDNSStAfsLJVbLzbq+dCkDs3QdAs7PqO2/l
NHN3IntJQUqw5DLVK5AlF29NXeps+W8baWKN3lgP
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org