Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3139312e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3139312e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          iyUAkp7a4YJmqP272eiFc/IPxaSTI0Maz+yJOrOKTvM=
Subject key identifier:   FB:57:28:47:0E:A8:DF:4B:85:D6:B3:15:7A:CA:91:DC:12:7D:83:13
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       720E74059CB62977127227402F2E35663C07DDB9
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3139312e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:05 +0000
ROA not before:           Wed 11 Oct 2023 19:55:05 +0000
ROA not after:            Wed 09 Oct 2024 20:00:05 +0000
asID:                     4230
IP address blocks:        200.191.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:0e:74:05:9c:b6:29:77:12:72:27:40:2f:2e:35:66:3c:07:dd:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:05 2023 GMT
            Not After : Oct  9 20:00:05 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:45:42:0d:66:99:5b:d9:28:bd:4a:92:a5:37:
                    bc:27:14:10:37:1f:0e:de:5d:29:65:c8:81:fc:c9:
                    bd:a5:b6:f5:5f:54:0b:70:8b:04:c3:82:fe:2e:7f:
                    b0:c6:cc:42:68:f6:e9:d4:e7:ed:0b:84:c6:58:95:
                    22:e8:9e:e7:b7:f7:9e:19:6f:3f:da:9e:7a:30:ae:
                    d6:74:9f:d8:ab:fb:d6:e2:f9:f5:35:63:ce:5d:c9:
                    0c:35:90:dc:21:d2:62:7c:02:07:71:ac:54:83:35:
                    db:94:ad:6d:04:85:3e:c6:c9:11:ff:a5:3d:d0:d0:
                    91:36:59:f8:ed:94:7d:88:57:53:90:d9:a0:07:c9:
                    39:ee:08:e3:ef:0c:12:79:67:6c:19:d2:91:8f:4a:
                    b1:5f:1f:c1:bb:28:f5:d3:ac:7c:20:5a:9e:3c:53:
                    e9:7e:9a:e7:29:0d:a0:31:83:fe:5f:1c:be:b9:3a:
                    bc:63:48:9b:4e:68:0d:ec:25:7e:91:5f:81:be:c6:
                    2c:92:22:b7:25:59:0e:12:f8:09:d5:9b:80:36:8d:
                    67:fc:be:91:40:38:e3:98:aa:11:1a:b8:a8:b5:5d:
                    ec:bf:e1:a4:8a:b0:91:fc:ea:38:46:53:e7:e8:1a:
                    37:db:b3:6b:8e:41:2a:22:69:e3:30:c6:e3:8e:8e:
                    c7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:57:28:47:0E:A8:DF:4B:85:D6:B3:15:7A:CA:91:DC:12:7D:83:13
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3139312e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.191.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         86:91:49:8d:eb:5f:76:3a:a2:63:0c:87:08:00:22:f5:b2:b5:
         17:26:1b:d0:4a:14:f3:69:ff:d3:bb:5c:cb:60:23:17:f7:47:
         e1:92:66:ae:cb:aa:24:7e:ce:bf:71:b5:50:8c:47:86:c6:41:
         34:95:45:bb:f2:7d:94:8c:4e:84:0c:3a:d0:70:7e:88:9b:0b:
         3f:e4:90:5e:eb:c1:fb:83:72:59:ef:67:e8:e4:a9:3d:9b:80:
         b5:80:6a:c3:cf:e3:e9:eb:27:a8:d7:34:28:98:9e:5e:cc:8a:
         09:75:ae:89:41:49:e5:3b:13:d8:bd:ff:1d:01:74:dd:c7:81:
         73:a8:e8:62:99:e0:66:1d:41:cc:b3:af:48:06:85:0e:d1:88:
         d2:51:87:7f:27:50:2d:bb:d1:d0:7b:90:a3:8b:60:95:a5:14:
         52:15:4b:bd:bf:17:7e:46:c0:a2:0c:ca:a0:20:f3:68:4b:e1:
         02:e1:62:a9:dc:69:49:77:01:81:5a:d8:d7:21:50:2a:61:1a:
         cd:c8:f1:94:84:2d:d5:10:97:5e:ca:ea:52:45:90:ff:23:d8:
         61:e1:2b:c0:8a:af:58:a3:c6:8f:f7:71:04:5d:bb:99:e3:77:
         47:c6:ab:44:91:2b:47:79:0d:39:30:c4:10:8f:8d:82:8e:ed:
         f4:a6:ad:82
-----BEGIN CERTIFICATE-----
MIIHPDCCBiSgAwIBAgIUcg50BZy2KXcScidALy41ZjwH3bkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODM5RDI4QkU2NENGRkE2NTFENDhGQzEzMjg0NDEwNkRB
MDI0NDlEMjAeFw0yMzEwMTExOTU1MDVaFw0yNDEwMDkyMDAwMDVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTk0NTQyMEQ2Njk5NUJEOTI4
QkQ0QTkyQTUzN0JDMjcxNDEwMzcxRjBFREU1RDI5NjVDODgxRkNDOUJEQTVCNkY1
NUY1NDBCNzA4QjA0QzM4MkZFMkU3RkIwQzZDQzQyNjhGNkU5RDRFN0VEMEI4NEM2
NTg5NTIyRTg5RUU3QjdGNzlFMTk2RjNGREE5RTdBMzBBRUQ2NzQ5RkQ4QUJGQkQ2
RTJGOUY1MzU2M0NFNURDOTBDMzU5MERDMjFEMjYyN0MwMjA3NzFBQzU0ODMzNURC
OTRBRDZEMDQ4NTNFQzZDOTExRkZBNTNERDBEMDkxMzY1OUY4RUQ5NDdEODg1NzUz
OTBEOUEwMDdDOTM5RUUwOEUzRUYwQzEyNzk2NzZDMTlEMjkxOEY0QUIxNUYxRkMx
QkIyOEY1RDNBQzdDMjA1QTlFM0M1M0U5N0U5QUU3MjkwREEwMzE4M0ZFNUYxQ0JF
QjkzQUJDNjM0ODlCNEU2ODBERUMyNTdFOTE1RjgxQkVDNjJDOTIyMkI3MjU1OTBF
MTJGODA5RDU5QjgwMzY4RDY3RkNCRTkxNDAzOEUzOThBQTExMUFCOEE4QjU1REVD
QkZFMUE0OEFCMDkxRkNFQTM4NDY1M0U3RTgxQTM3REJCMzZCOEU0MTJBMjI2OUUz
MzBDNkUzOEU4RUM3Q0QwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAqUVCDWaZW9kovUqSpTe8JxQQNx8O3l0pZciB/Mm9pbb1X1QLcIsE
w4L+Ln+wxsxCaPbp1OftC4TGWJUi6J7nt/eeGW8/2p56MK7WdJ/Yq/vW4vn1NWPO
XckMNZDcIdJifAIHcaxUgzXblK1tBIU+xskR/6U90NCRNln47ZR9iFdTkNmgB8k5
7gjj7wwSeWdsGdKRj0qxXx/Buyj106x8IFqePFPpfprnKQ2gMYP+Xxy+uTq8Y0ib
TmgN7CV+kV+BvsYskiK3JVkOEvgJ1ZuANo1n/L6RQDjjmKoRGriotV3sv+GkirCR
/Oo4RlPn6Bo327NrjkEqImnjMMbjjo7HzQIDAQABo4ICSjCCAkYwHQYDVR0OBBYE
FPtXKEcOqN9LhdazFXrKkdwSfYMTMB8GA1UdIwQYMBaAFIOdKL5kz/plHUj8EyhE
EG2gJEnSMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dVUjRKZWR2WlNuYjho
S21NVWdRNjg3YjRNWFhtMzVtU1pETUxRTkhTRnBwLzAvODM5RDI4QkU2NENGRkE2
NTFENDhGQzEzMjg0NDEwNkRBMDI0NDlEMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84MzlEMjhCRTY0Q0ZGQTY1MUQ0OEZDMTMyODQ0MTA2REEwMjQ0
OUQyLmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVVI0SmVkdlpTbmI4aEttTVVn
UTY4N2I0TVhYbTM1bVNaRE1MUU5IU0ZwcC8wLzMyMzAzMDJlMzEzOTMxMmUzMDJl
MzAyZjMxMzYyZDMxMzYyMDNkM2UyMDM0MzIzMzMwLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAyL8wDQYJ
KoZIhvcNAQELBQADggEBAIaRSY3rX3Y6omMMhwgAIvWytRcmG9BKFPNp/9O7XMtg
Ixf3R+GSZq7LqiR+zr9xtVCMR4bGQTSVRbvyfZSMToQMOtBwfoibCz/kkF7rwfuD
clnvZ+jkqT2bgLWAasPP4+nrJ6jXNCiYnl7Migl1rolBSeU7E9i9/x0BdN3HgXOo
6GKZ4GYdQcyzr0gGhQ7RiNJRh38nUC270dB7kKOLYJWlFFIVS72/F35GwKIMyqAg
82hL4QLhYqncaUl3AYFa2NchUCphGs3I8ZSELdUQl17K6lJFkP8j2GHhK8CKr1ij
xo/3cQRdu5njd0fGq0SRK0d5DTkwxBCPjYKO7fSmrYI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org