Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3234382e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3234382e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          +gJ1myQrScIK46Fr70YurYgubYV2NjHEQ/Tqv8J0jMQ=
Subject key identifier:   96:8B:48:6B:29:FA:0A:18:5C:BC:7E:B8:A9:AB:4C:A9:F7:E8:28:30
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       6867B9DBAB50E667A0406FE1230A0021CDA12C61
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3234382e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:01 +0000
ROA not before:           Wed 11 Oct 2023 19:55:01 +0000
ROA not after:            Wed 09 Oct 2024 20:00:01 +0000
asID:                     4230
IP address blocks:        200.248.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:67:b9:db:ab:50:e6:67:a0:40:6f:e1:23:0a:00:21:cd:a1:2c:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:01 2023 GMT
            Not After : Oct  9 20:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:74:b9:1c:7e:b0:ff:7f:39:c3:5c:cc:83:f7:
                    3c:65:a0:3f:2c:0a:6e:32:97:73:c5:0b:a2:48:42:
                    68:ed:72:36:d7:96:3d:42:2d:a4:a9:57:96:63:44:
                    43:f9:97:48:35:8d:56:13:95:38:5a:8e:79:a2:85:
                    c2:b6:de:78:19:76:65:59:44:a2:87:e7:76:6a:76:
                    a5:14:40:17:53:e9:39:a8:e0:38:20:e8:35:a4:5d:
                    cb:6c:ae:9b:6c:03:31:97:d1:90:be:37:e6:e8:9f:
                    57:e0:1d:a6:e6:96:a6:07:22:5d:c6:d2:15:1a:34:
                    06:01:b5:35:ba:3c:b6:88:d6:bc:f0:29:f3:4e:79:
                    13:26:fa:92:c6:c2:aa:42:3a:b6:ef:05:05:e0:a0:
                    4a:ff:16:59:75:df:cb:18:5a:4f:92:a4:67:45:2d:
                    58:62:0c:8f:6f:1e:67:c7:95:95:ac:20:36:77:a6:
                    11:1a:bc:6d:b1:6d:d0:54:1c:eb:f8:87:30:e7:53:
                    b5:56:d9:5c:80:cb:4a:a5:2c:e0:e4:a6:ff:24:74:
                    78:06:57:70:1c:e0:3f:15:c5:2e:da:6d:05:88:df:
                    e0:95:6e:25:d3:8f:ec:df:6f:bb:4d:09:14:4d:dd:
                    48:e6:6d:74:6e:3b:35:1e:24:6e:1a:ef:f8:12:18:
                    a1:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:8B:48:6B:29:FA:0A:18:5C:BC:7E:B8:A9:AB:4C:A9:F7:E8:28:30
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3234382e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.248.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7c:b0:bf:70:fa:0f:78:1a:68:d3:8e:78:ea:99:51:50:76:43:
         07:32:80:f0:2d:d7:8d:4b:cc:87:66:17:4c:a1:0a:ea:6e:d5:
         1b:26:56:35:db:92:72:ca:24:c0:09:1a:1c:37:b9:7e:70:90:
         a5:47:89:d4:c0:7b:65:07:6e:a1:c3:58:c3:4b:eb:60:8d:b2:
         93:b5:47:93:74:41:e3:10:32:94:a5:05:af:70:0b:f9:97:d9:
         9c:bc:8c:34:00:d4:c6:e8:c4:8b:ed:b1:50:3e:5e:ca:93:79:
         b1:5b:57:8b:90:ee:d2:e3:4e:3b:5c:5b:f3:e5:3f:23:5d:f1:
         95:77:5a:13:7b:b0:7d:ec:6a:0a:6e:3c:31:56:5c:f0:16:f7:
