Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230312e37332e302e302f31362d3136203d3e2034323330.roa
File:                     3230312e37332e302e302f31362d3136203d3e2034323330.roa (raw, json)
Hash identifier:          0SyKh1XERddy1ERYFpL4ZtvU933zbpWygc3/R/gtZ2M=
Subject key identifier:   34:81:39:87:17:C5:CE:16:83:2F:FB:E0:23:D4:B7:7C:DF:93:FF:CE
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       6B07C89810595EE1001D435699BBEA0325F8C291
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230312e37332e302e302f31362d3136203d3e2034323330.roa
Signing time:             Wed 11 Oct 2023 20:00:08 +0000
ROA not before:           Wed 11 Oct 2023 19:55:08 +0000
ROA not after:            Wed 09 Oct 2024 20:00:08 +0000
asID:                     4230
IP address blocks:        201.73.0.0/16 maxlen: 16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:07:c8:98:10:59:5e:e1:00:1d:43:56:99:bb:ea:03:25:f8:c2:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Oct 11 19:55:08 2023 GMT
            Not After : Oct  9 20:00:08 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:41:e1:10:63:5e:6d:f9:b2:63:4a:8f:11:10:
                    8d:f5:5a:a3:0d:a7:40:99:d0:ba:e1:0e:a3:2e:87:
                    74:6e:e4:f6:67:f2:1e:de:de:4b:96:6d:f5:73:81:
                    ca:5b:14:78:57:58:38:2f:43:b1:b0:11:d3:18:1f:
                    af:6e:45:4f:03:e2:fb:33:6e:64:20:64:f2:25:5d:
                    3c:62:01:77:90:88:0d:20:75:d2:82:6c:6c:be:54:
                    5f:f2:3c:10:bf:35:57:51:1a:63:b9:c7:a4:67:df:
                    0f:af:18:c1:3e:a5:0c:cb:ba:fc:5d:95:b6:ad:5d:
                    47:db:d5:fb:51:6e:49:65:f3:c5:be:c0:e1:3a:86:
                    d2:7e:d6:43:fd:10:d6:1e:54:1f:90:fe:10:76:68:
                    f9:29:05:97:4f:b5:bf:43:9e:e4:c2:8e:9c:2a:93:
                    2e:40:f7:f6:66:2c:e8:d3:da:f0:d0:19:0e:67:ab:
                    29:78:53:5d:2b:20:1a:18:cd:0e:0d:7e:10:e6:f3:
                    24:cc:45:e6:22:da:a8:0d:08:86:bd:dc:73:8e:41:
                    8e:6d:ca:99:7b:10:19:aa:31:57:81:04:b5:c0:d2:
                    4c:56:0a:26:f1:96:08:b7:a7:a4:b6:9d:6e:78:26:
                    36:fd:59:6d:7c:59:bf:30:3c:0f:6c:1b:b5:ef:3b:
                    ab:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:81:39:87:17:C5:CE:16:83:2F:FB:E0:23:D4:B7:7C:DF:93:FF:CE
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/3230312e37332e302e302f31362d3136203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.73.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5e:cb:02:10:d5:6c:4f:52:40:4c:02:d9:51:9e:6f:3c:09:71:
         04:1d:07:87:2e:cb:4c:3b:0f:1f:cc:8f:76:ab:84:21:6d:1c:
         52:cb:0e:7b:5f:26:89:7f:10:4a:61:24:0d:b6:1c:58:f5:eb:
         8a:af:cc:eb:3a:60:b7:e8:30:c5:4e:f6:03:ef:27:d0:65:72:
         79:97:63:86:1c:32:fe:cf:58:de:ab:92:da:ff:19:a8:ab:85:
         1e:7d:51:a5:26:f1:25:92:46:2c:cb:d2:54:0d:fb:4b:9c:2f:
         53:ef:50:dc:f6:7f:5d:8a:ae:9e:2b:23:68:e4:96:3b:41:76:
