Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3234372e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3234372e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          4iH37rnr/39I5K5axxqTkIH71ugtmx8ZkwfDXCsoH/0=
Subject key identifier:   82:42:EB:C2:21:1E:4C:D0:13:46:66:27:E0:C9:BB:E8:BD:68:95:DB
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       22DC496BF16755D84C8D4E838EF915DA4C1CF4F5
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3234372e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:01 +0000
ROA not before:           Wed 11 Oct 2023 19:55:01 +0000
ROA not after:            Wed 09 Oct 2024 20:00:01 +0000
asID:                     4230
IP address blocks:        200.247.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:dc:49:6b:f1:67:55:d8:4c:8d:4e:83:8e:f9:15:da:4c:1c:f4:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:01 2023 GMT
            Not After : Oct  9 20:00:01 2024 GMT
        Subject: CN=3082010A0282010100A85EA35225F0EDD5EE71B6C4D67BBD27626CF4B72AB47D330E65442C403D855D8437D648878FB7B04B6E8E2648212F411A1B800820CF6827CDE687318660B330441BD51A0D84D156E7E6FD863EC05CE27801BDC7A3A73687612D0982A5AEFDE554E989E3D568F4E2618822B276E0DE08A32BC63E89AC5E24BF4CFF2D66F6834B631C5F4C60DC905DB3473C6BA42DDD216A3BC396C45DF505068B4BDC9136FA215815BC856DD2F3431ED9174B7C137D303FB127B3B75B48E6A562EDBE2687063AE220C8F977913BD3EF3107F51D0E4098F4AF66A5A515E4EC68F9FC775F16184CE19791253F0F42FE8147B621E8C1A9831DED138E278EE1780DD82F598DDB9AC30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5e:a3:52:25:f0:ed:d5:ee:71:b6:c4:d6:7b:
                    bd:27:62:6c:f4:b7:2a:b4:7d:33:0e:65:44:2c:40:
                    3d:85:5d:84:37:d6:48:87:8f:b7:b0:4b:6e:8e:26:
                    48:21:2f:41:1a:1b:80:08:20:cf:68:27:cd:e6:87:
                    31:86:60:b3:30:44:1b:d5:1a:0d:84:d1:56:e7:e6:
                    fd:86:3e:c0:5c:e2:78:01:bd:c7:a3:a7:36:87:61:
                    2d:09:82:a5:ae:fd:e5:54:e9:89:e3:d5:68:f4:e2:
                    61:88:22:b2:76:e0:de:08:a3:2b:c6:3e:89:ac:5e:
                    24:bf:4c:ff:2d:66:f6:83:4b:63:1c:5f:4c:60:dc:
                    90:5d:b3:47:3c:6b:a4:2d:dd:21:6a:3b:c3:96:c4:
                    5d:f5:05:06:8b:4b:dc:91:36:fa:21:58:15:bc:85:
                    6d:d2:f3:43:1e:d9:17:4b:7c:13:7d:30:3f:b1:27:
                    b3:b7:5b:48:e6:a5:62:ed:be:26:87:06:3a:e2:20:
                    c8:f9:77:91:3b:d3:ef:31:07:f5:1d:0e:40:98:f4:
                    af:66:a5:a5:15:e4:ec:68:f9:fc:77:5f:16:18:4c:
                    e1:97:91:25:3f:0f:42:fe:81:47:b6:21:e8:c1:a9:
                    83:1d:ed:13:8e:27:8e:e1:78:0d:d8:2f:59:8d:db:
                    9a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:42:EB:C2:21:1E:4C:D0:13:46:66:27:E0:C9:BB:E8:BD:68:95:DB
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3234372e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.247.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         51:c1:be:26:83:f7:6d:97:8b:28:af:78:70:4c:32:9a:c3:9c:
         a4:41:b0:5b:8a:4b:46:da:84:97:e1:b5:3d:e8:63:34:57:87:
         2b:b2:1e:6a:e2:94:9f:3b:71:b0:bf:44:94:f7:38:14:b1:9f:
