Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3234362e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3234362e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          cVL9Zvy9ZJjVxdqmStQ7b9XzE81dTYLuWZADbPTp3os=
Subject key identifier:   4E:AB:E6:06:54:15:67:A3:3F:6D:D5:48:B8:2E:5F:CD:3A:EC:3E:B2
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       7ACF274B20B55E24A6C69DA6B28CEF176AFA9CCF
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3234362e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:05 +0000
ROA not before:           Wed 11 Oct 2023 19:55:05 +0000
ROA not after:            Wed 09 Oct 2024 20:00:05 +0000
asID:                     4230
IP address blocks:        200.246.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:cf:27:4b:20:b5:5e:24:a6:c6:9d:a6:b2:8c:ef:17:6a:fa:9c:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:05 2023 GMT
            Not After : Oct  9 20:00:05 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:de:97:3b:db:d9:32:59:ba:86:04:48:f9:53:
                    bf:6d:1c:7a:6a:70:e3:e3:f0:c0:8c:a1:f4:77:18:
                    f4:5f:59:ca:74:04:96:bc:a2:00:7b:82:13:7a:6e:
                    bb:7d:e8:cb:9c:62:4f:ce:31:0b:49:da:4e:c8:0a:
                    60:39:a2:f3:39:a0:5a:bb:3e:ab:66:bd:86:ea:36:
                    74:34:61:5e:82:4c:22:17:d1:f6:3b:38:fa:78:37:
                    19:4e:50:5c:ca:70:2a:b0:95:a2:27:32:d7:82:5d:
                    f8:9e:d8:ea:a5:75:9f:6b:68:5a:bb:54:4e:c5:02:
                    c0:3d:5b:7b:01:52:7f:45:68:dd:36:de:b1:d8:48:
                    81:55:db:85:a2:f7:d9:29:a0:8a:51:ac:34:e0:28:
                    18:a6:7f:df:a3:30:db:fa:53:a8:7e:61:46:80:1a:
                    be:e9:83:92:56:9e:7f:16:d6:cd:70:dc:bf:a0:1b:
                    9d:a9:b8:b6:1a:63:03:25:1f:0e:77:89:4f:f4:35:
                    50:37:62:0b:ad:af:0c:69:a0:97:9f:a7:88:d9:76:
                    64:41:11:f6:62:2d:87:ea:4a:d6:90:64:42:5f:58:
                    02:96:4e:69:75:84:34:ea:9b:e9:92:64:08:26:51:
                    32:6f:7c:01:ae:88:79:c3:0d:02:46:05:c9:f4:44:
                    02:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:AB:E6:06:54:15:67:A3:3F:6D:D5:48:B8:2E:5F:CD:3A:EC:3E:B2
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3234362e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.246.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         bb:75:7e:bb:d6:46:0a:a8:53:19:de:03:af:d4:88:84:0a:83:
         3c:21:d7:da:e6:a9:e0:c9:1e:5a:c9:fc:51:f4:6e:d4:0c:d1:
         15:ac:3f:f8:5b:73:98:60:3f:17:00:73:d2:a1:84:8f:00:01:
         78:0d:04:56:07:37:c9:92:b7:09:c0:92:39:ea:66:36:0d:ed:
         08:d5:d1:5b:4e:0b:63:d7:60:fb:6b:68:d6:60:a8:cf:57:7f:
         5c:94:ba:9c:57:0e:73:79:ad:fe:70:5b:64:36:09:ec:81:21:
         10:3d:12:e9:c5:98:fb:a1:4e:e6:f5:07:cc:00:63:b9:5e:f9:
         3e:20:00:02:a4:66:28:e1:a7:ba:a8:ba:16:8f:1a:d2:f4:4c:
         4d:04:71:42:28:76:36:61:c0:1c:17:eb:5b:9a:4a:24:9c:80:
         2f:88:dd:98:2e:d0:4d:0f:37:fc:68:01:78:04:47:5a:11:42:
         7b:8a:df:f4:47:08:52:73:34:a4:ae:df:84:2e:8a:8e:83:ce:
         6a:9f:12:a4:27:f9:07:bd:a9:5a:d0:da:c7:0b:85:6e:3f:d9:
         ba:0f:c3:70:a2:58:8b:0a:8e:b9:ff:b7:40:cb:1c:1a:96:a5:
         d3:7b:93:ab:9b:c2:d6:38:e2:ec:55:45:e6:db:ef:69:e8:42:
         e5:ff:b7:ce
-----BEGIN CERTIFICATE-----
MIIHPDCCBiSgAwIBAgIUes8nSyC1XiSmxp2msozvF2r6nM8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODM5RDI4QkU2NENGRkE2NTFENDhGQzEzMjg0NDEwNkRB
MDI0NDlEMjAeFw0yMzEwMTExOTU1MDVaFw0yNDEwMDkyMDAwMDVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0ZERTk3M0JEQkQ5MzI1OUJB
ODYwNDQ4Rjk1M0JGNkQxQzdBNkE3MEUzRTNGMEMwOENBMUY0NzcxOEY0NUY1OUNB
NzQwNDk2QkNBMjAwN0I4MjEzN0E2RUJCN0RFOENCOUM2MjRGQ0UzMTBCNDlEQTRF
QzgwQTYwMzlBMkYzMzlBMDVBQkIzRUFCNjZCRDg2RUEzNjc0MzQ2MTVFODI0QzIy
MTdEMUY2M0IzOEZBNzgzNzE5NEU1MDVDQ0E3MDJBQjA5NUEyMjczMkQ3ODI1REY4
OUVEOEVBQTU3NTlGNkI2ODVBQkI1NDRFQzUwMkMwM0Q1QjdCMDE1MjdGNDU2OERE
MzZERUIxRDg0ODgxNTVEQjg1QTJGN0Q5MjlBMDhBNTFBQzM0RTAyODE4QTY3RkRG
QTMzMERCRkE1M0E4N0U2MTQ2ODAxQUJFRTk4MzkyNTY5RTdGMTZENkNENzBEQ0JG
QTAxQjlEQTlCOEI2MUE2MzAzMjUxRjBFNzc4OTRGRjQzNTUwMzc2MjBCQURBRjBD
NjlBMDk3OUZBNzg4RDk3NjY0NDExMUY2NjIyRDg3RUE0QUQ2OTA2NDQyNUY1ODAy
OTY0RTY5NzU4NDM0RUE5QkU5OTI2NDA4MjY1MTMyNkY3QzAxQUU4ODc5QzMwRDAy
NDYwNUM5RjQ0NDAyQkYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAz96XO9vZMlm6hgRI+VO/bRx6anDj4/DAjKH0dxj0X1nKdASWvKIA
e4ITem67fejLnGJPzjELSdpOyApgOaLzOaBauz6rZr2G6jZ0NGFegkwiF9H2Ozj6
eDcZTlBcynAqsJWiJzLXgl34ntjqpXWfa2hau1ROxQLAPVt7AVJ/RWjdNt6x2EiB
VduFovfZKaCKUaw04CgYpn/fozDb+lOofmFGgBq+6YOSVp5/FtbNcNy/oBudqbi2
GmMDJR8Od4lP9DVQN2ILra8MaaCXn6eI2XZkQRH2Yi2H6krWkGRCX1gClk5pdYQ0
6pvpkmQIJlEyb3wBroh5ww0CRgXJ9EQCvwIDAQABo4ICSjCCAkYwHQYDVR0OBBYE
FE6r5gZUFWejP23VSLguX8067D6yMB8GA1UdIwQYMBaAFIOdKL5kz/plHUj8EyhE
EG2gJEnSMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dVUjRKZWR2WlNuYjho
S21NVWdRNjg3YjRNWFhtMzVtU1pETUxRTkhTRnBwLzAvODM5RDI4QkU2NENGRkE2
NTFENDhGQzEzMjg0NDEwNkRBMDI0NDlEMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84MzlEMjhCRTY0Q0ZGQTY1MUQ0OEZDMTMyODQ0MTA2REEwMjQ0
OUQyLmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVVI0SmVkdlpTbmI4aEttTVVn
UTY4N2I0TVhYbTM1bVNaRE1MUU5IU0ZwcC8wLzMyMzAzMDJlMzIzNDM2MmUzMDJl
MzAyZjMxMzYyZDMxMzYyMDNkM2UyMDM0MzIzMzMwLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAyPYwDQYJ
KoZIhvcNAQELBQADggEBALt1frvWRgqoUxneA6/UiIQKgzwh19rmqeDJHlrJ/FH0
btQM0RWsP/hbc5hgPxcAc9KhhI8AAXgNBFYHN8mStwnAkjnqZjYN7QjV0VtOC2PX
YPtraNZgqM9Xf1yUupxXDnN5rf5wW2Q2CeyBIRA9EunFmPuhTub1B8wAY7le+T4g
AAKkZijhp7qouhaPGtL0TE0EcUIodjZhwBwX61uaSiScgC+I3Zgu0E0PN/xoAXgE
R1oRQnuK3/RHCFJzNKSu34Quio6DzmqfEqQn+Qe9qVrQ2scLhW4/2boPw3CiWIsK
jrn/t0DLHBqWpdN7k6ubwtY44uxVRebb72noQuX/t84=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org