         7f:59:71:70:cd:e3:2d:6d:5b:8f:f7:1e:d6:07:05:ea:63:fa:
         9c:40:61:c7:57:21:fa:4e:4c:ba:55:52:7c:92:a1:96:2b:5e:
         2a:f2:2f:ae:94:d3:20:60:7f:d6:13:a2:05:2d:d4:53:75:61:
         5e:a0:ee:49:77:7f:70:c4:bf:c8:9e:cd:4f:6c:91:25:fd:98:
         cd:40:e9:d4:05:18:2e:9f:e0:39:28:81:cb:17:e1:86:20:5d:
         71:a3:97:c5:27:d6:ec:44:5d:ed:cc:82:f2:fc:4e:ec:30:e5:
         2c:07:f7:c8:56:26:40:dd:fc:22:b8:05:bf:2c:bb:a6:97:b9:
         10:54:87:e8
-----BEGIN CERTIFICATE-----
MIIHOjCCBiKgAwIBAgIUawfImBBZXuEAHUNWmbvqAyX4wpEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODM5RDI4QkU2NENGRkE2NTFENDhGQzEzMjg0NDEwNkRB
MDI0NDlEMjAeFw0yMzEwMTExOTU1MDhaFw0yNDEwMDkyMDAwMDhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDA0MUUxMTA2MzVFNkRGOUIy
NjM0QThGMTExMDhERjU1QUEzMERBNzQwOTlEMEJBRTEwRUEzMkU4Nzc0NkVFNEY2
NjdGMjFFREVERTRCOTY2REY1NzM4MUNBNUIxNDc4NTc1ODM4MkY0M0IxQjAxMUQz
MTgxRkFGNkU0NTRGMDNFMkZCMzM2RTY0MjA2NEYyMjU1RDNDNjIwMTc3OTA4ODBE
MjA3NUQyODI2QzZDQkU1NDVGRjIzQzEwQkYzNTU3NTExQTYzQjlDN0E0NjdERjBG
QUYxOEMxM0VBNTBDQ0JCQUZDNUQ5NUI2QUQ1RDQ3REJENUZCNTE2RTQ5NjVGM0M1
QkVDMEUxM0E4NkQyN0VENjQzRkQxMEQ2MUU1NDFGOTBGRTEwNzY2OEY5MjkwNTk3
NEZCNUJGNDM5RUU0QzI4RTlDMkE5MzJFNDBGN0Y2NjYyQ0U4RDNEQUYwRDAxOTBF
NjdBQjI5Nzg1MzVEMkIyMDFBMThDRDBFMEQ3RTEwRTZGMzI0Q0M0NUU2MjJEQUE4
MEQwODg2QkREQzczOEU0MThFNkRDQTk5N0IxMDE5QUEzMTU3ODEwNEI1QzBEMjRD
NTYwQTI2RjE5NjA4QjdBN0E0QjY5RDZFNzgyNjM2RkQ1OTZEN0M1OUJGMzAzQzBG
NkMxQkI1RUYzQkFCMkQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0EHhEGNebfmyY0qPERCN9VqjDadAmdC64Q6jLod0buT2Z/Ie3t5L
lm31c4HKWxR4V1g4L0OxsBHTGB+vbkVPA+L7M25kIGTyJV08YgF3kIgNIHXSgmxs
vlRf8jwQvzVXURpjucekZ98PrxjBPqUMy7r8XZW2rV1H29X7UW5JZfPFvsDhOobS
ftZD/RDWHlQfkP4Qdmj5KQWXT7W/Q57kwo6cKpMuQPf2Zizo09rw0BkOZ6speFNd
KyAaGM0ODX4Q5vMkzEXmItqoDQiGvdxzjkGObcqZexAZqjFXgQS1wNJMVgom8ZYI
t6ektp1ueCY2/VltfFm/MDwPbBu17zurLQIDAQABo4ICSDCCAkQwHQYDVR0OBBYE
FDSBOYcXxc4Wgy/74CPUt3zfk//OMB8GA1UdIwQYMBaAFIOdKL5kz/plHUj8EyhE
EG2gJEnSMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dVUjRKZWR2WlNuYjho
S21NVWdRNjg3YjRNWFhtMzVtU1pETUxRTkhTRnBwLzAvODM5RDI4QkU2NENGRkE2
NTFENDhGQzEzMjg0NDEwNkRBMDI0NDlEMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84MzlEMjhCRTY0Q0ZGQTY1MUQ0OEZDMTMyODQ0MTA2REEwMjQ0
OUQyLmNlcjCBpgYIKwYBBQUHAQsEgZkwgZYwgZMGCCsGAQUFBzALhoGGcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVVI0SmVkdlpTbmI4aEttTVVn
UTY4N2I0TVhYbTM1bVNaRE1MUU5IU0ZwcC8wLzMyMzAzMTJlMzczMzJlMzAyZTMw
MmYzMTM2MmQzMTM2MjAzZDNlMjAzNDMyMzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAMlJMA0GCSqG
SIb3DQEBCwUAA4IBAQBeywIQ1WxPUkBMAtlRnm88CXEEHQeHLstMOw8fzI92q4Qh
bRxSyw57XyaJfxBKYSQNthxY9euKr8zrOmC36DDFTvYD7yfQZXJ5l2OGHDL+z1je
q5La/xmoq4UefVGlJvElkkYsy9JUDftLnC9T71Dc9n9diq6eKyNo5JY7QXZ/WXFw
zeMtbVuP9x7WBwXqY/qcQGHHVyH6Tky6VVJ8kqGWK14q8i+ulNMgYH/WE6IFLdRT
dWFeoO5Jd39wxL/Ins1PbJEl/ZjNQOnUBRgun+A5KIHLF+GGIF1xo5fFJ9bsRF3t
zILy/E7sMOUsB/fIViZA3fwiuAW/LLuml7kQVIfo
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org