Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3235332e302e302f31362d3136203d3e2034323330.roa
File:                     3230302e3235332e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          HnlkN/oaw/Zk7iUgbr0YxHaZhqUl8u2QX4zhGUHYdQc=
Subject key identifier:   C1:8A:F2:91:65:3F:C5:4E:2A:65:E6:4D:38:A4:14:72:BF:7C:28:4F
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       22931F3F3B8477B4F6910E0F1207D79F0FFB1560
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3235332e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:02 +0000
ROA not before:           Wed 11 Oct 2023 19:55:02 +0000
ROA not after:            Wed 09 Oct 2024 20:00:02 +0000
asID:                     4230
IP address blocks:        200.253.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:93:1f:3f:3b:84:77:b4:f6:91:0e:0f:12:07:d7:9f:0f:fb:15:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:02 2023 GMT
            Not After : Oct  9 20:00:02 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:68:62:4a:d6:f0:4c:aa:f5:6b:75:32:eb:07:
                    9f:d7:9b:c9:d1:77:04:da:43:26:cc:9a:af:c4:d9:
                    4c:cc:04:e2:cc:79:15:0d:ab:03:db:d4:5b:03:57:
                    33:ac:17:fb:38:3b:16:c2:5a:65:aa:4c:3a:18:d5:
                    0b:fb:59:ea:b4:bf:a4:7c:5e:34:2f:f8:c4:73:d8:
                    11:6c:f1:67:0a:68:ba:f0:3a:bd:4e:84:43:90:5e:
                    18:05:b9:5d:16:43:bf:df:a7:65:c2:99:bc:40:00:
                    21:0d:4f:f2:39:70:3c:6d:3f:35:55:2b:d6:9c:10:
                    30:db:de:0a:e8:6e:14:ec:9f:a4:fb:9d:d7:5c:8e:
                    55:b7:56:9c:69:3d:6d:d3:00:e2:84:ef:b1:9e:fa:
                    f8:2c:39:98:a5:09:86:2c:2f:0e:e2:8a:2e:e2:67:
                    69:b8:22:f0:ce:d6:7c:9f:07:03:e5:30:c5:56:8e:
                    8a:fc:65:8d:8a:da:9a:bf:31:f0:5c:59:2e:aa:33:
                    f3:75:0a:ac:4b:d1:a4:90:12:ee:cf:ce:25:c0:4a:
                    ff:db:b6:21:8c:61:aa:0f:ff:58:c7:b3:d4:63:40:
                    03:b9:f3:26:e9:77:4f:8d:64:69:64:3a:78:4b:b6:
                    58:31:af:d0:5e:48:0b:32:f8:44:4a:d1:bc:21:49:
                    77:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:8A:F2:91:65:3F:C5:4E:2A:65:E6:4D:38:A4:14:72:BF:7C:28:4F
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230302e3235332e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.253.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         89:2b:ce:82:d0:df:b8:b2:cb:65:06:11:c0:88:e0:8f:e2:b3:
         78:a6:2b:1e:79:61:6c:27:b1:a1:64:2e:05:61:c5:f6:78:e8:
         a3:1b:6c:72:9a:b6:b9:94:05:5f:ee:a2:6f:e3:19:83:11:ba:
         8e:23:ec:c4:f7:b2:b3:48:89:e0:41:e2:b4:7f:4e:d2:25:ee:
         e3:61:04:e8:38:fe:9e:b3:43:ca:e5:89:f1:3e:cb:3e:92:d9:
         de:a4:16:14:45:82:00:b6:0b:de:7a:99:2a:92:d3:94:96:ab:
         29:80:6a:f3:c8:a3:68:7e:eb:28:ce:9d:74:5e:b7:57:89:38:
