Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3133392e3139322e302f31382d3138203d3e2034323330.roa
File:                     3230302e3133392e3139322e302f31382d3138203d3e2034323330.roa (raw, json)
Hash identifier:          sjgC1W27cJUqQfaufJWNmAjKPRQuZm+KRtbY8ttNqj8=
Subject key identifier:   BF:48:90:60:B2:9F:CA:E1:23:7B:F3:DF:65:C9:10:31:8A:C8:4D:B0
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       72D5065E7E58B6E2A64FB38347DA6370EEDEA681
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3133392e3139322e302f31382d3138203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:08 +0000
ROA not before:           Wed 11 Oct 2023 19:55:08 +0000
ROA not after:            Wed 09 Oct 2024 20:00:08 +0000
asID:                     4230
IP address blocks:        200.139.192.0/18 maxlen: 18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:d5:06:5e:7e:58:b6:e2:a6:4f:b3:83:47:da:63:70:ee:de:a6:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:08 2023 GMT
            Not After : Oct  9 20:00:08 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:94:81:c5:b0:7a:fa:a8:ba:49:f9:79:fb:6b:
                    ab:78:ce:73:54:f5:54:d0:84:ee:cb:1e:15:62:80:
                    74:82:1f:f4:88:d4:75:09:fc:55:e2:37:3d:e8:ed:
                    e1:04:08:cb:1c:60:f9:70:a1:47:3b:9b:ba:83:ef:
                    68:5d:aa:4f:14:b2:90:2a:23:c6:49:79:73:8c:cc:
                    a6:12:47:16:97:ff:f1:57:36:0d:6c:b4:e3:a9:5e:
                    36:47:d3:41:ce:ce:04:cb:70:44:0b:63:46:eb:7c:
                    e7:e0:02:26:dc:ae:3f:3a:c9:f5:08:fb:c8:29:34:
                    bd:7c:c5:6a:de:2c:ed:3d:57:b0:48:3b:41:c8:a2:
                    58:15:63:85:16:c5:19:bc:59:0b:86:19:0e:5b:f6:
                    e8:67:50:58:aa:6f:79:12:38:ff:02:fe:da:c6:75:
                    4e:37:4d:51:4f:d6:83:73:36:24:37:0e:18:4b:91:
                    22:38:cb:2c:d4:6a:98:73:78:d3:3b:63:4b:2c:6c:
                    99:67:64:d4:30:0b:01:1c:51:20:f6:da:10:c0:78:
                    7b:c8:6e:2c:39:3a:a7:b5:4f:ed:0b:6e:6b:8a:55:
                    20:4b:95:31:55:73:a9:f9:b7:7c:1c:4e:cb:d9:3b:
                    62:cb:84:8e:55:88:4a:47:6b:3c:2a:80:3a:7e:83:
                    3b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:48:90:60:B2:9F:CA:E1:23:7B:F3:DF:65:C9:10:31:8A:C8:4D:B0
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3133392e3139322e302f31382d3138203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.139.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         34:de:e6:ca:95:6b:35:bb:be:b6:07:4e:fc:6e:21:1d:15:e9:
         1c:82:5c:15:13:2a:3e:81:d9:e9:93:0f:17:26:f3:30:cc:e8:
         fc:9b:78:e8:57:7f:e9:17:a6:7c:1f:ac:2d:2a:73:4f:87:df:
         6e:c2:33:1c:4c:59:ad:2e:b4:27:48:e5:fd:eb:f5:c7:c4:e6:
         a3:6a:fa:4d:0f:a6:df:e3:16:e2:ff:99:2e:f3:47:2c:15:69:
         92:f5:97:a6:14:6f:00:c0:18:6a:91:98:48:a2:51:5b:29:d5:
         d8:1e:9b:45:7c:a2:17:a5:4e:ba:ca:7a:ad:5f:e1:51:99:18:
