Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230312e33312e302e302f31362d3136203d3e2034323330.roa
File:                     3230312e33312e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          fNU5J57Q8+0FZ/HDn0rGmkvIhnrWjugbLUwqKtjgbuY=
Subject key identifier:   1B:1D:F9:95:4D:8F:AB:11:A9:6F:AC:98:D7:B8:92:9B:92:26:C0:9C
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       54666D40B78DFA072F0C987DAF8926CC1A5EBAA1
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230312e33312e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 19:00:00 +0000
ROA not before:           Wed 11 Oct 2023 18:55:00 +0000
ROA not after:            Wed 09 Oct 2024 19:00:00 +0000
asID:                     4230
IP address blocks:        201.31.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:66:6d:40:b7:8d:fa:07:2f:0c:98:7d:af:89:26:cc:1a:5e:ba:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 18:55:00 2023 GMT
            Not After : Oct  9 19:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:12:d7:04:31:97:35:f5:ca:45:63:10:f5:6a:
                    68:59:a2:b6:3b:8e:8e:bd:c6:c4:42:0e:f7:7a:a3:
                    b6:14:65:92:57:bb:eb:a9:8b:71:9c:b9:9f:4d:2c:
                    29:e4:2e:2d:e3:01:80:59:53:e7:d5:52:e5:7f:f7:
                    84:b2:be:73:91:51:39:f1:1a:6b:06:e6:1b:bf:b7:
                    0f:f6:2a:6e:3d:a7:09:0c:3e:d3:1c:69:ad:62:f3:
                    c6:f9:9b:4f:f8:ee:2a:8f:f0:5b:a4:13:91:00:4b:
                    90:72:03:d4:d1:f9:39:e5:d7:85:7e:c5:b3:19:22:
                    da:1e:4a:de:f7:b0:4e:6c:5f:bb:0e:5a:af:52:0a:
                    a4:b2:64:bc:1b:7a:08:bb:77:b9:58:b3:bb:17:87:
                    8f:f1:ae:3c:8d:ca:6c:a6:df:0a:23:20:b7:2e:73:
                    87:f2:5b:42:13:72:6b:27:21:ba:78:41:c3:10:45:
                    25:12:b0:b9:f8:25:e1:4f:49:7d:ec:43:88:e0:1c:
                    ca:b7:91:6e:76:59:80:28:13:c9:a6:b6:18:a1:99:
                    4b:58:8b:94:90:04:a9:70:40:4d:85:f7:d8:bc:c4:
                    75:df:63:ef:79:f5:fb:33:a1:84:4f:8a:c8:56:37:
                    c3:66:de:1e:50:b5:72:59:16:c3:81:5e:21:d0:af:
                    49:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:1D:F9:95:4D:8F:AB:11:A9:6F:AC:98:D7:B8:92:9B:92:26:C0:9C
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230312e33312e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.31.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a8:84:80:74:0e:f1:17:8d:0b:3f:2d:44:c6:fc:09:87:57:6b:
         c3:d4:38:38:6a:cf:6c:d5:fd:36:9c:06:12:7b:9d:c9:f7:ca:
         a8:a1:95:7f:57:a6:1e:69:56:6f:39:1f:56:78:0e:8a:89:74:
         bf:fc:d9:b8:02:23:ab:b4:21:77:a0:d3:13:08:e6:7a:8e:67:
         45:89:73:1b:6a:1d:e3:f0:98:38:58:e1:8a:26:1b:b1:2c:5a:
         8c:84:18:a2:7b:97:22:4d:3d:a8:65:f6:1a:ca:d2:5d:c2:37:
         ef:dc:ed:98:85:b0:80:52:98:12:39:ad:fa:a2:88:c1:6a:33:
         4a:ce:59:a0:9a:60:fb:a0:06:eb:a9:0d:39:d8:68:45:4e:9a:
