Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3139312e33382e302e302f31352d3135203d3e2034323330.roa
File:                     3139312e33382e302e302f31352d3135203d3e2034323330.roa (raw, json)
Hash identifier:          OYzODdSx0bfFH1N9rdZW9B+fhejTIIy4oJSeoUeXAeI=
Subject key identifier:   24:A3:B7:89:71:CE:4B:C6:93:56:BC:CE:15:36:8F:43:CD:61:9C:EE
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       0B1077540C16EA85D4D0837260BF1B033E64F424
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3139312e33382e302e302f31352d3135203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:06 +0000
ROA not before:           Wed 11 Oct 2023 19:55:06 +0000
ROA not after:            Wed 09 Oct 2024 20:00:06 +0000
asID:                     4230
IP address blocks:        191.38.0.0/15 maxlen: 15

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:10:77:54:0c:16:ea:85:d4:d0:83:72:60:bf:1b:03:3e:64:f4:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:06 2023 GMT
            Not After : Oct  9 20:00:06 2024 GMT
        Subject: CN=3082010A0282010100CC3B8685610DABE7569B46845B785FD4C65B81946204EB27E79B7F5403853181DCF936027DEA9D9F3AC12B7BA7C2999B71D7C2B69E27539876045E03A1F104AD2A1B958AA3CF6A01AB3CCFF3481E7D26888542A41F8104A0CC5363859E0090B3AAFDFAA47192632C7B0E88FD19ACF3D05DB82AA09D5BA6216EBA39AAB495B54C5DA2DD60745378D44CC0C0505128C525FB68876ED5D5A482864EB815639EC7E4A3E28F926CE1A5FF50B925C0C7E808FD00F8F09CEB556CE99D52BB69D680EA29C1A7A22F5B5A625BCBE0DB2295C47A04EFF5384316BA323106B0C695EE35DD563A3E854BFCF51D6EAE6B7CD2944DA3B9EC8644616F3EBE6C8495E7F95EF59B210203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3b:86:85:61:0d:ab:e7:56:9b:46:84:5b:78:
                    5f:d4:c6:5b:81:94:62:04:eb:27:e7:9b:7f:54:03:
                    85:31:81:dc:f9:36:02:7d:ea:9d:9f:3a:c1:2b:7b:
                    a7:c2:99:9b:71:d7:c2:b6:9e:27:53:98:76:04:5e:
                    03:a1:f1:04:ad:2a:1b:95:8a:a3:cf:6a:01:ab:3c:
                    cf:f3:48:1e:7d:26:88:85:42:a4:1f:81:04:a0:cc:
                    53:63:85:9e:00:90:b3:aa:fd:fa:a4:71:92:63:2c:
                    7b:0e:88:fd:19:ac:f3:d0:5d:b8:2a:a0:9d:5b:a6:
                    21:6e:ba:39:aa:b4:95:b5:4c:5d:a2:dd:60:74:53:
                    78:d4:4c:c0:c0:50:51:28:c5:25:fb:68:87:6e:d5:
                    d5:a4:82:86:4e:b8:15:63:9e:c7:e4:a3:e2:8f:92:
                    6c:e1:a5:ff:50:b9:25:c0:c7:e8:08:fd:00:f8:f0:
                    9c:eb:55:6c:e9:9d:52:bb:69:d6:80:ea:29:c1:a7:
                    a2:2f:5b:5a:62:5b:cb:e0:db:22:95:c4:7a:04:ef:
                    f5:38:43:16:ba:32:31:06:b0:c6:95:ee:35:dd:56:
                    3a:3e:85:4b:fc:f5:1d:6e:ae:6b:7c:d2:94:4d:a3:
                    b9:ec:86:44:61:6f:3e:be:6c:84:95:e7:f9:5e:f5:
                    9b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A3:B7:89:71:CE:4B:C6:93:56:BC:CE:15:36:8F:43:CD:61:9C:EE
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3139312e33382e302e302f31352d3135203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.38.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         76:1e:53:ec:1c:71:b5:db:2f:5c:a0:af:b0:24:80:61:af:b1:
         40:c1:c0:8c:7a:da:ba:77:88:c2:ae:ef:c2:cd:7d:bc:74:59:
         c9:9c:96:2c:2c:aa:bd:db:04:23:a6:7e:5a:80:d6:b5:ab:20:
         f8:d0:8d:f4:5c:01:f7:8d:a9:3d:ab:dd:1d:8a:18:a9:91:d1:
         49:85:1a:35:7e:76:77:08:78:d7:f5:51:ea:0d:1f:83:d0:77:
         ce:68:03:a2:21:3c:c1:8c:61:b4:b0:3f:3f:a1:97:e8:c9:0d:
         e5:e9:21:56:f7:28:c8:c0:aa:ba:bf:54:9e:16:da:2c:3b:1d:
         74:be:e9:0b:b9:f6:f4:d9:7f:42:e2:e1:63:a6:b1:94:65:36:
         65:96:16:a4:c1:97:88:8b:dd:c2:b6:03:8e:95:2a:ac:da:13:
         34:71:ae:4b:40:94:c4:0f:ae:87:18:46:fe:bb:1a:b0:bf:08:
         75:9d:a3:5b:5f:fa:ad:fc:8e:19:1a:3a:91:1d:9c:73:c9:7a:
         f7:b3:3e:ab:84:71:f0:dd:a1:e4:4e:75:03:78:62:77:0d:c9:
         30:30:a1:b1:3e:be:9e:b6:b3:be:fe:06:6d:c6:64:15:d2:8a:
         8e:97:d8:d2:be:4d:88:05:09:92:d4:c7:8e:73:1f:ec:a5:09:
         1f:69:bc:c4
-----BEGIN CERTIFICATE-----
MIIHOjCCBiKgAwIBAgIUCxB3VAwW6oXU0INyYL8bAz5k9CQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODM5RDI4QkU2NENGRkE2NTFENDhGQzEzMjg0NDEwNkRB
MDI0NDlEMjAeFw0yMzEwMTExOTU1MDZaFw0yNDEwMDkyMDAwMDZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0MzQjg2ODU2MTBEQUJFNzU2
OUI0Njg0NUI3ODVGRDRDNjVCODE5NDYyMDRFQjI3RTc5QjdGNTQwMzg1MzE4MURD
RjkzNjAyN0RFQTlEOUYzQUMxMkI3QkE3QzI5OTlCNzFEN0MyQjY5RTI3NTM5ODc2
MDQ1RTAzQTFGMTA0QUQyQTFCOTU4QUEzQ0Y2QTAxQUIzQ0NGRjM0ODFFN0QyNjg4
ODU0MkE0MUY4MTA0QTBDQzUzNjM4NTlFMDA5MEIzQUFGREZBQTQ3MTkyNjMyQzdC
MEU4OEZEMTlBQ0YzRDA1REI4MkFBMDlENUJBNjIxNkVCQTM5QUFCNDk1QjU0QzVE
QTJERDYwNzQ1Mzc4RDQ0Q0MwQzA1MDUxMjhDNTI1RkI2ODg3NkVENUQ1QTQ4Mjg2
NEVCODE1NjM5RUM3RTRBM0UyOEY5MjZDRTFBNUZGNTBCOTI1QzBDN0U4MDhGRDAw
RjhGMDlDRUI1NTZDRTk5RDUyQkI2OUQ2ODBFQTI5QzFBN0EyMkY1QjVBNjI1QkNC
RTBEQjIyOTVDNDdBMDRFRkY1Mzg0MzE2QkEzMjMxMDZCMEM2OTVFRTM1REQ1NjNB
M0U4NTRCRkNGNTFENkVBRTZCN0NEMjk0NERBM0I5RUM4NjQ0NjE2RjNFQkU2Qzg0
OTVFN0Y5NUVGNTlCMjEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzDuGhWENq+dWm0aEW3hf1MZbgZRiBOsn55t/VAOFMYHc+TYCfeqd
nzrBK3unwpmbcdfCtp4nU5h2BF4DofEErSoblYqjz2oBqzzP80gefSaIhUKkH4EE
oMxTY4WeAJCzqv36pHGSYyx7Doj9Gazz0F24KqCdW6Yhbro5qrSVtUxdot1gdFN4
1EzAwFBRKMUl+2iHbtXVpIKGTrgVY57H5KPij5Js4aX/ULklwMfoCP0A+PCc61Vs
6Z1Su2nWgOopwaeiL1taYlvL4NsilcR6BO/1OEMWujIxBrDGle413VY6PoVL/PUd
bq5rfNKUTaO57IZEYW8+vmyElef5XvWbIQIDAQABo4ICSDCCAkQwHQYDVR0OBBYE
FCSjt4lxzkvGk1a8zhU2j0PNYZzuMB8GA1UdIwQYMBaAFIOdKL5kz/plHUj8EyhE
EG2gJEnSMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dVUjRKZWR2WlNuYjho
S21NVWdRNjg3YjRNWFhtMzVtU1pETUxRTkhTRnBwLzAvODM5RDI4QkU2NENGRkE2
NTFENDhGQzEzMjg0NDEwNkRBMDI0NDlEMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84MzlEMjhCRTY0Q0ZGQTY1MUQ0OEZDMTMyODQ0MTA2REEwMjQ0
OUQyLmNlcjCBpgYIKwYBBQUHAQsEgZkwgZYwgZMGCCsGAQUFBzALhoGGcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVVI0SmVkdlpTbmI4aEttTVVn
UTY4N2I0TVhYbTM1bVNaRE1MUU5IU0ZwcC8wLzMxMzkzMTJlMzMzODJlMzAyZTMw
MmYzMTM1MmQzMTM1MjAzZDNlMjAzNDMyMzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAb8mMA0GCSqG
SIb3DQEBCwUAA4IBAQB2HlPsHHG12y9coK+wJIBhr7FAwcCMetq6d4jCru/CzX28
dFnJnJYsLKq92wQjpn5agNa1qyD40I30XAH3jak9q90dihipkdFJhRo1fnZ3CHjX
9VHqDR+D0HfOaAOiITzBjGG0sD8/oZfoyQ3l6SFW9yjIwKq6v1SeFtosOx10vukL
ufb02X9C4uFjprGUZTZllhakwZeIi93CtgOOlSqs2hM0ca5LQJTED66HGEb+uxqw
vwh1naNbX/qt/I4ZGjqRHZxzyXr3sz6rhHHw3aHkTnUDeGJ3DckwMKGxPr6etrO+
/gZtxmQV0oqOl9jSvk2IBQmS1MeOcx/spQkfabzE
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org