         ae:b2:46:13:cc:05:b2:d2:57:c3:c3:0e:be:f3:b1:8f:77:4e:
         85:e1:07:fa:7a:61:ac:06:a5:ff:3a:90:cb:1f:63:de:20:dd:
         fc:45:55:f0:b6:9b:1a:2c:47:fe:25:70:4c:c5:7b:26:76:b0:
         0c:ae:15:77:d6:cb:cd:28:3a:1d:31:56:c1:9a:44:c3:7e:d7:
         a9:d3:29:b7:52:7c:e5:a6:e7:53:3f:3d:76:b2:db:4c:34:61:
         93:99:e1:cb:25:f7:5e:40:e3:94:4d:e3:fb:6f:6f:e0:b7:dc:
         53:3a:cb:b3:3f:9c:f8:96:45:7e:d8:76:a0:43:16:ff:23:af:
         26:db:bd:a4
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUctUGXn5YtuKmT7ODR9pjcO7epoEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODM5RDI4QkU2NENGRkE2NTFENDhGQzEzMjg0NDEwNkRB
MDI0NDlEMjAeFw0yMzEwMTExOTU1MDhaFw0yNDEwMDkyMDAwMDhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0M5NDgxQzVCMDdBRkFBOEJB
NDlGOTc5RkI2QkFCNzhDRTczNTRGNTU0RDA4NEVFQ0IxRTE1NjI4MDc0ODIxRkY0
ODhENDc1MDlGQzU1RTIzNzNERThFREUxMDQwOENCMUM2MEY5NzBBMTQ3M0I5QkJB
ODNFRjY4NURBQTRGMTRCMjkwMkEyM0M2NDk3OTczOENDQ0E2MTI0NzE2OTdGRkYx
NTczNjBENkNCNEUzQTk1RTM2NDdEMzQxQ0VDRTA0Q0I3MDQ0MEI2MzQ2RUI3Q0U3
RTAwMjI2RENBRTNGM0FDOUY1MDhGQkM4MjkzNEJEN0NDNTZBREUyQ0VEM0Q1N0Iw
NDgzQjQxQzhBMjU4MTU2Mzg1MTZDNTE5QkM1OTBCODYxOTBFNUJGNkU4Njc1MDU4
QUE2Rjc5MTIzOEZGMDJGRURBQzY3NTRFMzc0RDUxNEZENjgzNzMzNjI0MzcwRTE4
NEI5MTIyMzhDQjJDRDQ2QTk4NzM3OEQzM0I2MzRCMkM2Qzk5Njc2NEQ0MzAwQjAx
MUM1MTIwRjZEQTEwQzA3ODdCQzg2RTJDMzkzQUE3QjU0RkVEMEI2RTZCOEE1NTIw
NEI5NTMxNTU3M0E5RjlCNzdDMUM0RUNCRDkzQjYyQ0I4NDhFNTU4ODRBNDc2QjND
MkE4MDNBN0U4MzNCQjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzJSBxbB6+qi6Sfl5+2ureM5zVPVU0ITuyx4VYoB0gh/0iNR1CfxV
4jc96O3hBAjLHGD5cKFHO5u6g+9oXapPFLKQKiPGSXlzjMymEkcWl//xVzYNbLTj
qV42R9NBzs4Ey3BEC2NG63zn4AIm3K4/Osn1CPvIKTS9fMVq3iztPVewSDtByKJY
FWOFFsUZvFkLhhkOW/boZ1BYqm95Ejj/Av7axnVON01RT9aDczYkNw4YS5EiOMss
1GqYc3jTO2NLLGyZZ2TUMAsBHFEg9toQwHh7yG4sOTqntU/tC25rilUgS5UxVXOp
+bd8HE7L2Ttiy4SOVYhKR2s8KoA6foM7uQIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FL9IkGCyn8rhI3vz32XJEDGKyE2wMB8GA1UdIwQYMBaAFIOdKL5kz/plHUj8EyhE
EG2gJEnSMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dVUjRKZWR2WlNuYjho
S21NVWdRNjg3YjRNWFhtMzVtU1pETUxRTkhTRnBwLzAvODM5RDI4QkU2NENGRkE2
NTFENDhGQzEzMjg0NDEwNkRBMDI0NDlEMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84MzlEMjhCRTY0Q0ZGQTY1MUQ0OEZDMTMyODQ0MTA2REEwMjQ0
OUQyLmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVVI0SmVkdlpTbmI4aEttTVVn
UTY4N2I0TVhYbTM1bVNaRE1MUU5IU0ZwcC8wLzMyMzAzMDJlMzEzMzM5MmUzMTM5
MzIyZTMwMmYzMTM4MmQzMTM4MjAzZDNlMjAzNDMyMzMzMC5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBsiL
wDANBgkqhkiG9w0BAQsFAAOCAQEANN7mypVrNbu+tgdO/G4hHRXpHIJcFRMqPoHZ
6ZMPFybzMMzo/Jt46Fd/6RemfB+sLSpzT4ffbsIzHExZrS60J0jl/ev1x8Tmo2r6
TQ+m3+MW4v+ZLvNHLBVpkvWXphRvAMAYapGYSKJRWynV2B6bRXyiF6VOusp6rV/h
UZkYrrJGE8wFstJXw8MOvvOxj3dOheEH+nphrAal/zqQyx9j3iDd/EVV8LabGixH
/iVwTMV7JnawDK4Vd9bLzSg6HTFWwZpEw37XqdMpt1J85abnUz89drLbTDRhk5nh
yyX3XkDjlE3j+29v4LfcUzrLsz+c+JZFfth2oEMW/yOvJtu9pA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org