         f4:8d:f2:a7:ad:a2:8b:c2:33:e5:15:59:19:2d:07:13:16:68:
         91:39:a9:d7:f8:d0:97:63:80:58:61:30:52:04:b8:28:20:e5:
         74:9a:3b:e2:e3:4b:39:a4:10:6c:96:f0:de:f8:75:70:8f:b0:
         d3:ce:77:8b:b6:4a:9f:55:13:12:03:f2:3f:9f:90:27:ec:0b:
         7e:7d:1b:be:5e:2b:b4:51:70:76:48:a9:d3:d5:bf:ed:d5:76:
         7e:75:94:c4:1b:80:de:29:02:1c:85:3b:24:70:db:e9:37:39:
         90:5c:02:ca
-----BEGIN CERTIFICATE-----
MIIHOjCCBiKgAwIBAgIUVGZtQLeN+gcvDJh9r4kmzBpeuqEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODM5RDI4QkU2NENGRkE2NTFENDhGQzEzMjg0NDEwNkRB
MDI0NDlEMjAeFw0yMzEwMTExODU1MDBaFw0yNDEwMDkxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTAxMkQ3MDQzMTk3MzVGNUNB
NDU2MzEwRjU2QTY4NTlBMkI2M0I4RThFQkRDNkM0NDIwRUY3N0FBM0I2MTQ2NTky
NTdCQkVCQTk4QjcxOUNCOTlGNEQyQzI5RTQyRTJERTMwMTgwNTk1M0U3RDU1MkU1
N0ZGNzg0QjJCRTczOTE1MTM5RjExQTZCMDZFNjFCQkZCNzBGRjYyQTZFM0RBNzA5
MEMzRUQzMUM2OUFENjJGM0M2Rjk5QjRGRjhFRTJBOEZGMDVCQTQxMzkxMDA0Qjkw
NzIwM0Q0RDFGOTM5RTVENzg1N0VDNUIzMTkyMkRBMUU0QURFRjdCMDRFNkM1RkJC
MEU1QUFGNTIwQUE0QjI2NEJDMUI3QTA4QkI3N0I5NThCM0JCMTc4NzhGRjFBRTND
OERDQTZDQTZERjBBMjMyMEI3MkU3Mzg3RjI1QjQyMTM3MjZCMjcyMUJBNzg0MUMz
MTA0NTI1MTJCMEI5RjgyNUUxNEY0OTdERUM0Mzg4RTAxQ0NBQjc5MTZFNzY1OTgw
MjgxM0M5QTZCNjE4QTE5OTRCNTg4Qjk0OTAwNEE5NzA0MDREODVGN0Q4QkNDNDc1
REY2M0VGNzlGNUZCMzNBMTg0NEY4QUM4NTYzN0MzNjZERTFFNTBCNTcyNTkxNkMz
ODE1RTIxRDBBRjQ5ODkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA4BLXBDGXNfXKRWMQ9WpoWaK2O46OvcbEQg73eqO2FGWSV7vrqYtx
nLmfTSwp5C4t4wGAWVPn1VLlf/eEsr5zkVE58RprBuYbv7cP9ipuPacJDD7THGmt
YvPG+ZtP+O4qj/BbpBORAEuQcgPU0fk55deFfsWzGSLaHkre97BObF+7DlqvUgqk
smS8G3oIu3e5WLO7F4eP8a48jcpspt8KIyC3LnOH8ltCE3JrJyG6eEHDEEUlErC5
+CXhT0l97EOI4BzKt5FudlmAKBPJprYYoZlLWIuUkASpcEBNhffYvMR132PvefX7
M6GET4rIVjfDZt4eULVyWRbDgV4h0K9JiQIDAQABo4ICSDCCAkQwHQYDVR0OBBYE
FBsd+ZVNj6sRqW+smNe4kpuSJsCcMB8GA1UdIwQYMBaAFIOdKL5kz/plHUj8EyhE
EG2gJEnSMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dVUjRKZWR2WlNuYjho
S21NVWdRNjg3YjRNWFhtMzVtU1pETUxRTkhTRnBwLzAvODM5RDI4QkU2NENGRkE2
NTFENDhGQzEzMjg0NDEwNkRBMDI0NDlEMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84MzlEMjhCRTY0Q0ZGQTY1MUQ0OEZDMTMyODQ0MTA2REEwMjQ0
OUQyLmNlcjCBpgYIKwYBBQUHAQsEgZkwgZYwgZMGCCsGAQUFBzALhoGGcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVVI0SmVkdlpTbmI4aEttTVVn
UTY4N2I0TVhYbTM1bVNaRE1MUU5IU0ZwcC8wLzMyMzAzMTJlMzMzMTJlMzAyZTMw
MmYzMTM2MmQzMTM2MjAzZDNlMjAzNDMyMzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAMkfMA0GCSqG
SIb3DQEBCwUAA4IBAQCohIB0DvEXjQs/LUTG/AmHV2vD1Dg4as9s1f02nAYSe53J
98qooZV/V6YeaVZvOR9WeA6KiXS//Nm4AiOrtCF3oNMTCOZ6jmdFiXMbah3j8Jg4
WOGKJhuxLFqMhBiie5ciTT2oZfYaytJdwjfv3O2YhbCAUpgSOa36oojBajNKzlmg
mmD7oAbrqQ052GhFTpr0jfKnraKLwjPlFVkZLQcTFmiROanX+NCXY4BYYTBSBLgo
IOV0mjvi40s5pBBslvDe+HVwj7DTzneLtkqfVRMSA/I/n5An7At+fRu+Xiu0UXB2
SKnT1b/t1XZ+dZTEG4DeKQIchTskcNvpNzmQXALK
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org