         fe:ab:27:14:86:44:00:eb:f1:50:2b:43:c1:e0:54:d0:60:87:
         58:e5:4e:02:69:11:75:89:a3:48:e2:15:b3:59:cc:bf:c3:d1:
         4c:b5:b8:73:58:b5:bf:16:fe:8d:0e:7c:b0:dc:02:d5:45:5c:
         83:7f:9f:ce:63:0c:1c:be:5c:e7:7d:6e:8d:f8:75:eb:98:ce:
         c9:f7:91:46:77:0e:0f:2b:dd:b2:4d:d5:16:26:31:3e:90:38:
         16:7a:df:dd:dc:a1:b7:18:96:66:54:21:78:a2:2a:b4:89:2a:
         9b:5d:06:2b
-----BEGIN CERTIFICATE-----
MIIHPDCCBiSgAwIBAgIUaGe526tQ5megQG/hIwoAIc2hLGEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODM5RDI4QkU2NENGRkE2NTFENDhGQzEzMjg0NDEwNkRB
MDI0NDlEMjAeFw0yMzEwMTExOTU1MDFaFw0yNDEwMDkyMDAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTk3NEI5MUM3RUIwRkY3RjM5
QzM1Q0NDODNGNzNDNjVBMDNGMkMwQTZFMzI5NzczQzUwQkEyNDg0MjY4RUQ3MjM2
RDc5NjNENDIyREE0QTk1Nzk2NjM0NDQzRjk5NzQ4MzU4RDU2MTM5NTM4NUE4RTc5
QTI4NUMyQjZERTc4MTk3NjY1NTk0NEEyODdFNzc2NkE3NkE1MTQ0MDE3NTNFOTM5
QThFMDM4MjBFODM1QTQ1RENCNkNBRTlCNkMwMzMxOTdEMTkwQkUzN0U2RTg5RjU3
RTAxREE2RTY5NkE2MDcyMjVEQzZEMjE1MUEzNDA2MDFCNTM1QkEzQ0I2ODhENkJD
RjAyOUYzNEU3OTEzMjZGQTkyQzZDMkFBNDIzQUI2RUYwNTA1RTBBMDRBRkYxNjU5
NzVERkNCMTg1QTRGOTJBNDY3NDUyRDU4NjIwQzhGNkYxRTY3Qzc5NTk1QUMyMDM2
NzdBNjExMUFCQzZEQjE2REQwNTQxQ0VCRjg4NzMwRTc1M0I1NTZEOTVDODBDQjRB
QTUyQ0UwRTRBNkZGMjQ3NDc4MDY1NzcwMUNFMDNGMTVDNTJFREE2RDA1ODhERkUw
OTU2RTI1RDM4RkVDREY2RkJCNEQwOTE0NERERDQ4RTY2RDc0NkUzQjM1MUUyNDZF
MUFFRkY4MTIxOEExRTcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAqXS5HH6w/385w1zMg/c8ZaA/LApuMpdzxQuiSEJo7XI215Y9Qi2k
qVeWY0RD+ZdINY1WE5U4Wo55ooXCtt54GXZlWUSih+d2analFEAXU+k5qOA4IOg1
pF3LbK6bbAMxl9GQvjfm6J9X4B2m5pamByJdxtIVGjQGAbU1ujy2iNa88CnzTnkT
JvqSxsKqQjq27wUF4KBK/xZZdd/LGFpPkqRnRS1YYgyPbx5nx5WVrCA2d6YRGrxt
sW3QVBzr+Icw51O1VtlcgMtKpSzg5Kb/JHR4BldwHOA/FcUu2m0FiN/glW4l04/s
32+7TQkUTd1I5m10bjs1HiRuGu/4Ehih5wIDAQABo4ICSjCCAkYwHQYDVR0OBBYE
FJaLSGsp+goYXLx+uKmrTKn36CgwMB8GA1UdIwQYMBaAFIOdKL5kz/plHUj8EyhE
EG2gJEnSMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dVUjRKZWR2WlNuYjho
S21NVWdRNjg3YjRNWFhtMzVtU1pETUxRTkhTRnBwLzAvODM5RDI4QkU2NENGRkE2
NTFENDhGQzEzMjg0NDEwNkRBMDI0NDlEMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84MzlEMjhCRTY0Q0ZGQTY1MUQ0OEZDMTMyODQ0MTA2REEwMjQ0
OUQyLmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVVI0SmVkdlpTbmI4aEttTVVn
UTY4N2I0TVhYbTM1bVNaRE1MUU5IU0ZwcC8wLzMyMzAzMDJlMzIzNDM4MmUzMDJl
MzAyZjMxMzYyZDMxMzYyMDNkM2UyMDM0MzIzMzMwLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAyPgwDQYJ
KoZIhvcNAQELBQADggEBAHywv3D6D3gaaNOOeOqZUVB2QwcygPAt141LzIdmF0yh
Cupu1RsmVjXbknLKJMAJGhw3uX5wkKVHidTAe2UHbqHDWMNL62CNspO1R5N0QeMQ
MpSlBa9wC/mX2Zy8jDQA1MboxIvtsVA+XsqTebFbV4uQ7tLjTjtcW/PlPyNd8ZV3
WhN7sH3sagpuPDFWXPAW9/6rJxSGRADr8VArQ8HgVNBgh1jlTgJpEXWJo0jiFbNZ
zL/D0Uy1uHNYtb8W/o0OfLDcAtVFXIN/n85jDBy+XOd9bo34deuYzsn3kUZ3Dg8r
3bJN1RYmMT6QOBZ6393cobcYlmZUIXiiKrSJKptdBis=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org