Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3137382e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3137382e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          yjMtuw2sugEnOs4lNX9MP1MQWC5N0vZbXgEVTL1vYH8=
Subject key identifier:   28:1C:99:D0:32:ED:3E:0F:30:DD:11:D7:5C:0D:E6:C5:02:5B:6C:51
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       0812C7339989C04EA789B3FB5B5575E8C006D0DC
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3137382e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:02 +0000
ROA not before:           Wed 11 Oct 2023 19:55:02 +0000
ROA not after:            Wed 09 Oct 2024 20:00:02 +0000
asID:                     4230
IP address blocks:        200.178.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:12:c7:33:99:89:c0:4e:a7:89:b3:fb:5b:55:75:e8:c0:06:d0:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:02 2023 GMT
            Not After : Oct  9 20:00:02 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:58:3f:ed:88:71:26:2f:26:b4:e9:4d:3c:cb:
                    f8:ff:f3:be:9e:10:24:cf:01:cd:05:09:5c:04:4a:
                    66:e5:75:93:fc:a2:12:ad:d9:83:58:ab:1b:9c:82:
                    cd:90:cf:5d:a1:9e:cb:ec:de:88:f6:39:d7:5b:19:
                    e1:e4:2d:66:a9:d2:7d:f3:12:33:97:16:ba:7b:ce:
                    ea:14:e1:31:fb:b3:c3:34:f8:f1:4a:69:dc:7c:6a:
                    3b:10:3f:89:6a:e5:91:61:3f:64:33:e1:cb:5c:eb:
                    92:20:13:b5:9d:4b:be:57:ef:c8:d1:de:d6:b5:b3:
                    1e:17:0f:7d:33:5e:14:45:92:82:e0:f4:53:8e:c0:
                    84:91:e9:cd:6c:e6:a4:68:ea:31:a1:75:b5:b6:7d:
                    c9:50:7a:8e:99:18:9f:2e:0e:24:bd:fa:5a:77:fe:
                    0f:39:4c:33:cf:08:36:0f:22:5a:0d:a0:8a:2f:63:
                    28:9a:57:97:b2:28:a8:9d:b0:9b:41:c8:90:4e:47:
                    0c:3a:e8:b8:80:cb:db:82:ac:6d:b4:0c:d8:4c:c0:
                    3d:65:3e:f9:78:e4:1c:f5:05:cc:92:ba:d7:8f:50:
                    60:16:37:a7:f5:44:31:ca:9d:3f:64:5e:85:1a:6d:
                    48:a7:63:8b:d1:0f:18:91:2c:8c:5c:41:fc:c7:7a:
                    13:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:1C:99:D0:32:ED:3E:0F:30:DD:11:D7:5C:0D:E6:C5:02:5B:6C:51
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3137382e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.178.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         71:16:b9:75:c7:d1:9d:e6:a6:e9:aa:d8:74:64:8e:5c:f3:0c:
         53:7b:98:06:2b:1f:97:fa:fc:3b:1c:18:c8:56:63:7c:4a:96:
         23:34:a5:63:50:d5:eb:da:17:f3:99:11:47:6d:a6:7b:54:24:
         15:ae:d8:7c:57:59:ba:02:26:36:28:4a:c5:e2:e2:73:a3:39:
         d0:6b:04:18:13:99:1c:b3:1b:ee:24:89:14:ec:fc:90:19:5f:
         cb:d0:a5:0d:7c:1d:17:6e:da:8f:94:58:d3:19:f8:02:e4:97:
         20:ca:26:49:ee:d6:5c:e4:96:d3:71:b2:36:bd:2a:a4:75:da:
         89:44:87:68:15:1c:9e:38:ea:82:75:86:c8:48:0d:b3:6c:79:
         47:7f:59:cc:71:5a:7c:5b:c7:4a:3d:89:5f:ca:b5:c8:8b:49:
         28:65:6a:c9:04:fa:73:fa:1c:0e:af:c2:8c:ad:eb:ef:74:2d:
         63:66:0b:cb:02:e0:6d:ed:b8:e0:be:c7:ba:f0:8d:a4:65:27:
         f3:79:5d:b7:cc:c5:1a:2e:c0:84:fe:61:16:c8:e3:14:4b:61:
         cf:95:2a:80:2f:ae:07:c1:08:9d:23:b2:24:12:3a:93:c0:7c:
         63:82:a1:9f:6e:09:e1:15:46:21:13:8d:5a:b8:63:27:8b:15:
         3e:0a:07:0a
-----BEGIN CERTIFICATE-----
MIIHPDCCBiSgAwIBAgIUCBLHM5mJwE6nibP7W1V16MAG0NwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODM5RDI4QkU2NENGRkE2NTFENDhGQzEzMjg0NDEwNkRB
MDI0NDlEMjAeFw0yMzEwMTExOTU1MDJaFw0yNDEwMDkyMDAwMDJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDY1ODNGRUQ4ODcxMjYyRjI2
QjRFOTREM0NDQkY4RkZGM0JFOUUxMDI0Q0YwMUNEMDUwOTVDMDQ0QTY2RTU3NTkz
RkNBMjEyQUREOTgzNThBQjFCOUM4MkNEOTBDRjVEQTE5RUNCRUNERTg4RjYzOUQ3
NUIxOUUxRTQyRDY2QTlEMjdERjMxMjMzOTcxNkJBN0JDRUVBMTRFMTMxRkJCM0Mz
MzRGOEYxNEE2OURDN0M2QTNCMTAzRjg5NkFFNTkxNjEzRjY0MzNFMUNCNUNFQjky
MjAxM0I1OUQ0QkJFNTdFRkM4RDFERUQ2QjVCMzFFMTcwRjdEMzM1RTE0NDU5Mjgy
RTBGNDUzOEVDMDg0OTFFOUNENkNFNkE0NjhFQTMxQTE3NUI1QjY3REM5NTA3QThF
OTkxODlGMkUwRTI0QkRGQTVBNzdGRTBGMzk0QzMzQ0YwODM2MEYyMjVBMERBMDhB
MkY2MzI4OUE1Nzk3QjIyOEE4OURCMDlCNDFDODkwNEU0NzBDM0FFOEI4ODBDQkRC
ODJBQzZEQjQwQ0Q4NENDMDNENjUzRUY5NzhFNDFDRjUwNUNDOTJCQUQ3OEY1MDYw
MTYzN0E3RjU0NDMxQ0E5RDNGNjQ1RTg1MUE2RDQ4QTc2MzhCRDEwRjE4OTEyQzhD
NUM0MUZDQzc3QTEzNTEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA1lg/7YhxJi8mtOlNPMv4//O+nhAkzwHNBQlcBEpm5XWT/KISrdmD
WKsbnILNkM9doZ7L7N6I9jnXWxnh5C1mqdJ98xIzlxa6e87qFOEx+7PDNPjxSmnc
fGo7ED+JauWRYT9kM+HLXOuSIBO1nUu+V+/I0d7WtbMeFw99M14URZKC4PRTjsCE
kenNbOakaOoxoXW1tn3JUHqOmRifLg4kvfpad/4POUwzzwg2DyJaDaCKL2MomleX
siionbCbQciQTkcMOui4gMvbgqxttAzYTMA9ZT75eOQc9QXMkrrXj1BgFjen9UQx
yp0/ZF6FGm1Ip2OL0Q8YkSyMXEH8x3oTUQIDAQABo4ICSjCCAkYwHQYDVR0OBBYE
FCgcmdAy7T4PMN0R11wN5sUCW2xRMB8GA1UdIwQYMBaAFIOdKL5kz/plHUj8EyhE
EG2gJEnSMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dVUjRKZWR2WlNuYjho
S21NVWdRNjg3YjRNWFhtMzVtU1pETUxRTkhTRnBwLzAvODM5RDI4QkU2NENGRkE2
NTFENDhGQzEzMjg0NDEwNkRBMDI0NDlEMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84MzlEMjhCRTY0Q0ZGQTY1MUQ0OEZDMTMyODQ0MTA2REEwMjQ0
OUQyLmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVVI0SmVkdlpTbmI4aEttTVVn
UTY4N2I0TVhYbTM1bVNaRE1MUU5IU0ZwcC8wLzMyMzAzMDJlMzEzNzM4MmUzMDJl
MzAyZjMxMzYyZDMxMzYyMDNkM2UyMDM0MzIzMzMwLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAyLIwDQYJ
KoZIhvcNAQELBQADggEBAHEWuXXH0Z3mpumq2HRkjlzzDFN7mAYrH5f6/DscGMhW
Y3xKliM0pWNQ1evaF/OZEUdtpntUJBWu2HxXWboCJjYoSsXi4nOjOdBrBBgTmRyz
G+4kiRTs/JAZX8vQpQ18HRdu2o+UWNMZ+ALklyDKJknu1lzkltNxsja9KqR12olE
h2gVHJ446oJ1hshIDbNseUd/WcxxWnxbx0o9iV/KtciLSShlaskE+nP6HA6vwoyt
6+90LWNmC8sC4G3tuOC+x7rwjaRlJ/N5XbfMxRouwIT+YRbI4xRLYc+VKoAvrgfB
CJ0jsiQSOpPAfGOCoZ9uCeEVRiETjVq4YyeLFT4KBwo=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org