Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3234332e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3234332e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          9SVqMVo3TYn/qBh4DtVyrmx/o8VgX/tokOzYz00UurI=
Subject key identifier:   A1:5F:DF:E6:78:32:CF:17:F8:80:74:86:40:37:F5:DB:E8:B4:67:67
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       65A62F2FCA9DD7C7D98870C4048CEFFB22F92753
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3234332e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:09 +0000
ROA not before:           Wed 11 Oct 2023 19:55:09 +0000
ROA not after:            Wed 09 Oct 2024 20:00:09 +0000
asID:                     4230
IP address blocks:        200.243.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:a6:2f:2f:ca:9d:d7:c7:d9:88:70:c4:04:8c:ef:fb:22:f9:27:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:09 2023 GMT
            Not After : Oct  9 20:00:09 2024 GMT
        Subject: CN=3082010A02820101009B68900E9626C53E994F9E7504E7E035BB93175BE89C9692A213B502E6F01BE9B4F3051035A060EB8FFBC91FE54EBBF285431855F7BA74FDFDB3FE1AAA7E6A4220464C9A0FC4670F594629E4CFFB4DADA09FF5D8C9C1C9DE537109B1A1868C42332CF0A8EC490D3B46DF15596A0620CA933DA87A3985BF75B0B12AABBDD0B51829742B8A24AA77D51BDA57FB6B5F3CB4DC0FC1665A623BCA8CF2865CC7DB9B35E4AFDA14B5B8B71639D4B8BE31BC16F764DFBEBD438E91178D7EEDC36C3652B0904013782591E8BF1E12FFE91A62811580C6290922A86917D84F97E3041862287D11161EF9053B5AD31F55CD1B72457B7FFC50F2529E38483ADA5335C118E4850203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:68:90:0e:96:26:c5:3e:99:4f:9e:75:04:e7:
                    e0:35:bb:93:17:5b:e8:9c:96:92:a2:13:b5:02:e6:
                    f0:1b:e9:b4:f3:05:10:35:a0:60:eb:8f:fb:c9:1f:
                    e5:4e:bb:f2:85:43:18:55:f7:ba:74:fd:fd:b3:fe:
                    1a:aa:7e:6a:42:20:46:4c:9a:0f:c4:67:0f:59:46:
                    29:e4:cf:fb:4d:ad:a0:9f:f5:d8:c9:c1:c9:de:53:
                    71:09:b1:a1:86:8c:42:33:2c:f0:a8:ec:49:0d:3b:
                    46:df:15:59:6a:06:20:ca:93:3d:a8:7a:39:85:bf:
                    75:b0:b1:2a:ab:bd:d0:b5:18:29:74:2b:8a:24:aa:
                    77:d5:1b:da:57:fb:6b:5f:3c:b4:dc:0f:c1:66:5a:
                    62:3b:ca:8c:f2:86:5c:c7:db:9b:35:e4:af:da:14:
                    b5:b8:b7:16:39:d4:b8:be:31:bc:16:f7:64:df:be:
                    bd:43:8e:91:17:8d:7e:ed:c3:6c:36:52:b0:90:40:
                    13:78:25:91:e8:bf:1e:12:ff:e9:1a:62:81:15:80:
                    c6:29:09:22:a8:69:17:d8:4f:97:e3:04:18:62:28:
                    7d:11:16:1e:f9:05:3b:5a:d3:1f:55:cd:1b:72:45:
                    7b:7f:fc:50:f2:52:9e:38:48:3a:da:53:35:c1:18:
                    e4:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:5F:DF:E6:78:32:CF:17:F8:80:74:86:40:37:F5:DB:E8:B4:67:67
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3234332e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.243.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         36:51:43:1d:17:b1:20:d1:b5:7b:84:68:4d:87:90:6d:f4:49:
         c6:33:cf:3e:b4:25:8c:2b:9e:b0:52:d2:22:a3:c8:b0:84:46:
         77:44:37:ac:1e:7a:ff:a0:d6:ca:90:6f:99:7b:dd:f3:19:b6:
         f7:20:2a:32:0c:e3:8c:e8:2f:d0:c8:54:43:1e:c7:17:6d:18:
         25:fa:9e:ec:1a:9c:a5:f0:eb:b2:5f:40:20:85:30:69:bd:6b:
         df:b5:22:47:8b:c3:f9:92:fa:73:16:90:4a:63:83:91:d4:56:
         5f:62:b2:cb:e7:f5:df:4c:9c:3d:25:57:57:44:aa:85:5b:a5:
         3d:a9:dc:8c:cd:90:74:00:7c:9d:61:38:94:f6:39:57:01:e8:
         32:67:9a:ba:e1:fc:2b:75:4e:fe:62:e8:bf:53:f2:fd:86:96:
         cb:a0:90:4d:73:7c:dc:50:8f:66:01:8f:b5:b5:4e:7d:c2:63:
         03:e9:72:f7:f0:4d:c7:b4:86:f6:e7:95:17:35:9f:0d:07:7f:
         c4:e1:e8:23:f0:17:61:02:1f:1c:95:87:41:48:ae:82:e6:f3:
         db:3c:35:f3:52:9b:63:5b:55:88:6c:5a:14:eb:28:00:66:8f:
         ac:df:8b:59:ba:63:d6:98:83:5f:11:42:c7:fe:68:7e:38:12:
         3d:fa:f9:0b
-----BEGIN CERTIFICATE-----
MIIHPDCCBiSgAwIBAgIUZaYvL8qd18fZiHDEBIzv+yL5J1MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODM5RDI4QkU2NENGRkE2NTFENDhGQzEzMjg0NDEwNkRB
MDI0NDlEMjAeFw0yMzEwMTExOTU1MDlaFw0yNDEwMDkyMDAwMDlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOUI2ODkwMEU5NjI2QzUzRTk5
NEY5RTc1MDRFN0UwMzVCQjkzMTc1QkU4OUM5NjkyQTIxM0I1MDJFNkYwMUJFOUI0
RjMwNTEwMzVBMDYwRUI4RkZCQzkxRkU1NEVCQkYyODU0MzE4NTVGN0JBNzRGREZE
QjNGRTFBQUE3RTZBNDIyMDQ2NEM5QTBGQzQ2NzBGNTk0NjI5RTRDRkZCNERBREEw
OUZGNUQ4QzlDMUM5REU1MzcxMDlCMUExODY4QzQyMzMyQ0YwQThFQzQ5MEQzQjQ2
REYxNTU5NkEwNjIwQ0E5MzNEQTg3QTM5ODVCRjc1QjBCMTJBQUJCREQwQjUxODI5
NzQyQjhBMjRBQTc3RDUxQkRBNTdGQjZCNUYzQ0I0REMwRkMxNjY1QTYyM0JDQThD
RjI4NjVDQzdEQjlCMzVFNEFGREExNEI1QjhCNzE2MzlENEI4QkUzMUJDMTZGNzY0
REZCRUJENDM4RTkxMTc4RDdFRURDMzZDMzY1MkIwOTA0MDEzNzgyNTkxRThCRjFF
MTJGRkU5MUE2MjgxMTU4MEM2MjkwOTIyQTg2OTE3RDg0Rjk3RTMwNDE4NjIyODdE
MTExNjFFRjkwNTNCNUFEMzFGNTVDRDFCNzI0NTdCN0ZGQzUwRjI1MjlFMzg0ODNB
REE1MzM1QzExOEU0ODUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAm2iQDpYmxT6ZT551BOfgNbuTF1vonJaSohO1AubwG+m08wUQNaBg
64/7yR/lTrvyhUMYVfe6dP39s/4aqn5qQiBGTJoPxGcPWUYp5M/7Ta2gn/XYycHJ
3lNxCbGhhoxCMyzwqOxJDTtG3xVZagYgypM9qHo5hb91sLEqq73QtRgpdCuKJKp3
1RvaV/trXzy03A/BZlpiO8qM8oZcx9ubNeSv2hS1uLcWOdS4vjG8Fvdk3769Q46R
F41+7cNsNlKwkEATeCWR6L8eEv/pGmKBFYDGKQkiqGkX2E+X4wQYYih9ERYe+QU7
WtMfVc0bckV7f/xQ8lKeOEg62lM1wRjkhQIDAQABo4ICSjCCAkYwHQYDVR0OBBYE
FKFf3+Z4Ms8X+IB0hkA39dvotGdnMB8GA1UdIwQYMBaAFIOdKL5kz/plHUj8EyhE
EG2gJEnSMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dVUjRKZWR2WlNuYjho
S21NVWdRNjg3YjRNWFhtMzVtU1pETUxRTkhTRnBwLzAvODM5RDI4QkU2NENGRkE2
NTFENDhGQzEzMjg0NDEwNkRBMDI0NDlEMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84MzlEMjhCRTY0Q0ZGQTY1MUQ0OEZDMTMyODQ0MTA2REEwMjQ0
OUQyLmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVVI0SmVkdlpTbmI4aEttTVVn
UTY4N2I0TVhYbTM1bVNaRE1MUU5IU0ZwcC8wLzMyMzAzMDJlMzIzNDMzMmUzMDJl
MzAyZjMxMzYyZDMxMzYyMDNkM2UyMDM0MzIzMzMwLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAyPMwDQYJ
KoZIhvcNAQELBQADggEBADZRQx0XsSDRtXuEaE2HkG30ScYzzz60JYwrnrBS0iKj
yLCERndEN6weev+g1sqQb5l73fMZtvcgKjIM44zoL9DIVEMexxdtGCX6nuwanKXw
67JfQCCFMGm9a9+1IkeLw/mS+nMWkEpjg5HUVl9issvn9d9MnD0lV1dEqoVbpT2p
3IzNkHQAfJ1hOJT2OVcB6DJnmrrh/Ct1Tv5i6L9T8v2GlsugkE1zfNxQj2YBj7W1
Tn3CYwPpcvfwTce0hvbnlRc1nw0Hf8Th6CPwF2ECHxyVh0FIroLm89s8NfNSm2Nb
VYhsWhTrKABmj6zfi1m6Y9aYg18RQsf+aH44Ej36+Qs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org