Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3138392e32332e302e302f31362d3136203d3e2034323330.roa
File:                     3138392e32332e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          MYY5vzj3hTocGAV5TS8faa7BDZJl2vImr/9paJam/w8=
Subject key identifier:   A6:B8:6E:E7:59:02:05:E5:01:27:04:D8:5B:9F:A3:DB:AE:3A:74:9C
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       56833CAE8FBFC66B709F9971D561C54BC1FCA9AE
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3138392e32332e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:07 +0000
ROA not before:           Wed 11 Oct 2023 19:55:07 +0000
ROA not after:            Wed 09 Oct 2024 20:00:07 +0000
asID:                     4230
IP address blocks:        189.23.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:83:3c:ae:8f:bf:c6:6b:70:9f:99:71:d5:61:c5:4b:c1:fc:a9:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:07 2023 GMT
            Not After : Oct  9 20:00:07 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c4:2e:64:72:0d:4b:8c:95:9d:6b:dd:2a:a2:
                    11:b3:83:9e:f3:16:1c:2e:ca:d0:66:fd:64:6e:46:
                    81:9b:ce:97:bb:ba:9d:55:0c:8a:43:ba:bd:54:be:
                    44:dc:6a:b0:4a:1c:28:9b:09:7b:17:7a:3e:97:97:
                    cd:52:23:29:20:a5:07:38:bf:58:22:28:ac:18:d3:
                    86:78:0a:e9:cb:e4:06:b6:58:d9:66:4d:18:30:77:
                    3a:36:c9:33:4e:29:77:1a:46:0a:c5:85:cd:7b:21:
                    63:ea:11:8f:5e:10:4b:82:6a:f5:12:21:92:50:1e:
                    dc:3e:62:70:46:de:7e:43:98:21:71:68:e9:c0:26:
                    16:5d:06:e9:ac:17:69:51:b0:b3:6d:56:9f:78:54:
                    b8:47:e6:a3:f0:77:5c:0b:b5:05:fa:82:83:26:9e:
                    05:75:3a:4a:1f:05:1c:06:8b:dd:4f:e2:b9:8c:b3:
                    73:22:9e:81:37:7b:09:18:f4:25:ce:b4:9e:e7:6f:
                    48:57:44:14:b9:ae:7d:bc:e6:e3:94:b2:38:74:cb:
                    a2:c9:f3:e0:6e:90:4b:8a:09:35:be:d2:ca:db:44:
                    b0:4a:fb:85:58:ce:9d:be:9f:33:6d:35:c6:61:0b:
                    ee:b5:7e:42:f7:9a:73:da:f8:2d:32:07:d6:27:dd:
                    23:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B8:6E:E7:59:02:05:E5:01:27:04:D8:5B:9F:A3:DB:AE:3A:74:9C
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3138392e32332e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.23.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         44:f4:53:af:1a:75:61:34:47:54:0c:a8:93:9f:c1:45:bf:56:
         9d:b6:3d:74:69:29:9e:91:96:7c:7b:f3:d6:58:3a:7b:5b:75:
         16:c5:d7:be:75:64:10:fe:a2:c1:66:c5:e8:20:22:6c:c6:73:
         8b:48:96:67:c3:f1:3e:62:c3:3f:2a:dc:ce:12:5e:a3:63:39:
         17:f2:2b:81:56:e7:b9:fb:82:30:4e:21:be:29:6b:4c:0d:1d:
         50:26:98:27:bd:72:54:b1:71:51:cb:4e:34:26:85:80:50:3e:
         f2:cc:be:b2:d1:19:e0:ab:1a:d3:d5:24:f3:d3:1e:1b:fd:40:
         49:01:f9:2a:d5:89:1d:c0:86:4a:5d:49:bb:db:ad:01:1f:66:
