Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e31302e3135392e302f32342d3234203d3e2034323330.roa
File:                     3230302e31302e3135392e302f32342d3234203d3e2034323330.roa (raw, json)
Hash identifier:          eg61IGSem3aWtc3pVsW437iyYBo4onIoXr1Cn78yA+w=
Subject key identifier:   C3:62:86:50:53:D2:0A:B8:FD:63:9C:D4:50:B2:F0:DF:81:38:95:C1
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       3BE74F9CD7734096902F3DC1868496D2CD388AC7
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e31302e3135392e302f32342d3234203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:00 +0000
ROA not before:           Wed 11 Oct 2023 19:55:00 +0000
ROA not after:            Wed 09 Oct 2024 20:00:00 +0000
asID:                     4230
IP address blocks:        200.10.159.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:e7:4f:9c:d7:73:40:96:90:2f:3d:c1:86:84:96:d2:cd:38:8a:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:00 2023 GMT
            Not After : Oct  9 20:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:6e:36:3d:61:a3:38:6b:77:45:4a:ca:34:58:
                    d1:99:01:c5:b5:81:9c:18:4e:72:d2:e6:3c:2a:a9:
                    61:22:84:0a:b3:da:7e:41:22:5e:8a:27:40:6c:3a:
                    25:46:48:ce:79:0d:53:73:29:6d:1b:36:d1:69:3c:
                    41:f7:e5:7c:0a:94:ad:cc:c8:dd:03:6d:25:f5:d6:
                    81:e5:3e:df:1d:3c:32:25:cb:4a:27:0c:88:37:c2:
                    6b:5b:0c:27:9c:de:bb:49:5b:ad:22:dd:5a:48:73:
                    f2:91:c4:13:cb:9d:6f:6b:6a:21:9c:e8:f7:c1:38:
                    e5:d8:de:ca:66:16:56:77:eb:83:d8:22:4e:ad:0c:
                    80:33:7e:7f:13:df:05:84:6c:cf:06:2a:14:22:7e:
                    84:d3:4a:9b:44:20:c0:d6:77:4a:14:d3:19:93:dc:
                    b9:aa:be:45:fc:9c:db:90:d9:b4:62:76:54:31:b7:
                    d8:1b:53:4d:81:ff:02:d3:82:af:0c:91:76:04:81:
                    62:2b:61:c8:e1:08:21:7f:0b:44:f3:c1:d1:16:b0:
                    4a:1f:c5:7a:e0:03:55:d2:d2:3e:1f:cf:0d:2a:ae:
                    db:5b:d6:28:8f:db:df:4c:b9:55:24:fa:a2:71:94:
                    6d:80:43:b3:ae:ab:9e:f9:e8:03:5e:27:35:ee:80:
                    8f:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:62:86:50:53:D2:0A:B8:FD:63:9C:D4:50:B2:F0:DF:81:38:95:C1
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e31302e3135392e302f32342d3234203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.159.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:1e:93:b5:8b:fd:1f:b0:2e:fc:47:c8:52:d9:e4:05:23:f5:
         b7:76:90:56:d3:d0:41:50:bd:0d:13:65:6e:b0:3f:35:bd:cd:
         e8:c3:8c:12:8c:00:96:f3:8f:d3:11:80:95:0e:07:2b:e9:ae:
         48:fb:97:6b:db:69:6d:ea:fe:37:0c:09:f7:15:ef:c4:dc:a5:
         f3:56:e1:12:64:69:95:64:9b:36:1c:1e:5b:fa:7b:c3:cc:7f:
         c9:7e:05:97:28:d3:f8:62:8a:c5:e9:2a:bb:76:f7:51:06:27:
         40:45:38:ad:1e:ed:e4:6e:6b:b5:0d:1b:f8:06:9f:1f:ed:8f:
         b5:54:11:98:0d:2b:2d:c2:1f:d9:56:9a:02:28:fb:29:06:8a:
         73:1f:19:1b:d0:cb:2e:aa:83:1e:ab:1c:d4:09:d6:78:b1:3f:
         01:cd:af:d9:a9:f5:ff:90:81:91:fa:d6:cd:19:98:e5:45:99:
         32:77:cb:0c:c6:1c:fb:21:45:24:2d:ac:a2:fe:5b:6f:08:a9:
         9a:3d:8e:e6:83:e9:c4:d8:7d:94:94:6e:67:eb:23:8f:6a:58:
         12:59:70:42:14:20:40:b2:9a:ce:df:62:6e:aa:5b:8a:01:e1:
         0d:aa:92:8a:4b:b3:ba:be:8a:d2:b1:ab:76:a0:6f:97:8b:4b:
         5e:d3:7d:f2
-----BEGIN CERTIFICATE-----
MIIHPzCCBiegAwIBAgIUO+dPnNdzQJaQLz3BhoSW0s04iscwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODM5RDI4QkU2NENGRkE2NTFENDhGQzEzMjg0NDEwNkRB
MDI0NDlEMjAeFw0yMzEwMTExOTU1MDBaFw0yNDEwMDkyMDAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRjA2RTM2M0Q2MUEzMzg2Qjc3
NDU0QUNBMzQ1OEQxOTkwMUM1QjU4MTlDMTg0RTcyRDJFNjNDMkFBOTYxMjI4NDBB
QjNEQTdFNDEyMjVFOEEyNzQwNkMzQTI1NDY0OENFNzkwRDUzNzMyOTZEMUIzNkQx
NjkzQzQxRjdFNTdDMEE5NEFEQ0NDOEREMDM2RDI1RjVENjgxRTUzRURGMUQzQzMy
MjVDQjRBMjcwQzg4MzdDMjZCNUIwQzI3OUNERUJCNDk1QkFEMjJERDVBNDg3M0Yy
OTFDNDEzQ0I5RDZGNkI2QTIxOUNFOEY3QzEzOEU1RDhERUNBNjYxNjU2NzdFQjgz
RDgyMjRFQUQwQzgwMzM3RTdGMTNERjA1ODQ2Q0NGMDYyQTE0MjI3RTg0RDM0QTlC
NDQyMEMwRDY3NzRBMTREMzE5OTNEQ0I5QUFCRTQ1RkM5Q0RCOTBEOUI0NjI3NjU0
MzFCN0Q4MUI1MzREODFGRjAyRDM4MkFGMEM5MTc2MDQ4MTYyMkI2MUM4RTEwODIx
N0YwQjQ0RjNDMUQxMTZCMDRBMUZDNTdBRTAwMzU1RDJEMjNFMUZDRjBEMkFBRURC
NUJENjI4OEZEQkRGNENCOTU1MjRGQUEyNzE5NDZEODA0M0IzQUVBQjlFRjlFODAz
NUUyNzM1RUU4MDhGNzMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA8G42PWGjOGt3RUrKNFjRmQHFtYGcGE5y0uY8KqlhIoQKs9p+QSJe
iidAbDolRkjOeQ1TcyltGzbRaTxB9+V8CpStzMjdA20l9daB5T7fHTwyJctKJwyI
N8JrWwwnnN67SVutIt1aSHPykcQTy51va2ohnOj3wTjl2N7KZhZWd+uD2CJOrQyA
M35/E98FhGzPBioUIn6E00qbRCDA1ndKFNMZk9y5qr5F/JzbkNm0YnZUMbfYG1NN
gf8C04KvDJF2BIFiK2HI4QghfwtE88HRFrBKH8V64ANV0tI+H88NKq7bW9Yoj9vf
TLlVJPqicZRtgEOzrque+egDXic17oCPcwIDAQABo4ICTTCCAkkwHQYDVR0OBBYE
FMNihlBT0gq4/WOc1FCy8N+BOJXBMB8GA1UdIwQYMBaAFIOdKL5kz/plHUj8EyhE
EG2gJEnSMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dVUjRKZWR2WlNuYjho
S21NVWdRNjg3YjRNWFhtMzVtU1pETUxRTkhTRnBwLzAvODM5RDI4QkU2NENGRkE2
NTFENDhGQzEzMjg0NDEwNkRBMDI0NDlEMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84MzlEMjhCRTY0Q0ZGQTY1MUQ0OEZDMTMyODQ0MTA2REEwMjQ0
OUQyLmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVVI0SmVkdlpTbmI4aEttTVVn
UTY4N2I0TVhYbTM1bVNaRE1MUU5IU0ZwcC8wLzMyMzAzMDJlMzEzMDJlMzEzNTM5
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzQzMjMzMzAucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADICp8w
DQYJKoZIhvcNAQELBQADggEBADQek7WL/R+wLvxHyFLZ5AUj9bd2kFbT0EFQvQ0T
ZW6wPzW9zejDjBKMAJbzj9MRgJUOByvprkj7l2vbaW3q/jcMCfcV78TcpfNW4RJk
aZVkmzYcHlv6e8PMf8l+BZco0/hiisXpKrt291EGJ0BFOK0e7eRua7UNG/gGnx/t
j7VUEZgNKy3CH9lWmgIo+ykGinMfGRvQyy6qgx6rHNQJ1nixPwHNr9mp9f+QgZH6
1s0ZmOVFmTJ3ywzGHPshRSQtrKL+W28IqZo9juaD6cTYfZSUbmfrI49qWBJZcEIU
IECyms7fYm6qW4oB4Q2qkopLs7q+itKxq3agb5eLS17TffI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org