Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3235322e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3235322e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          98WyDuA34Pq4x6a5R+ZxoM10O7owZRESiCHq9dGjREc=
Subject key identifier:   A1:71:06:6D:3D:FA:B8:88:7C:B7:42:AC:79:D0:8C:E4:33:F3:A9:EA
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       76A567B6B67701ADF8ECFA0310F5EDEB09B79D9F
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3235322e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:07 +0000
ROA not before:           Wed 11 Oct 2023 19:55:07 +0000
ROA not after:            Wed 09 Oct 2024 20:00:07 +0000
asID:                     4230
IP address blocks:        200.252.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:a5:67:b6:b6:77:01:ad:f8:ec:fa:03:10:f5:ed:eb:09:b7:9d:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:07 2023 GMT
            Not After : Oct  9 20:00:07 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:b4:2c:e1:ba:08:c8:9b:43:1f:60:dc:63:16:
                    2a:69:8c:19:e9:ce:86:40:11:07:f2:e4:7f:a9:6a:
                    c5:db:1d:fa:df:0d:74:e4:d9:e5:da:a5:06:92:a7:
                    fb:97:23:46:94:c8:cc:b5:1b:17:d9:30:6c:da:0a:
                    78:d7:ba:35:ee:c6:08:89:14:b5:9f:f8:8e:01:6e:
                    bc:ec:e5:e5:cb:34:12:07:c0:93:89:07:22:c6:6f:
                    d7:bd:50:0f:64:14:d3:6b:2a:c1:df:54:ad:f0:97:
                    31:b6:b2:ca:f4:db:22:e2:a4:12:de:de:47:1c:55:
                    c8:13:90:0f:2d:06:31:3a:68:41:8b:39:37:e9:83:
                    5e:2c:e1:fd:08:ed:9a:ad:05:34:f2:d0:d9:74:cb:
                    4c:cc:34:ff:79:59:06:93:31:f3:c2:ab:b0:00:47:
                    47:e5:3c:d8:fc:e9:50:78:2c:51:2c:17:19:85:b2:
                    36:28:09:36:59:92:60:cb:6f:68:bf:95:a2:fb:40:
                    83:80:60:69:e0:5b:9b:b3:6d:09:e3:76:4d:8d:d5:
                    ba:97:0e:30:04:80:e4:db:37:14:6d:b0:ec:9c:ff:
                    ec:71:ed:a2:91:d4:5b:f5:ef:85:6d:82:e5:2e:6c:
                    de:ed:a9:4c:6a:e6:f7:52:c5:29:60:a1:7a:c1:64:
                    a4:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:71:06:6D:3D:FA:B8:88:7C:B7:42:AC:79:D0:8C:E4:33:F3:A9:EA
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3235322e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.252.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         63:ce:73:ce:2a:9d:c7:c3:ab:0b:f3:b1:be:cb:fe:26:1b:11:
         9d:b7:ed:ef:62:c3:bd:6d:05:8f:3e:80:d7:24:f0:d6:e1:d0:
         89:71:c7:8a:1c:ae:ec:20:76:bc:58:24:7e:a1:d0:53:a3:b8:
         9e:75:97:fa:21:b2:11:49:81:bf:4a:a5:e8:1b:ca:30:fc:19:
         66:d2:c7:6f:0f:dd:e6:20:e1:94:3f:af:4b:8b:00:b0:98:22:
         80:93:70:32:0b:2a:06:38:c3:a2:da:f2:57:4f:9a:59:a7:18:
         52:90:f2:43:45:ad:c0:f1:fc:ae:ba:da:97:a6:a3:d7:a1:b1:
         cb:ed:e1:e4:fc:63:28:ee:98:91:4c:e3:4c:40:9f:62:e2:8a:
         73:28:9e:ca:d9:ea:d8:5d:46:90:8d:53:e2:7c:1c:45:16:ad:
         d4:e2:20:af:99:f6:6a:5b:df:b8:23:92:5f:e7:eb:db:2b:b3:
         85:70:6b:8f:10:7b:d3:b2:16:dd:b3:5c:d5:24:6a:a8:94:19:
         bb:a5:1f:0e:cd:3e:d6:f7:73:65:cd:9c:01:5f:1a:8e:16:a3:
         08:4a:25:14:ce:ac:de:07:ab:b3:3e:67:8f:c2:bf:0f:fa:d1:
         7f:1b:99:65:34:44:71:79:59:5c:2c:88:06:94:2f:8b:f3:5a:
         18:56:45:e9
-----BEGIN CERTIFICATE-----
MIIHPDCCBiSgAwIBAgIUdqVntrZ3Aa347PoDEPXt6wm3nZ8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODM5RDI4QkU2NENGRkE2NTFENDhGQzEzMjg0NDEwNkRB
MDI0NDlEMjAeFw0yMzEwMTExOTU1MDdaFw0yNDEwMDkyMDAwMDdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTZCNDJDRTFCQTA4Qzg5QjQz
MUY2MERDNjMxNjJBNjk4QzE5RTlDRTg2NDAxMTA3RjJFNDdGQTk2QUM1REIxREZB
REYwRDc0RTREOUU1REFBNTA2OTJBN0ZCOTcyMzQ2OTRDOENDQjUxQjE3RDkzMDZD
REEwQTc4RDdCQTM1RUVDNjA4ODkxNEI1OUZGODhFMDE2RUJDRUNFNUU1Q0IzNDEy
MDdDMDkzODkwNzIyQzY2RkQ3QkQ1MDBGNjQxNEQzNkIyQUMxREY1NEFERjA5NzMx
QjZCMkNBRjREQjIyRTJBNDEyREVERTQ3MUM1NUM4MTM5MDBGMkQwNjMxM0E2ODQx
OEIzOTM3RTk4MzVFMkNFMUZEMDhFRDlBQUQwNTM0RjJEMEQ5NzRDQjRDQ0MzNEZG
Nzk1OTA2OTMzMUYzQzJBQkIwMDA0NzQ3RTUzQ0Q4RkNFOTUwNzgyQzUxMkMxNzE5
ODVCMjM2MjgwOTM2NTk5MjYwQ0I2RjY4QkY5NUEyRkI0MDgzODA2MDY5RTA1QjlC
QjM2RDA5RTM3NjREOERENUJBOTcwRTMwMDQ4MEU0REIzNzE0NkRCMEVDOUNGRkVD
NzFFREEyOTFENDVCRjVFRjg1NkQ4MkU1MkU2Q0RFRURBOTRDNkFFNkY3NTJDNTI5
NjBBMTdBQzE2NEE0RkIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA5rQs4boIyJtDH2DcYxYqaYwZ6c6GQBEH8uR/qWrF2x363w105Nnl
2qUGkqf7lyNGlMjMtRsX2TBs2gp417o17sYIiRS1n/iOAW687OXlyzQSB8CTiQci
xm/XvVAPZBTTayrB31St8JcxtrLK9Nsi4qQS3t5HHFXIE5APLQYxOmhBizk36YNe
LOH9CO2arQU08tDZdMtMzDT/eVkGkzHzwquwAEdH5TzY/OlQeCxRLBcZhbI2KAk2
WZJgy29ov5Wi+0CDgGBp4Fubs20J43ZNjdW6lw4wBIDk2zcUbbDsnP/sce2ikdRb
9e+FbYLlLmze7alMaub3UsUpYKF6wWSk+wIDAQABo4ICSjCCAkYwHQYDVR0OBBYE
FKFxBm09+riIfLdCrHnQjOQz86nqMB8GA1UdIwQYMBaAFIOdKL5kz/plHUj8EyhE
EG2gJEnSMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dVUjRKZWR2WlNuYjho
S21NVWdRNjg3YjRNWFhtMzVtU1pETUxRTkhTRnBwLzAvODM5RDI4QkU2NENGRkE2
NTFENDhGQzEzMjg0NDEwNkRBMDI0NDlEMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84MzlEMjhCRTY0Q0ZGQTY1MUQ0OEZDMTMyODQ0MTA2REEwMjQ0
OUQyLmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVVI0SmVkdlpTbmI4aEttTVVn
UTY4N2I0TVhYbTM1bVNaRE1MUU5IU0ZwcC8wLzMyMzAzMDJlMzIzNTMyMmUzMDJl
MzAyZjMxMzYyZDMxMzYyMDNkM2UyMDM0MzIzMzMwLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAyPwwDQYJ
KoZIhvcNAQELBQADggEBAGPOc84qncfDqwvzsb7L/iYbEZ237e9iw71tBY8+gNck
8Nbh0Ilxx4ocruwgdrxYJH6h0FOjuJ51l/ohshFJgb9KpegbyjD8GWbSx28P3eYg
4ZQ/r0uLALCYIoCTcDILKgY4w6La8ldPmlmnGFKQ8kNFrcDx/K662pemo9ehscvt
4eT8YyjumJFM40xAn2LiinMonsrZ6thdRpCNU+J8HEUWrdTiIK+Z9mpb37gjkl/n
69srs4Vwa48Qe9OyFt2zXNUkaqiUGbulHw7NPtb3c2XNnAFfGo4WowhKJRTOrN4H
q7M+Z4/Cvw/60X8bmWU0RHF5WVwsiAaUL4vzWhhWRek=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org