         ae:1c:f5:12:2d:fe:76:ef:77:61:9e:e8:20:3b:f2:11:c1:52:
         03:d8:7f:f5:b1:7a:08:f3:ee:72:e4:fa:32:d5:cf:6b:34:a1:
         1b:49:1e:73:c9:07:be:ac:cb:c1:9c:35:ff:81:e3:36:64:f2:
         19:52:8e:26:a0:1b:9e:74:ae:0b:1b:a2:8d:7a:1f:9a:2f:5c:
         b5:ce:12:f9:63:76:9c:bf:82:9a:33:3c:f3:3e:f6:86:5e:d2:
         5f:a4:7e:48:8f:82:ad:4c:6e:82:0b:ec:db:65:51:3e:bb:d6:
         6b:ef:aa:ed:d0:4f:1c:cc:73:51:c4:59:41:87:b3:6a:b3:3d:
         4a:da:8e:48:d9:ba:99:30:af:a7:10:91:0d:36:e7:da:35:80:
         4d:a9:a9:ac:4f:45:0c:b0:51:49:99:ea:4a:ad:f9:d9:a9:68:
         95:24:ac:40:d7:39:ca:59:f4:a7:4e:2d:58:48:0e:30:e2:6e:
         60:e3:19:ef:bd:19:f9:65:f6:62:da:7c:3f:52:f6:56:bc:40:
         d3:27:5f:9b
-----BEGIN CERTIFICATE-----
MIIHPDCCBiSgAwIBAgIUItxJa/FnVdhMjU6DjvkV2kwc9PUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODM5RDI4QkU2NENGRkE2NTFENDhGQzEzMjg0NDEwNkRB
MDI0NDlEMjAeFw0yMzEwMTExOTU1MDFaFw0yNDEwMDkyMDAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTg1RUEzNTIyNUYwRURENUVF
NzFCNkM0RDY3QkJEMjc2MjZDRjRCNzJBQjQ3RDMzMEU2NTQ0MkM0MDNEODU1RDg0
MzdENjQ4ODc4RkI3QjA0QjZFOEUyNjQ4MjEyRjQxMUExQjgwMDgyMENGNjgyN0NE
RTY4NzMxODY2MEIzMzA0NDFCRDUxQTBEODREMTU2RTdFNkZEODYzRUMwNUNFMjc4
MDFCREM3QTNBNzM2ODc2MTJEMDk4MkE1QUVGREU1NTRFOTg5RTNENTY4RjRFMjYx
ODgyMkIyNzZFMERFMDhBMzJCQzYzRTg5QUM1RTI0QkY0Q0ZGMkQ2NkY2ODM0QjYz
MUM1RjRDNjBEQzkwNURCMzQ3M0M2QkE0MkRERDIxNkEzQkMzOTZDNDVERjUwNTA2
OEI0QkRDOTEzNkZBMjE1ODE1QkM4NTZERDJGMzQzMUVEOTE3NEI3QzEzN0QzMDNG
QjEyN0IzQjc1QjQ4RTZBNTYyRURCRTI2ODcwNjNBRTIyMEM4Rjk3NzkxM0JEM0VG
MzEwN0Y1MUQwRTQwOThGNEFGNjZBNUE1MTVFNEVDNjhGOUZDNzc1RjE2MTg0Q0Ux
OTc5MTI1M0YwRjQyRkU4MTQ3QjYyMUU4QzFBOTgzMURFRDEzOEUyNzhFRTE3ODBE
RDgyRjU5OEREQjlBQzMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAqF6jUiXw7dXucbbE1nu9J2Js9LcqtH0zDmVELEA9hV2EN9ZIh4+3
sEtujiZIIS9BGhuACCDPaCfN5ocxhmCzMEQb1RoNhNFW5+b9hj7AXOJ4Ab3Ho6c2
h2EtCYKlrv3lVOmJ49Vo9OJhiCKyduDeCKMrxj6JrF4kv0z/LWb2g0tjHF9MYNyQ
XbNHPGukLd0hajvDlsRd9QUGi0vckTb6IVgVvIVt0vNDHtkXS3wTfTA/sSezt1tI
5qVi7b4mhwY64iDI+XeRO9PvMQf1HQ5AmPSvZqWlFeTsaPn8d18WGEzhl5ElPw9C
/oFHtiHowamDHe0TjieO4XgN2C9ZjduawwIDAQABo4ICSjCCAkYwHQYDVR0OBBYE
FIJC68IhHkzQE0ZmJ+DJu+i9aJXbMB8GA1UdIwQYMBaAFIOdKL5kz/plHUj8EyhE
EG2gJEnSMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dVUjRKZWR2WlNuYjho
S21NVWdRNjg3YjRNWFhtMzVtU1pETUxRTkhTRnBwLzAvODM5RDI4QkU2NENGRkE2
NTFENDhGQzEzMjg0NDEwNkRBMDI0NDlEMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84MzlEMjhCRTY0Q0ZGQTY1MUQ0OEZDMTMyODQ0MTA2REEwMjQ0
OUQyLmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVVI0SmVkdlpTbmI4aEttTVVn
UTY4N2I0TVhYbTM1bVNaRE1MUU5IU0ZwcC8wLzMyMzAzMDJlMzIzNDM3MmUzMDJl
MzAyZjMxMzYyZDMxMzYyMDNkM2UyMDM0MzIzMzMwLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAyPcwDQYJ
KoZIhvcNAQELBQADggEBAFHBviaD922XiyiveHBMMprDnKRBsFuKS0bahJfhtT3o
YzRXhyuyHmrilJ87cbC/RJT3OBSxn64c9RIt/nbvd2Ge6CA78hHBUgPYf/Wxegjz
7nLk+jLVz2s0oRtJHnPJB76sy8GcNf+B4zZk8hlSjiagG550rgsboo16H5ovXLXO
Evljdpy/gpozPPM+9oZe0l+kfkiPgq1MboIL7NtlUT671mvvqu3QTxzMc1HEWUGH
s2qzPUrajkjZupkwr6cQkQ0259o1gE2pqaxPRQywUUmZ6kqt+dmpaJUkrEDXOcpZ
9KdOLVhIDjDibmDjGe+9Gfll9mLafD9S9la8QNMnX5s=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org