         d2:7b:af:c2:24:43:6b:24:27:6d:7b:dd:5e:6e:5a:d3:61:c3:
         4a:ef:91:ea:87:b3:75:ba:4e:81:00:c5:ee:11:8b:c4:82:31:
         bf:f8:fb:8c:e4:f2:9f:e4:04:ce:49:17:8b:58:2e:d8:f3:82:
         ae:65:1d:0e:53:8a:9f:96:f2:d4:90:61:14:dd:d6:d3:66:a9:
         7a:a9:e7:7d:78:46:32:65:59:d1:3f:63:69:ed:90:d1:fc:7e:
         45:55:4e:fe:39:59:85:a7:85:1f:58:50:4f:6c:10:b9:1f:a5:
         94:a3:22:4d:b0:1c:73:c6:0d:9d:d0:53:96:59:b4:7c:a8:3a:
         2e:7c:3c:ef
-----BEGIN CERTIFICATE-----
MIIHPDCCBiSgAwIBAgIUIpMfPzuEd7T2kQ4PEgfXnw/7FWAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODM5RDI4QkU2NENGRkE2NTFENDhGQzEzMjg0NDEwNkRB
MDI0NDlEMjAeFw0yMzEwMTExOTU1MDJaFw0yNDEwMDkyMDAwMDJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0U2ODYyNEFENkYwNENBQUY1
NkI3NTMyRUIwNzlGRDc5QkM5RDE3NzA0REE0MzI2Q0M5QUFGQzREOTRDQ0MwNEUy
Q0M3OTE1MERBQjAzREJENDVCMDM1NzMzQUMxN0ZCMzgzQjE2QzI1QTY1QUE0QzNB
MThENTBCRkI1OUVBQjRCRkE0N0M1RTM0MkZGOEM0NzNEODExNkNGMTY3MEE2OEJB
RjAzQUJENEU4NDQzOTA1RTE4MDVCOTVEMTY0M0JGREZBNzY1QzI5OUJDNDAwMDIx
MEQ0RkYyMzk3MDNDNkQzRjM1NTUyQkQ2OUMxMDMwREJERTBBRTg2RTE0RUM5RkE0
RkI5REQ3NUM4RTU1Qjc1NjlDNjkzRDZERDMwMEUyODRFRkIxOUVGQUY4MkMzOTk4
QTUwOTg2MkMyRjBFRTI4QTJFRTI2NzY5QjgyMkYwQ0VENjdDOUYwNzAzRTUzMEM1
NTY4RThBRkM2NThEOEFEQTlBQkYzMUYwNUM1OTJFQUEzM0YzNzUwQUFDNEJEMUE0
OTAxMkVFQ0ZDRTI1QzA0QUZGREJCNjIxOEM2MUFBMEZGRjU4QzdCM0Q0NjM0MDAz
QjlGMzI2RTk3NzRGOEQ2NDY5NjQzQTc4NEJCNjU4MzFBRkQwNUU0ODBCMzJGODQ0
NEFEMUJDMjE0OTc3QjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzmhiStbwTKr1a3Uy6wef15vJ0XcE2kMmzJqvxNlMzATizHkVDasD
29RbA1czrBf7ODsWwlplqkw6GNUL+1nqtL+kfF40L/jEc9gRbPFnCmi68Dq9ToRD
kF4YBbldFkO/36dlwpm8QAAhDU/yOXA8bT81VSvWnBAw294K6G4U7J+k+53XXI5V
t1acaT1t0wDihO+xnvr4LDmYpQmGLC8O4oou4mdpuCLwztZ8nwcD5TDFVo6K/GWN
itqavzHwXFkuqjPzdQqsS9GkkBLuz84lwEr/27YhjGGqD/9Yx7PUY0ADufMm6XdP
jWRpZDp4S7ZYMa/QXkgLMvhEStG8IUl3uQIDAQABo4ICSjCCAkYwHQYDVR0OBBYE
FMGK8pFlP8VOKmXmTTikFHK/fChPMB8GA1UdIwQYMBaAFIOdKL5kz/plHUj8EyhE
EG2gJEnSMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dVUjRKZWR2WlNuYjho
S21NVWdRNjg3YjRNWFhtMzVtU1pETUxRTkhTRnBwLzAvODM5RDI4QkU2NENGRkE2
NTFENDhGQzEzMjg0NDEwNkRBMDI0NDlEMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84MzlEMjhCRTY0Q0ZGQTY1MUQ0OEZDMTMyODQ0MTA2REEwMjQ0
OUQyLmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVVI0SmVkdlpTbmI4aEttTVVn
UTY4N2I0TVhYbTM1bVNaRE1MUU5IU0ZwcC8wLzMyMzAzMDJlMzIzNTMzMmUzMDJl
MzAyZjMxMzYyZDMxMzYyMDNkM2UyMDM0MzIzMzMwLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAyP0wDQYJ
KoZIhvcNAQELBQADggEBAIkrzoLQ37iyy2UGEcCI4I/is3imKx55YWwnsaFkLgVh
xfZ46KMbbHKatrmUBV/uom/jGYMRuo4j7MT3srNIieBB4rR/TtIl7uNhBOg4/p6z
Q8rlifE+yz6S2d6kFhRFggC2C956mSqS05SWqymAavPIo2h+6yjOnXRet1eJONJ7
r8IkQ2skJ2173V5uWtNhw0rvkeqHs3W6ToEAxe4Ri8SCMb/4+4zk8p/kBM5JF4tY
Ltjzgq5lHQ5Tip+W8tSQYRTd1tNmqXqp5314RjJlWdE/Y2ntkNH8fkVVTv45WYWn
hR9YUE9sELkfpZSjIk2wHHPGDZ3QU5ZZtHyoOi58PO8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org