Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3137392e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3137392e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          mTq10KoG3WCsZKps9r8SVhL1nQP1sB2srsAgOy63ozY=
Subject key identifier:   9B:CF:9C:E5:E0:D1:A7:D7:9B:6A:0D:A9:A6:2B:3E:59:82:9D:87:52
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       38AE97B1AE71F80653B76C17CF83FB23AB2810B6
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3137392e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:09 +0000
ROA not before:           Wed 11 Oct 2023 19:55:09 +0000
ROA not after:            Wed 09 Oct 2024 20:00:09 +0000
asID:                     4230
IP address blocks:        200.179.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:ae:97:b1:ae:71:f8:06:53:b7:6c:17:cf:83:fb:23:ab:28:10:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:09 2023 GMT
            Not After : Oct  9 20:00:09 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:be:90:33:1b:97:a4:19:61:8c:b3:a3:46:5b:
                    e4:33:3f:a0:50:db:06:7d:5e:35:e3:f9:2e:2d:03:
                    f8:5e:f2:62:49:fe:7d:a2:1a:5a:a5:02:ae:78:2a:
                    c1:e7:f8:99:aa:4b:6e:53:94:7b:c4:aa:ff:23:c7:
                    dd:a8:94:95:04:e3:6b:cf:9f:19:ae:11:ea:4f:6c:
                    0c:4b:db:de:b6:c8:62:46:5e:aa:96:c5:3d:99:6c:
                    8a:22:30:00:d5:0c:e9:6d:23:79:71:e4:2f:d6:6c:
                    f5:ac:3e:1b:f7:f0:e0:6f:ca:ce:3f:d6:ad:c2:a3:
                    b6:3f:88:99:bc:6b:e4:15:e2:57:f6:2c:44:42:ea:
                    14:2c:a1:bb:f5:90:37:f4:75:b1:e4:07:17:96:7a:
                    18:a0:5e:82:18:22:55:d3:f8:da:53:55:82:ca:3e:
                    fe:e7:89:03:68:8a:61:81:a6:a7:a0:58:77:f6:61:
                    ec:62:ec:16:24:51:24:97:cb:b5:f5:b4:25:29:b8:
                    cf:b5:14:76:4c:56:c7:61:e6:a5:f2:65:59:da:dc:
                    40:4c:83:69:22:71:61:c5:1b:00:86:ef:c9:cd:ef:
                    5c:de:a2:5c:27:e6:31:b9:3f:7c:3d:cb:f4:6d:57:
                    a0:b8:59:78:05:bd:d1:e7:b7:f5:2e:d4:4f:7a:23:
                    05:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:CF:9C:E5:E0:D1:A7:D7:9B:6A:0D:A9:A6:2B:3E:59:82:9D:87:52
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3137392e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.179.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         bd:ce:6f:52:6b:96:9d:16:2a:22:12:57:b7:a9:76:e8:1b:ed:
         f5:f7:e4:72:e3:93:fe:07:f6:45:38:f3:64:14:d5:de:cd:6f:
         e7:5c:db:7e:f3:d7:52:38:1c:d0:4e:96:b6:7f:44:f7:e2:2d:
         91:a3:5d:23:9a:ca:d0:8e:27:5a:f8:b3:d2:da:c5:ae:04:5d:
         e3:4c:8a:c3:59:08:6d:13:0a:12:c4:26:92:44:d9:14:dc:1d:
         f1:25:7e:90:a9:1d:6e:89:ae:00:df:f2:75:19:45:c5:4c:ad:
         08:9f:b3:77:3e:6d:75:7e:ae:c9:2d:5c:39:8c:0d:e5:3c:41:
         ea:35:19:a3:d9:2b:45:0e:a8:de:34:44:cf:f3:41:4a:02:ec:
         3c:12:1a:f9:89:0a:f6:7e:1e:e5:55:45:62:8d:f2:3c:a2:fa:
         b7:b9:75:91:f6:3d:1e:99:1c:bc:01:80:77:39:32:25:b5:8e:
         12:80:5a:ec:3a:c8:8a:fa:0a:e2:e5:21:a5:bf:8a:e3:53:46:
         2b:2d:2d:62:19:39:37:46:80:77:db:8d:31:66:f2:34:86:5f:
         86:c7:d1:33:f6:49:f9:0b:16:6f:a1:06:96:cd:8f:87:2e:a9:
         fd:d5:06:01:2b:07:a3:ef:19:7d:6c:17:eb:67:9e:bc:0c:8f:
         f3:09:69:d9
-----BEGIN CERTIFICATE-----
MIIHPDCCBiSgAwIBAgIUOK6Xsa5x+AZTt2wXz4P7I6soELYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODM5RDI4QkU2NENGRkE2NTFENDhGQzEzMjg0NDEwNkRB
MDI0NDlEMjAeFw0yMzEwMTExOTU1MDlaFw0yNDEwMDkyMDAwMDlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTNCRTkwMzMxQjk3QTQxOTYx
OENCM0EzNDY1QkU0MzMzRkEwNTBEQjA2N0Q1RTM1RTNGOTJFMkQwM0Y4NUVGMjYy
NDlGRTdEQTIxQTVBQTUwMkFFNzgyQUMxRTdGODk5QUE0QjZFNTM5NDdCQzRBQUZG
MjNDN0REQTg5NDk1MDRFMzZCQ0Y5RjE5QUUxMUVBNEY2QzBDNEJEQkRFQjZDODYy
NDY1RUFBOTZDNTNEOTk2QzhBMjIzMDAwRDUwQ0U5NkQyMzc5NzFFNDJGRDY2Q0Y1
QUMzRTFCRjdGMEUwNkZDQUNFM0ZENkFEQzJBM0I2M0Y4ODk5QkM2QkU0MTVFMjU3
RjYyQzQ0NDJFQTE0MkNBMUJCRjU5MDM3RjQ3NUIxRTQwNzE3OTY3QTE4QTA1RTgy
MTgyMjU1RDNGOERBNTM1NTgyQ0EzRUZFRTc4OTAzNjg4QTYxODFBNkE3QTA1ODc3
RjY2MUVDNjJFQzE2MjQ1MTI0OTdDQkI1RjVCNDI1MjlCOENGQjUxNDc2NEM1NkM3
NjFFNkE1RjI2NTU5REFEQzQwNEM4MzY5MjI3MTYxQzUxQjAwODZFRkM5Q0RFRjVD
REVBMjVDMjdFNjMxQjkzRjdDM0RDQkY0NkQ1N0EwQjg1OTc4MDVCREQxRTdCN0Y1
MkVENDRGN0EyMzA1MUIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAo76QMxuXpBlhjLOjRlvkMz+gUNsGfV414/kuLQP4XvJiSf59ohpa
pQKueCrB5/iZqktuU5R7xKr/I8fdqJSVBONrz58ZrhHqT2wMS9vetshiRl6qlsU9
mWyKIjAA1QzpbSN5ceQv1mz1rD4b9/Dgb8rOP9atwqO2P4iZvGvkFeJX9ixEQuoU
LKG79ZA39HWx5AcXlnoYoF6CGCJV0/jaU1WCyj7+54kDaIphgaanoFh39mHsYuwW
JFEkl8u19bQlKbjPtRR2TFbHYeal8mVZ2txATINpInFhxRsAhu/Jze9c3qJcJ+Yx
uT98Pcv0bVeguFl4Bb3R57f1LtRPeiMFGwIDAQABo4ICSjCCAkYwHQYDVR0OBBYE
FJvPnOXg0afXm2oNqaYrPlmCnYdSMB8GA1UdIwQYMBaAFIOdKL5kz/plHUj8EyhE
EG2gJEnSMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dVUjRKZWR2WlNuYjho
S21NVWdRNjg3YjRNWFhtMzVtU1pETUxRTkhTRnBwLzAvODM5RDI4QkU2NENGRkE2
NTFENDhGQzEzMjg0NDEwNkRBMDI0NDlEMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84MzlEMjhCRTY0Q0ZGQTY1MUQ0OEZDMTMyODQ0MTA2REEwMjQ0
OUQyLmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVVI0SmVkdlpTbmI4aEttTVVn
UTY4N2I0TVhYbTM1bVNaRE1MUU5IU0ZwcC8wLzMyMzAzMDJlMzEzNzM5MmUzMDJl
MzAyZjMxMzYyZDMxMzYyMDNkM2UyMDM0MzIzMzMwLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAyLMwDQYJ
KoZIhvcNAQELBQADggEBAL3Ob1Jrlp0WKiISV7epdugb7fX35HLjk/4H9kU482QU
1d7Nb+dc237z11I4HNBOlrZ/RPfiLZGjXSOaytCOJ1r4s9Laxa4EXeNMisNZCG0T
ChLEJpJE2RTcHfElfpCpHW6JrgDf8nUZRcVMrQifs3c+bXV+rsktXDmMDeU8Qeo1
GaPZK0UOqN40RM/zQUoC7DwSGvmJCvZ+HuVVRWKN8jyi+re5dZH2PR6ZHLwBgHc5
MiW1jhKAWuw6yIr6CuLlIaW/iuNTRistLWIZOTdGgHfbjTFm8jSGX4bH0TP2SfkL
Fm+hBpbNj4cuqf3VBgErB6PvGX1sF+tnnrwMj/MJadk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org