Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3137342e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3137342e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          5g2gLqRW7xJx8CJOyrRRYc8ZkZhPE8mJDd9vYoOsCIU=
Subject key identifier:   67:96:D3:74:E4:0A:6E:8D:48:3E:EF:57:C6:D1:D5:AA:95:15:54:5F
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       44F8DA99255C676D7C0DA3B2DB0DB0313DA2EDF2
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3137342e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:01 +0000
ROA not before:           Wed 11 Oct 2023 19:55:01 +0000
ROA not after:            Wed 09 Oct 2024 20:00:01 +0000
asID:                     4230
IP address blocks:        200.174.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:f8:da:99:25:5c:67:6d:7c:0d:a3:b2:db:0d:b0:31:3d:a2:ed:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:01 2023 GMT
            Not After : Oct  9 20:00:01 2024 GMT
        Subject: CN=3082010A0282010100C4ECF2EAAE447E2C57A61F4F72060E6FAD942B8A7A072A82C0E4AAB069854767F8B135C89BCCBC87221A8F882D2C802C1A2DEA9BD7AA50E162389A76E420BAC2F97D4D69EB012C2D625955E8F8DE8C382AEB0F24ADEE91264275AECD49B1BAE3E06F29C9D8583F163685288C1D8B0FEF415E4457C3BF2534327404ABED67F94CB5B0F037C6327C620ECCF785085F3C51EC348F9F78A8C29F645F76273916F76F5EB2234FD198ADF13A1193344A21AB49CFAD2D91BE0A652E7BCC677C6AEE79DFC7C8E76C667A9FCFFC96109940583C75BBA509985897F398EEA9D236D6B0D68B193BB13033C71BCEEFBE9EF9FD9EB6D4F290B624C4E7BE3D031D3C61C99013210203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ec:f2:ea:ae:44:7e:2c:57:a6:1f:4f:72:06:
                    0e:6f:ad:94:2b:8a:7a:07:2a:82:c0:e4:aa:b0:69:
                    85:47:67:f8:b1:35:c8:9b:cc:bc:87:22:1a:8f:88:
                    2d:2c:80:2c:1a:2d:ea:9b:d7:aa:50:e1:62:38:9a:
                    76:e4:20:ba:c2:f9:7d:4d:69:eb:01:2c:2d:62:59:
                    55:e8:f8:de:8c:38:2a:eb:0f:24:ad:ee:91:26:42:
                    75:ae:cd:49:b1:ba:e3:e0:6f:29:c9:d8:58:3f:16:
                    36:85:28:8c:1d:8b:0f:ef:41:5e:44:57:c3:bf:25:
                    34:32:74:04:ab:ed:67:f9:4c:b5:b0:f0:37:c6:32:
                    7c:62:0e:cc:f7:85:08:5f:3c:51:ec:34:8f:9f:78:
                    a8:c2:9f:64:5f:76:27:39:16:f7:6f:5e:b2:23:4f:
                    d1:98:ad:f1:3a:11:93:34:4a:21:ab:49:cf:ad:2d:
                    91:be:0a:65:2e:7b:cc:67:7c:6a:ee:79:df:c7:c8:
                    e7:6c:66:7a:9f:cf:fc:96:10:99:40:58:3c:75:bb:
                    a5:09:98:58:97:f3:98:ee:a9:d2:36:d6:b0:d6:8b:
                    19:3b:b1:30:33:c7:1b:ce:ef:be:9e:f9:fd:9e:b6:
                    d4:f2:90:b6:24:c4:e7:be:3d:03:1d:3c:61:c9:90:
                    13:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:96:D3:74:E4:0A:6E:8D:48:3E:EF:57:C6:D1:D5:AA:95:15:54:5F
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3137342e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.174.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         34:f2:aa:5c:3c:7b:c3:e4:be:21:c1:bc:34:61:58:a2:f2:3f:
         40:41:59:66:d6:5f:7e:66:dc:7e:e7:b4:4f:65:91:16:d0:ca:
         9e:54:a3:9d:1f:d1:ab:c7:2f:44:f6:1c:ce:96:91:d6:a0:c7:
