Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3137332e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3137332e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          eR0z+ZH2hf5dEyTG2OusgZUjWop/j9xWP2EcdtGI/v0=
Subject key identifier:   75:F3:FF:AE:69:BA:48:CC:C6:5B:7F:8B:E7:BC:22:19:3A:5F:AD:5F
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       144C3C6D15B0F845355317C1C0E3BF56BE9717DB
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3137332e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:02 +0000
ROA not before:           Wed 11 Oct 2023 19:55:02 +0000
ROA not after:            Wed 09 Oct 2024 20:00:02 +0000
asID:                     4230
IP address blocks:        200.173.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:4c:3c:6d:15:b0:f8:45:35:53:17:c1:c0:e3:bf:56:be:97:17:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:02 2023 GMT
            Not After : Oct  9 20:00:02 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:98:4e:82:e5:06:5f:ff:16:87:f8:eb:33:38:
                    67:dd:e2:42:4b:54:ae:91:c7:5b:7d:3b:e4:fb:ed:
                    bc:86:ec:59:5b:56:e5:b2:7e:cd:aa:fe:5e:5a:60:
                    ed:f3:aa:94:1c:98:9b:da:d9:39:3b:12:43:86:72:
                    46:46:66:a2:c7:a1:a9:f9:29:b6:d4:81:fd:50:c5:
                    e4:77:de:30:a6:e3:87:3f:3e:8d:e5:ad:ec:47:12:
                    31:8b:25:40:a7:a0:c1:bd:b3:fb:fb:b1:90:3c:14:
                    19:db:c3:32:35:71:b1:d4:27:43:fc:3b:4c:0c:03:
                    da:ce:eb:3f:f0:34:77:2f:5a:fa:b5:7a:30:d9:d3:
                    39:69:95:88:90:bc:dc:45:6d:fd:b8:c9:bc:18:d2:
                    3b:be:1d:e3:0d:9b:19:2f:26:5e:8b:3e:52:98:de:
                    b0:b1:a9:1a:6d:0f:5a:e2:30:ed:02:a0:f5:d3:99:
                    c7:40:59:da:5e:03:6d:9d:77:e8:0f:0d:4e:70:4e:
                    08:20:9f:4e:68:6b:f2:e6:f2:bf:42:03:78:53:b9:
                    19:9e:b1:aa:0c:1f:18:44:c2:06:e1:6a:da:12:b3:
                    3e:d9:06:9e:00:e0:5d:b0:98:c2:d6:d6:13:da:fb:
                    8e:b4:7b:06:17:d0:a9:81:cc:bc:22:7c:74:cf:cf:
                    4c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F3:FF:AE:69:BA:48:CC:C6:5B:7F:8B:E7:BC:22:19:3A:5F:AD:5F
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3137332e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.173.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         21:ba:66:b1:54:ec:19:a6:77:a2:70:e0:9b:7d:f0:93:55:da:
         49:d1:00:f3:0c:7b:8e:f3:46:33:54:a3:5e:92:9a:d0:eb:e5:
         a2:01:9c:81:e1:b4:60:cb:83:c2:b3:d8:de:35:5f:ff:3c:8e:
         87:21:b5:a3:83:de:0a:55:cd:64:c7:4c:20:2e:b8:23:f0:9b:
         ad:5f:59:59:8d:ce:ec:94:c1:ed:1f:50:64:9d:51:2e:96:37:
         21:53:12:37:ad:44:0b:de:12:b9:32:18:07:0d:b1:46:42:2e:
         d7:a7:27:a9:8d:9f:7a:eb:ea:61:a6:e4:7a:07:f1:e8:17:9b:
         fd:05:37:84:ac:62:67:0f:80:50:ee:7c:aa:ee:b4:2f:e6:2a:
         f0:83:c7:b3:7a:b1:a0:3a:48:43:5e:ce:93:0e:21:5a:db:74:
         9e:5f:d4:cb:2b:ee:63:62:bc:47:18:37:d7:c7:cc:37:e9:ff:
         e1:7a:f3:d3:8b:ac:28:d5:22:5b:b4:94:5b:03:77:41:59:cb:
         6e:01:fd:3d:21:de:8a:56:5c:73:7a:bd:78:0b:46:f3:81:08:
         21:05:6e:cb:49:6c:aa:6b:02:05:70:4e:80:47:a3:c5:0d:56:
         fa:a6:c7:3a:6b:7e:9a:ad:b9:bc:99:5e:64:50:58:4b:00:2a:
         9b:a5:a7:b5
-----BEGIN CERTIFICATE-----
MIIHPDCCBiSgAwIBAgIUFEw8bRWw+EU1UxfBwOO/Vr6XF9swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODM5RDI4QkU2NENGRkE2NTFENDhGQzEzMjg0NDEwNkRB
MDI0NDlEMjAeFw0yMzEwMTExOTU1MDJaFw0yNDEwMDkyMDAwMDJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREU5ODRFODJFNTA2NUZGRjE2
ODdGOEVCMzMzODY3RERFMjQyNEI1NEFFOTFDNzVCN0QzQkU0RkJFREJDODZFQzU5
NUI1NkU1QjI3RUNEQUFGRTVFNUE2MEVERjNBQTk0MUM5ODlCREFEOTM5M0IxMjQz
ODY3MjQ2NDY2NkEyQzdBMUE5RjkyOUI2RDQ4MUZENTBDNUU0NzdERTMwQTZFMzg3
M0YzRThERTVBREVDNDcxMjMxOEIyNTQwQTdBMEMxQkRCM0ZCRkJCMTkwM0MxNDE5
REJDMzMyMzU3MUIxRDQyNzQzRkMzQjRDMEMwM0RBQ0VFQjNGRjAzNDc3MkY1QUZB
QjU3QTMwRDlEMzM5Njk5NTg4OTBCQ0RDNDU2REZEQjhDOUJDMThEMjNCQkUxREUz
MEQ5QjE5MkYyNjVFOEIzRTUyOThERUIwQjFBOTFBNkQwRjVBRTIzMEVEMDJBMEY1
RDM5OUM3NDA1OURBNUUwMzZEOUQ3N0U4MEYwRDRFNzA0RTA4MjA5RjRFNjg2QkYy
RTZGMkJGNDIwMzc4NTNCOTE5OUVCMUFBMEMxRjE4NDRDMjA2RTE2QURBMTJCMzNF
RDkwNjlFMDBFMDVEQjA5OEMyRDZENjEzREFGQjhFQjQ3QjA2MTdEMEE5ODFDQ0JD
MjI3Qzc0Q0ZDRjRDMkYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA3phOguUGX/8Wh/jrMzhn3eJCS1SukcdbfTvk++28huxZW1blsn7N
qv5eWmDt86qUHJib2tk5OxJDhnJGRmaix6Gp+Sm21IH9UMXkd94wpuOHPz6N5a3s
RxIxiyVAp6DBvbP7+7GQPBQZ28MyNXGx1CdD/DtMDAPazus/8DR3L1r6tXow2dM5
aZWIkLzcRW39uMm8GNI7vh3jDZsZLyZeiz5SmN6wsakabQ9a4jDtAqD105nHQFna
XgNtnXfoDw1OcE4IIJ9OaGvy5vK/QgN4U7kZnrGqDB8YRMIG4WraErM+2QaeAOBd
sJjC1tYT2vuOtHsGF9Cpgcy8Inx0z89MLwIDAQABo4ICSjCCAkYwHQYDVR0OBBYE
FHXz/65pukjMxlt/i+e8Ihk6X61fMB8GA1UdIwQYMBaAFIOdKL5kz/plHUj8EyhE
EG2gJEnSMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dVUjRKZWR2WlNuYjho
S21NVWdRNjg3YjRNWFhtMzVtU1pETUxRTkhTRnBwLzAvODM5RDI4QkU2NENGRkE2
NTFENDhGQzEzMjg0NDEwNkRBMDI0NDlEMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84MzlEMjhCRTY0Q0ZGQTY1MUQ0OEZDMTMyODQ0MTA2REEwMjQ0
OUQyLmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVVI0SmVkdlpTbmI4aEttTVVn
UTY4N2I0TVhYbTM1bVNaRE1MUU5IU0ZwcC8wLzMyMzAzMDJlMzEzNzMzMmUzMDJl
MzAyZjMxMzYyZDMxMzYyMDNkM2UyMDM0MzIzMzMwLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAyK0wDQYJ
KoZIhvcNAQELBQADggEBACG6ZrFU7Bmmd6Jw4Jt98JNV2knRAPMMe47zRjNUo16S
mtDr5aIBnIHhtGDLg8Kz2N41X/88jochtaOD3gpVzWTHTCAuuCPwm61fWVmNzuyU
we0fUGSdUS6WNyFTEjetRAveErkyGAcNsUZCLtenJ6mNn3rr6mGm5HoH8egXm/0F
N4SsYmcPgFDufKrutC/mKvCDx7N6saA6SENezpMOIVrbdJ5f1Msr7mNivEcYN9fH
zDfp/+F689OLrCjVIlu0lFsDd0FZy24B/T0h3opWXHN6vXgLRvOBCCEFbstJbKpr
AgVwToBHo8UNVvqmxzprfpqtubyZXmRQWEsAKpulp7U=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org