Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3138392e34332e302e302f31362d3136203d3e2034323330.roa
File:                     3138392e34332e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          jxOrNbwTJQ2+kD2ZsmDCv1p+gRGx7e5RD9fws1cCogw=
Subject key identifier:   0F:5E:0E:E1:6E:60:38:78:8C:B2:54:36:2E:C5:FD:F9:9A:51:C5:8A
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       4839F5158BBF24FC33E7D2B569DB411EB8EFF0F6
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3138392e34332e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:05 +0000
ROA not before:           Wed 11 Oct 2023 19:55:05 +0000
ROA not after:            Wed 09 Oct 2024 20:00:05 +0000
asID:                     4230
IP address blocks:        189.43.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:39:f5:15:8b:bf:24:fc:33:e7:d2:b5:69:db:41:1e:b8:ef:f0:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:05 2023 GMT
            Not After : Oct  9 20:00:05 2024 GMT
        Subject: CN=3082010A0282010100CACE831C4F022CDB4D42AB1D09625C6274933D22EEB108F120FE2BB8F1CFCFFC59F8E6EDF38155FE664CDECBB2B7396C0EC0F166786C1245D91B06B244E86D9D7A7782656C52C02253B987C8ED598F7C58F905F950CA3BBF2A5621ED56713A7049F3E193ED3B35B973E0480ADDF05D26CEDAC37FB35DF57891CE406160C4900B02278189DDC73D440C0FFF9FB82AC88893309AF805E977CCF6A0679611A79AE57C05FBCABAF0C309CF64AC2DE5E696E2A6C39628A0A209C26DEEF644EF09F8E59EB662E373FB4BEB0D5B6B27DEE5A5D10CD1013247BF8D9EDF986F48A13AFD87E67DD0597752E3E28D6C496F86944962DB6EDA640A2035303DA77704183360C70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ce:83:1c:4f:02:2c:db:4d:42:ab:1d:09:62:
                    5c:62:74:93:3d:22:ee:b1:08:f1:20:fe:2b:b8:f1:
                    cf:cf:fc:59:f8:e6:ed:f3:81:55:fe:66:4c:de:cb:
                    b2:b7:39:6c:0e:c0:f1:66:78:6c:12:45:d9:1b:06:
                    b2:44:e8:6d:9d:7a:77:82:65:6c:52:c0:22:53:b9:
                    87:c8:ed:59:8f:7c:58:f9:05:f9:50:ca:3b:bf:2a:
                    56:21:ed:56:71:3a:70:49:f3:e1:93:ed:3b:35:b9:
                    73:e0:48:0a:dd:f0:5d:26:ce:da:c3:7f:b3:5d:f5:
                    78:91:ce:40:61:60:c4:90:0b:02:27:81:89:dd:c7:
                    3d:44:0c:0f:ff:9f:b8:2a:c8:88:93:30:9a:f8:05:
                    e9:77:cc:f6:a0:67:96:11:a7:9a:e5:7c:05:fb:ca:
                    ba:f0:c3:09:cf:64:ac:2d:e5:e6:96:e2:a6:c3:96:
                    28:a0:a2:09:c2:6d:ee:f6:44:ef:09:f8:e5:9e:b6:
                    62:e3:73:fb:4b:eb:0d:5b:6b:27:de:e5:a5:d1:0c:
                    d1:01:32:47:bf:8d:9e:df:98:6f:48:a1:3a:fd:87:
                    e6:7d:d0:59:77:52:e3:e2:8d:6c:49:6f:86:94:49:
                    62:db:6e:da:64:0a:20:35:30:3d:a7:77:04:18:33:
                    60:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:5E:0E:E1:6E:60:38:78:8C:B2:54:36:2E:C5:FD:F9:9A:51:C5:8A
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3138392e34332e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.43.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6b:e8:e7:13:cb:fc:ca:d6:57:10:2b:5c:33:02:4b:57:20:99:
         30:72:23:5c:34:fc:0e:68:2e:d5:62:4d:d7:46:7b:3a:27:28:
         ce:28:20:04:fb:e1:23:9c:ac:fc:9e:80:f5:f4:68:39:c3:a3:
         f6:d1:ab:03:18:2e:be:f2:26:5c:a1:ad:bb:20:95:34:f5:5e:
         53:43:19:3a:f8:6a:c0:23:2d:bf:0a:35:02:74:80:9f:65:35:
         1a:40:e9:f3:36:0e:d3:b8:ce:4c:98:ec:93:2f:06:6e:21:5b:
         d3:c4:b0:90:b1:e7:fc:79:c6:71:c6:c3:6e:c4:aa:b9:20:1e:
         20:6f:48:77:46:a8:1e:88:b2:06:87:47:e3:f1:28:a4:2f:72:
         b1:40:9e:2c:a4:4d:7e:d9:b1:ce:68:58:92:9a:52:bc:18:a2:
         6a:2a:2b:29:4d:b0:71:80:03:39:b6:5d:8d:6c:e3:ce:bf:e2:
         c6:c7:2e:ab:21:d9:30:6a:5e:f3:0f:3a:fc:ff:c0:8a:ce:d1:
         85:1f:a8:28:f8:9e:0a:be:88:97:29:5b:df:ce:7e:58:b0:3b:
         81:b4:d4:58:a5:f5:d8:b3:74:7c:85:02:39:64:56:39:c7:8c:
         ad:16:35:26:24:c7:8a:47:c1:23:8e:2b:57:aa:3e:84:71:32:
         1e:ee:8b:35
-----BEGIN CERTIFICATE-----
MIIHOjCCBiKgAwIBAgIUSDn1FYu/JPwz59K1adtBHrjv8PYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODM5RDI4QkU2NENGRkE2NTFENDhGQzEzMjg0NDEwNkRB
MDI0NDlEMjAeFw0yMzEwMTExOTU1MDVaFw0yNDEwMDkyMDAwMDVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0FDRTgzMUM0RjAyMkNEQjRE
NDJBQjFEMDk2MjVDNjI3NDkzM0QyMkVFQjEwOEYxMjBGRTJCQjhGMUNGQ0ZGQzU5
RjhFNkVERjM4MTU1RkU2NjRDREVDQkIyQjczOTZDMEVDMEYxNjY3ODZDMTI0NUQ5
MUIwNkIyNDRFODZEOUQ3QTc3ODI2NTZDNTJDMDIyNTNCOTg3QzhFRDU5OEY3QzU4
RjkwNUY5NTBDQTNCQkYyQTU2MjFFRDU2NzEzQTcwNDlGM0UxOTNFRDNCMzVCOTcz
RTA0ODBBRERGMDVEMjZDRURBQzM3RkIzNURGNTc4OTFDRTQwNjE2MEM0OTAwQjAy
Mjc4MTg5RERDNzNENDQwQzBGRkY5RkI4MkFDODg4OTMzMDlBRjgwNUU5NzdDQ0Y2
QTA2Nzk2MTFBNzlBRTU3QzA1RkJDQUJBRjBDMzA5Q0Y2NEFDMkRFNUU2OTZFMkE2
QzM5NjI4QTBBMjA5QzI2REVFRjY0NEVGMDlGOEU1OUVCNjYyRTM3M0ZCNEJFQjBE
NUI2QjI3REVFNUE1RDEwQ0QxMDEzMjQ3QkY4RDlFREY5ODZGNDhBMTNBRkQ4N0U2
N0REMDU5Nzc1MkUzRTI4RDZDNDk2Rjg2OTQ0OTYyREI2RURBNjQwQTIwMzUzMDNE
QTc3NzA0MTgzMzYwQzcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAys6DHE8CLNtNQqsdCWJcYnSTPSLusQjxIP4ruPHPz/xZ+Obt84FV
/mZM3suytzlsDsDxZnhsEkXZGwayROhtnXp3gmVsUsAiU7mHyO1Zj3xY+QX5UMo7
vypWIe1WcTpwSfPhk+07Nblz4EgK3fBdJs7aw3+zXfV4kc5AYWDEkAsCJ4GJ3cc9
RAwP/5+4KsiIkzCa+AXpd8z2oGeWEaea5XwF+8q68MMJz2SsLeXmluKmw5YooKIJ
wm3u9kTvCfjlnrZi43P7S+sNW2sn3uWl0QzRATJHv42e35hvSKE6/YfmfdBZd1Lj
4o1sSW+GlEli227aZAogNTA9p3cEGDNgxwIDAQABo4ICSDCCAkQwHQYDVR0OBBYE
FA9eDuFuYDh4jLJUNi7F/fmaUcWKMB8GA1UdIwQYMBaAFIOdKL5kz/plHUj8EyhE
EG2gJEnSMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dVUjRKZWR2WlNuYjho
S21NVWdRNjg3YjRNWFhtMzVtU1pETUxRTkhTRnBwLzAvODM5RDI4QkU2NENGRkE2
NTFENDhGQzEzMjg0NDEwNkRBMDI0NDlEMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84MzlEMjhCRTY0Q0ZGQTY1MUQ0OEZDMTMyODQ0MTA2REEwMjQ0
OUQyLmNlcjCBpgYIKwYBBQUHAQsEgZkwgZYwgZMGCCsGAQUFBzALhoGGcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVVI0SmVkdlpTbmI4aEttTVVn
UTY4N2I0TVhYbTM1bVNaRE1MUU5IU0ZwcC8wLzMxMzgzOTJlMzQzMzJlMzAyZTMw
MmYzMTM2MmQzMTM2MjAzZDNlMjAzNDMyMzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAL0rMA0GCSqG
SIb3DQEBCwUAA4IBAQBr6OcTy/zK1lcQK1wzAktXIJkwciNcNPwOaC7VYk3XRns6
JyjOKCAE++EjnKz8noD19Gg5w6P20asDGC6+8iZcoa27IJU09V5TQxk6+GrAIy2/
CjUCdICfZTUaQOnzNg7TuM5MmOyTLwZuIVvTxLCQsef8ecZxxsNuxKq5IB4gb0h3
RqgeiLIGh0fj8SikL3KxQJ4spE1+2bHOaFiSmlK8GKJqKispTbBxgAM5tl2NbOPO
v+LGxy6rIdkwal7zDzr8/8CKztGFH6go+J4KvoiXKVvfzn5YsDuBtNRYpfXYs3R8
hQI5ZFY5x4ytFjUmJMeKR8EjjitXqj6EcTIe7os1
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org