         3b:51:da:71:ad:fc:85:5c:ab:0f:fc:0e:39:2e:c6:38:91:8c:
         e7:7d:7f:d1:8f:b4:ac:2d:20:63:df:da:86:46:48:be:59:ef:
         e5:ca:a7:c8:87:6e:c6:66:f7:05:b0:20:ad:48:ba:3c:af:31:
         41:05:1c:92:b3:76:3c:a6:5f:97:12:54:fc:80:4a:42:2f:c4:
         de:db:18:fd:47:c9:3f:53:0a:67:00:a4:ea:fa:d9:3e:fb:ef:
         69:41:c3:14:7c:52:2b:03:4b:d5:75:cc:55:1b:28:08:fd:98:
         73:9a:9c:06:31:64:58:26:fd:b0:90:a3:b0:28:ac:94:4e:bd:
         7b:de:4b:de:ba:fc:75:f9:84:6f:58:16:e2:90:e5:b0:59:97:
         6e:76:6e:de:f0:40:ce:85:0d:aa:c6:06:1e:3a:53:23:ad:f1:
         99:92:e6:2e:4b:be:89:0c:29:e2:64:fe:09:7d:c3:31:39:22:
         1e:f1:cc:0a:f2:14:b6:17:fb:77:93:12:df:69:65:48:af:13:
         29:54:e3:21
-----BEGIN CERTIFICATE-----
MIIHPDCCBiSgAwIBAgIURPjamSVcZ218DaOy2w2wMT2i7fIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODM5RDI4QkU2NENGRkE2NTFENDhGQzEzMjg0NDEwNkRB
MDI0NDlEMjAeFw0yMzEwMTExOTU1MDFaFw0yNDEwMDkyMDAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzRFQ0YyRUFBRTQ0N0UyQzU3
QTYxRjRGNzIwNjBFNkZBRDk0MkI4QTdBMDcyQTgyQzBFNEFBQjA2OTg1NDc2N0Y4
QjEzNUM4OUJDQ0JDODcyMjFBOEY4ODJEMkM4MDJDMUEyREVBOUJEN0FBNTBFMTYy
Mzg5QTc2RTQyMEJBQzJGOTdENEQ2OUVCMDEyQzJENjI1OTU1RThGOERFOEMzODJB
RUIwRjI0QURFRTkxMjY0Mjc1QUVDRDQ5QjFCQUUzRTA2RjI5QzlEODU4M0YxNjM2
ODUyODhDMUQ4QjBGRUY0MTVFNDQ1N0MzQkYyNTM0MzI3NDA0QUJFRDY3Rjk0Q0I1
QjBGMDM3QzYzMjdDNjIwRUNDRjc4NTA4NUYzQzUxRUMzNDhGOUY3OEE4QzI5RjY0
NUY3NjI3MzkxNkY3NkY1RUIyMjM0RkQxOThBREYxM0ExMTkzMzQ0QTIxQUI0OUNG
QUQyRDkxQkUwQTY1MkU3QkNDNjc3QzZBRUU3OURGQzdDOEU3NkM2NjdBOUZDRkZD
OTYxMDk5NDA1ODNDNzVCQkE1MDk5ODU4OTdGMzk4RUVBOUQyMzZENkIwRDY4QjE5
M0JCMTMwMzNDNzFCQ0VFRkJFOUVGOUZEOUVCNkQ0RjI5MEI2MjRDNEU3QkUzRDAz
MUQzQzYxQzk5MDEzMjEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxOzy6q5EfixXph9PcgYOb62UK4p6ByqCwOSqsGmFR2f4sTXIm8y8
hyIaj4gtLIAsGi3qm9eqUOFiOJp25CC6wvl9TWnrASwtYllV6PjejDgq6w8kre6R
JkJ1rs1Jsbrj4G8pydhYPxY2hSiMHYsP70FeRFfDvyU0MnQEq+1n+Uy1sPA3xjJ8
Yg7M94UIXzxR7DSPn3iowp9kX3YnORb3b16yI0/RmK3xOhGTNEohq0nPrS2Rvgpl
LnvMZ3xq7nnfx8jnbGZ6n8/8lhCZQFg8dbulCZhYl/OY7qnSNtaw1osZO7EwM8cb
zu++nvn9nrbU8pC2JMTnvj0DHTxhyZATIQIDAQABo4ICSjCCAkYwHQYDVR0OBBYE
FGeW03TkCm6NSD7vV8bR1aqVFVRfMB8GA1UdIwQYMBaAFIOdKL5kz/plHUj8EyhE
EG2gJEnSMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dVUjRKZWR2WlNuYjho
S21NVWdRNjg3YjRNWFhtMzVtU1pETUxRTkhTRnBwLzAvODM5RDI4QkU2NENGRkE2
NTFENDhGQzEzMjg0NDEwNkRBMDI0NDlEMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84MzlEMjhCRTY0Q0ZGQTY1MUQ0OEZDMTMyODQ0MTA2REEwMjQ0
OUQyLmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVVI0SmVkdlpTbmI4aEttTVVn
UTY4N2I0TVhYbTM1bVNaRE1MUU5IU0ZwcC8wLzMyMzAzMDJlMzEzNzM0MmUzMDJl
MzAyZjMxMzYyZDMxMzYyMDNkM2UyMDM0MzIzMzMwLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAyK4wDQYJ
KoZIhvcNAQELBQADggEBADTyqlw8e8PkviHBvDRhWKLyP0BBWWbWX35m3H7ntE9l
kRbQyp5Uo50f0avHL0T2HM6WkdagxztR2nGt/IVcqw/8DjkuxjiRjOd9f9GPtKwt
IGPf2oZGSL5Z7+XKp8iHbsZm9wWwIK1IujyvMUEFHJKzdjymX5cSVPyASkIvxN7b
GP1HyT9TCmcApOr62T7772lBwxR8UisDS9V1zFUbKAj9mHOanAYxZFgm/bCQo7Ao
rJROvXveS966/HX5hG9YFuKQ5bBZl252bt7wQM6FDarGBh46UyOt8ZmS5i5LvokM
KeJk/gl9wzE5Ih7xzAryFLYX+3eTEt9pZUivEylU4yE=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org