         95:6f:01:b7:74:6a:9a:75:da:91:3b:cb:78:46:c7:fc:60:b3:
         59:db:95:a0:37:8d:65:b8:75:ba:41:a4:66:fe:da:f4:f2:3b:
         0d:fe:a5:7e:aa:12:41:c0:50:32:4b:e3:6a:7e:bb:54:b3:4f:
         b8:4c:c5:20:31:15:ca:50:28:1e:61:ff:83:44:a5:69:68:d5:
         f4:54:04:0a:b2:99:22:f6:69:9d:b1:84:2f:40:ca:c3:82:7b:
         4d:fd:75:65:5b:78:a0:16:8e:e0:1b:6b:07:ef:81:a0:33:10:
         b8:e1:70:6c
-----BEGIN CERTIFICATE-----
MIIHOjCCBiKgAwIBAgIUVoM8ro+/xmtwn5lx1WHFS8H8qa4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODM5RDI4QkU2NENGRkE2NTFENDhGQzEzMjg0NDEwNkRB
MDI0NDlEMjAeFw0yMzEwMTExOTU1MDdaFw0yNDEwMDkyMDAwMDdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRUJDNDJFNjQ3MjBENEI4Qzk1
OUQ2QkREMkFBMjExQjM4MzlFRjMxNjFDMkVDQUQwNjZGRDY0NkU0NjgxOUJDRTk3
QkJCQTlENTUwQzhBNDNCQUJENTRCRTQ0REM2QUIwNEExQzI4OUIwOTdCMTc3QTNF
OTc5N0NENTIyMzI5MjBBNTA3MzhCRjU4MjIyOEFDMThEMzg2NzgwQUU5Q0JFNDA2
QjY1OEQ5NjY0RDE4MzA3NzNBMzZDOTMzNEUyOTc3MUE0NjBBQzU4NUNEN0IyMTYz
RUExMThGNUUxMDRCODI2QUY1MTIyMTkyNTAxRURDM0U2MjcwNDZERTdFNDM5ODIx
NzE2OEU5QzAyNjE2NUQwNkU5QUMxNzY5NTFCMEIzNkQ1NjlGNzg1NEI4NDdFNkEz
RjA3NzVDMEJCNTA1RkE4MjgzMjY5RTA1NzUzQTRBMUYwNTFDMDY4QkRENEZFMkI5
OENCMzczMjI5RTgxMzc3QjA5MThGNDI1Q0VCNDlFRTc2RjQ4NTc0NDE0QjlBRTdE
QkNFNkUzOTRCMjM4NzRDQkEyQzlGM0UwNkU5MDRCOEEwOTM1QkVEMkNBREI0NEIw
NEFGQjg1NThDRTlEQkU5RjMzNkQzNUM2NjEwQkVFQjU3RTQyRjc5QTczREFGODJE
MzIwN0Q2MjdERDIzRjEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA68QuZHINS4yVnWvdKqIRs4Oe8xYcLsrQZv1kbkaBm86Xu7qdVQyK
Q7q9VL5E3GqwShwomwl7F3o+l5fNUiMpIKUHOL9YIiisGNOGeArpy+QGtljZZk0Y
MHc6NskzTil3GkYKxYXNeyFj6hGPXhBLgmr1EiGSUB7cPmJwRt5+Q5ghcWjpwCYW
XQbprBdpUbCzbVafeFS4R+aj8HdcC7UF+oKDJp4FdTpKHwUcBovdT+K5jLNzIp6B
N3sJGPQlzrSe529IV0QUua59vObjlLI4dMuiyfPgbpBLigk1vtLK20SwSvuFWM6d
vp8zbTXGYQvutX5C95pz2vgtMgfWJ90j8QIDAQABo4ICSDCCAkQwHQYDVR0OBBYE
FKa4budZAgXlAScE2Fufo9uuOnScMB8GA1UdIwQYMBaAFIOdKL5kz/plHUj8EyhE
EG2gJEnSMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dVUjRKZWR2WlNuYjho
S21NVWdRNjg3YjRNWFhtMzVtU1pETUxRTkhTRnBwLzAvODM5RDI4QkU2NENGRkE2
NTFENDhGQzEzMjg0NDEwNkRBMDI0NDlEMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84MzlEMjhCRTY0Q0ZGQTY1MUQ0OEZDMTMyODQ0MTA2REEwMjQ0
OUQyLmNlcjCBpgYIKwYBBQUHAQsEgZkwgZYwgZMGCCsGAQUFBzALhoGGcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVVI0SmVkdlpTbmI4aEttTVVn
UTY4N2I0TVhYbTM1bVNaRE1MUU5IU0ZwcC8wLzMxMzgzOTJlMzIzMzJlMzAyZTMw
MmYzMTM2MmQzMTM2MjAzZDNlMjAzNDMyMzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAL0XMA0GCSqG
SIb3DQEBCwUAA4IBAQBE9FOvGnVhNEdUDKiTn8FFv1adtj10aSmekZZ8e/PWWDp7
W3UWxde+dWQQ/qLBZsXoICJsxnOLSJZnw/E+YsM/KtzOEl6jYzkX8iuBVue5+4Iw
TiG+KWtMDR1QJpgnvXJUsXFRy040JoWAUD7yzL6y0RngqxrT1STz0x4b/UBJAfkq
1YkdwIZKXUm7260BH2aVbwG3dGqaddqRO8t4Rsf8YLNZ25WgN41luHW6QaRm/tr0
8jsN/qV+qhJBwFAyS+NqfrtUs0+4TMUgMRXKUCgeYf+DRKVpaNX0VAQKspki9mmd
sYQvQMrDgntN/XVlW3igFo7gG2sH74GgMxC44XBs
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org