Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230312e35362e302e302f31362d3136203d3e2034323330.roa
File:                     3230312e35362e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          sZD+0124FiR2kYfwsX86G/nXy9lqP7/52WqU+GJEik8=
Subject key identifier:   51:84:A7:4E:FF:64:F6:DC:E9:B4:49:7C:B8:3D:51:99:BE:13:29:53
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       240F5B7F39BD595C3E2DBB3BABC97A9A617CE79B
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230312e35362e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:08 +0000
ROA not before:           Wed 11 Oct 2023 19:55:08 +0000
ROA not after:            Wed 09 Oct 2024 20:00:08 +0000
asID:                     4230
IP address blocks:        201.56.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:0f:5b:7f:39:bd:59:5c:3e:2d:bb:3b:ab:c9:7a:9a:61:7c:e7:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:08 2023 GMT
            Not After : Oct  9 20:00:08 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c7:f5:ce:d1:a0:f9:8c:46:9d:c8:c9:fb:ee:
                    f0:ab:ec:71:7f:5d:4e:2c:b2:e8:be:04:93:06:b8:
                    2e:c0:a2:c9:2f:8a:9d:b1:2a:19:58:46:de:ae:c0:
                    55:61:77:c6:b0:46:69:f3:ba:7c:ca:15:33:bf:1c:
                    a0:a1:b8:9b:63:f6:90:0b:7c:96:34:71:d8:a1:ab:
                    c2:bc:00:71:38:53:87:a0:b7:3d:6c:45:30:ab:4f:
                    aa:c7:7e:39:73:48:bb:e3:0e:b9:d2:75:ec:3f:f9:
                    af:c2:d8:5d:c5:70:a4:34:c2:7c:2d:b5:c9:5b:73:
                    40:f1:34:c2:7c:c0:54:eb:2c:07:91:a6:99:94:26:
                    e0:aa:4f:5e:e2:d6:6c:73:78:48:2b:bf:55:fc:85:
                    9b:59:dc:ae:53:b5:8e:cd:99:a3:30:45:c6:a7:cd:
                    c4:6a:c5:5c:8c:ce:51:07:f2:59:7d:b9:4f:8c:bb:
                    db:f0:b1:3d:55:1d:19:9d:db:7e:97:ec:22:3f:2f:
                    d1:cd:b2:e4:77:85:e6:5f:c9:c3:ec:19:9f:d5:f5:
                    8f:1e:28:b4:9b:64:ec:ab:cf:00:2d:e3:3a:e0:3c:
                    5e:e2:d2:08:87:8f:e7:91:26:bd:97:40:03:c5:8f:
                    3e:e7:e4:5e:be:a4:44:d7:dd:ea:cb:ee:f6:07:08:
                    c9:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:84:A7:4E:FF:64:F6:DC:E9:B4:49:7C:B8:3D:51:99:BE:13:29:53
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230312e35362e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.56.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         21:7d:08:02:17:8b:85:bd:5a:7b:11:5b:24:60:54:cc:8a:cb:
         ba:22:6e:ab:3c:56:64:6d:60:e3:5f:b4:04:7a:5a:d0:74:95:
         11:00:e0:1f:ac:72:00:cb:34:ff:5d:89:0b:76:45:a1:98:31:
         ec:93:d2:62:74:58:a6:ab:b6:26:43:89:b5:32:1c:98:e1:50:
         0e:0a:09:1d:fc:b1:b1:fa:50:97:cc:f5:2f:23:c9:b7:ba:8d:
         d5:f6:ca:0a:dc:f2:13:14:f7:b9:8d:0d:9d:14:ca:0c:40:9b:
         7b:5e:be:d2:8d:46:59:05:39:f4:b1:66:51:2b:77:c7:fb:44:
         53:93:95:fc:85:30:93:b5:04:f7:ec:f3:a5:cc:ff:74:7b:e7:
         39:6f:96:33:dd:04:e4:2f:94:5e:aa:e2:29:e2:82:9e:ea:a8:
         32:96:9e:31:84:4e:2c:b8:51:98:bb:5b:ba:63:55:fa:8e:e9:
         ba:5f:4b:0b:ef:ef:d7:54:00:ce:36:d5:d5:b7:88:19:46:8b:
         72:28:bc:e2:6a:54:98:1d:7d:be:7c:a6:19:00:75:98:57:88:
         2d:43:10:69:21:e6:5d:3a:01:16:5d:b9:d3:2a:d2:65:56:87:
         2b:6b:2d:18:3a:21:ac:7c:52:02:00:a7:52:cd:1f:d7:98:49:
         fe:78:0c:b7
-----BEGIN CERTIFICATE-----
MIIHOjCCBiKgAwIBAgIUJA9bfzm9WVw+Lbs7q8l6mmF855swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODM5RDI4QkU2NENGRkE2NTFENDhGQzEzMjg0NDEwNkRB
MDI0NDlEMjAeFw0yMzEwMTExOTU1MDhaFw0yNDEwMDkyMDAwMDhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzFDN0Y1Q0VEMUEwRjk4QzQ2
OURDOEM5RkJFRUYwQUJFQzcxN0Y1RDRFMkNCMkU4QkUwNDkzMDZCODJFQzBBMkM5
MkY4QTlEQjEyQTE5NTg0NkRFQUVDMDU1NjE3N0M2QjA0NjY5RjNCQTdDQ0ExNTMz
QkYxQ0EwQTFCODlCNjNGNjkwMEI3Qzk2MzQ3MUQ4QTFBQkMyQkMwMDcxMzg1Mzg3
QTBCNzNENkM0NTMwQUI0RkFBQzc3RTM5NzM0OEJCRTMwRUI5RDI3NUVDM0ZGOUFG
QzJEODVEQzU3MEE0MzRDMjdDMkRCNUM5NUI3MzQwRjEzNEMyN0NDMDU0RUIyQzA3
OTFBNjk5OTQyNkUwQUE0RjVFRTJENjZDNzM3ODQ4MkJCRjU1RkM4NTlCNTlEQ0FF
NTNCNThFQ0Q5OUEzMzA0NUM2QTdDREM0NkFDNTVDOENDRTUxMDdGMjU5N0RCOTRG
OENCQkRCRjBCMTNENTUxRDE5OUREQjdFOTdFQzIyM0YyRkQxQ0RCMkU0Nzc4NUU2
NUZDOUMzRUMxOTlGRDVGNThGMUUyOEI0OUI2NEVDQUJDRjAwMkRFMzNBRTAzQzVF
RTJEMjA4ODc4RkU3OTEyNkJEOTc0MDAzQzU4RjNFRTdFNDVFQkVBNDQ0RDdEREVB
Q0JFRUY2MDcwOEM5QzkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwcf1ztGg+YxGncjJ++7wq+xxf11OLLLovgSTBrguwKLJL4qdsSoZ
WEbersBVYXfGsEZp87p8yhUzvxygobibY/aQC3yWNHHYoavCvABxOFOHoLc9bEUw
q0+qx345c0i74w650nXsP/mvwthdxXCkNMJ8LbXJW3NA8TTCfMBU6ywHkaaZlCbg
qk9e4tZsc3hIK79V/IWbWdyuU7WOzZmjMEXGp83EasVcjM5RB/JZfblPjLvb8LE9
VR0Zndt+l+wiPy/RzbLkd4XmX8nD7Bmf1fWPHii0m2Tsq88ALeM64Dxe4tIIh4/n
kSa9l0ADxY8+5+RevqRE193qy+72BwjJyQIDAQABo4ICSDCCAkQwHQYDVR0OBBYE
FFGEp07/ZPbc6bRJfLg9UZm+EylTMB8GA1UdIwQYMBaAFIOdKL5kz/plHUj8EyhE
EG2gJEnSMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dVUjRKZWR2WlNuYjho
S21NVWdRNjg3YjRNWFhtMzVtU1pETUxRTkhTRnBwLzAvODM5RDI4QkU2NENGRkE2
NTFENDhGQzEzMjg0NDEwNkRBMDI0NDlEMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84MzlEMjhCRTY0Q0ZGQTY1MUQ0OEZDMTMyODQ0MTA2REEwMjQ0
OUQyLmNlcjCBpgYIKwYBBQUHAQsEgZkwgZYwgZMGCCsGAQUFBzALhoGGcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVVI0SmVkdlpTbmI4aEttTVVn
UTY4N2I0TVhYbTM1bVNaRE1MUU5IU0ZwcC8wLzMyMzAzMTJlMzUzNjJlMzAyZTMw
MmYzMTM2MmQzMTM2MjAzZDNlMjAzNDMyMzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAMk4MA0GCSqG
SIb3DQEBCwUAA4IBAQAhfQgCF4uFvVp7EVskYFTMisu6Im6rPFZkbWDjX7QEelrQ
dJURAOAfrHIAyzT/XYkLdkWhmDHsk9JidFimq7YmQ4m1MhyY4VAOCgkd/LGx+lCX
zPUvI8m3uo3V9soK3PITFPe5jQ2dFMoMQJt7Xr7SjUZZBTn0sWZRK3fH+0RTk5X8
hTCTtQT37POlzP90e+c5b5Yz3QTkL5RequIp4oKe6qgylp4xhE4suFGYu1u6Y1X6
jum6X0sL7+/XVADONtXVt4gZRotyKLzialSYHX2+fKYZAHWYV4gtQxBpIeZdOgEW
XbnTKtJlVocray0YOiGsfFICAKdSzR/XmEn+eAy3
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org