Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/323830343a3137633a3a2f33322d3332203d3e2034323330.roa
File:                     323830343a3137633a3a2f33322d3332203d3e2034323330.roa (raw, json)
Hash identifier:          +94Les3kDb6V6qebvrFujw1HFG0zenFecr8wYOqZTV8=
Subject key identifier:   0D:BA:D9:F4:A2:57:B3:D0:2B:DF:AC:28:51:B7:B7:DF:17:1D:39:64
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       3AC2E2EFEC4FBE20B2F015F620FB8C0DA4E3EB12
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/323830343a3137633a3a2f33322d3332203d3e2034323330.roa
Signing time:             Wed 21 Feb 2024 15:00:00 +0000
ROA not before:           Wed 21 Feb 2024 14:55:00 +0000
ROA not after:            Wed 19 Feb 2025 15:00:00 +0000
asID:                     4230
IP address blocks:        2804:17c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:c2:e2:ef:ec:4f:be:20:b2:f0:15:f6:20:fb:8c:0d:a4:e3:eb:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Feb 21 14:55:00 2024 GMT
            Not After : Feb 19 15:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b1:3a:b8:75:18:78:c3:30:15:e4:67:4b:1d:
                    a6:61:d2:80:47:14:54:36:5f:5e:75:62:d5:74:b9:
                    ff:60:76:5a:be:7a:05:67:c3:98:3f:39:aa:e0:03:
                    85:65:b1:f8:ee:fd:d0:c7:09:8e:d7:ca:92:0c:0e:
                    e2:8f:69:0a:45:38:1f:9a:a8:7b:c6:c6:99:46:e0:
                    5c:2e:e9:2d:27:81:df:d2:e1:20:e3:ca:6e:36:96:
                    0f:1a:d5:e4:6d:00:95:ae:8a:51:37:21:72:0a:3b:
                    e3:b3:23:36:b1:51:40:55:1f:c9:ca:97:0a:25:27:
                    c4:03:8f:5e:16:84:c6:fd:3d:3e:04:14:29:f0:fb:
                    07:26:ed:ee:1c:83:4d:58:90:79:2e:01:d4:c6:cf:
                    16:86:e3:70:a1:4d:64:2e:01:e7:57:d2:8a:b9:94:
                    8c:d1:2c:34:4a:cf:86:d2:91:92:ba:c0:9c:b9:53:
                    30:a2:6d:b9:95:11:4d:4e:79:8d:99:39:a2:9f:6f:
                    01:f2:ba:71:b7:8f:9f:07:79:e2:4d:ac:8b:f4:ff:
                    63:bf:33:a6:10:ee:78:f1:cd:8d:f5:be:9a:36:b5:
                    6c:10:bb:63:27:b2:5d:96:fc:d2:c6:87:32:dd:d2:
                    58:50:9a:d5:44:7d:93:9b:ee:97:94:f2:47:cd:36:
                    2b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:BA:D9:F4:A2:57:B3:D0:2B:DF:AC:28:51:B7:B7:DF:17:1D:39:64
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/323830343a3137633a3a2f33322d3332203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:17c::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:9f:d6:11:61:a0:41:10:7d:4c:f4:e0:3e:54:63:5f:06:9f:
         88:2f:ed:36:fc:4b:43:1f:9f:fe:45:4d:37:94:f9:1b:3f:7f:
         95:30:68:35:52:48:01:4d:c3:d5:a4:66:f3:8a:ad:57:0a:d0:
         f2:0e:31:d2:df:d3:06:f1:c8:0f:50:76:33:5c:9b:c8:70:47:
         84:d4:c1:d1:86:25:7f:0e:9c:b9:0d:31:90:9d:a0:63:f7:1f:
         8f:ce:40:d5:96:11:79:cf:dd:a9:49:7c:80:46:a0:e1:ef:b5:
         00:f1:ab:8c:ca:04:75:80:91:a8:34:25:78:2d:84:84:0e:3a:
         f6:d7:6d:f9:6f:3b:fc:59:aa:b7:cc:25:7d:af:0f:86:f0:5a:
         67:61:6c:95:fa:30:01:83:aa:7a:37:e7:3b:2f:e6:6a:e3:7d:
         1d:78:3a:46:bc:81:56:55:7b:3d:70:6e:bd:86:e8:fb:c6:4e:
         5b:85:aa:54:36:be:52:a2:77:22:23:b5:4f:d2:15:5e:f4:92:
         6c:39:94:44:5a:10:99:6c:18:a8:12:83:75:20:6e:32:fa:17:
         87:72:d7:63:a7:07:ff:cd:0e:ab:58:8b:79:47:a0:19:85:f9:
         90:71:49:03:cb:d6:6c:b3:bf:d6:41:21:03:45:c4:94:c9:34:
         56:28:8b:06
-----BEGIN CERTIFICATE-----
MIIHPDCCBiSgAwIBAgIUOsLi7+xPviCy8BX2IPuMDaTj6xIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODM5RDI4QkU2NENGRkE2NTFENDhGQzEzMjg0NDEwNkRB
MDI0NDlEMjAeFw0yNDAyMjExNDU1MDBaFw0yNTAyMTkxNTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTVCMTNBQjg3NTE4NzhDMzMw
MTVFNDY3NEIxREE2NjFEMjgwNDcxNDU0MzY1RjVFNzU2MkQ1NzRCOUZGNjA3NjVB
QkU3QTA1NjdDMzk4M0YzOUFBRTAwMzg1NjVCMUY4RUVGREQwQzcwOThFRDdDQTky
MEMwRUUyOEY2OTBBNDUzODFGOUFBODdCQzZDNjk5NDZFMDVDMkVFOTJEMjc4MURG
RDJFMTIwRTNDQTZFMzY5NjBGMUFENUU0NkQwMDk1QUU4QTUxMzcyMTcyMEEzQkUz
QjMyMzM2QjE1MTQwNTUxRkM5Q0E5NzBBMjUyN0M0MDM4RjVFMTY4NEM2RkQzRDNF
MDQxNDI5RjBGQjA3MjZFREVFMUM4MzRENTg5MDc5MkUwMUQ0QzZDRjE2ODZFMzcw
QTE0RDY0MkUwMUU3NTdEMjhBQjk5NDhDRDEyQzM0NEFDRjg2RDI5MTkyQkFDMDlD
Qjk1MzMwQTI2REI5OTUxMTRENEU3OThEOTkzOUEyOUY2RjAxRjJCQTcxQjc4RjlG
MDc3OUUyNERBQzhCRjRGRjYzQkYzM0E2MTBFRTc4RjFDRDhERjVCRTlBMzZCNTZD
MTBCQjYzMjdCMjVEOTZGQ0QyQzY4NzMyREREMjU4NTA5QUQ1NDQ3RDkzOUJFRTk3
OTRGMjQ3Q0QzNjJCMUIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEApbE6uHUYeMMwFeRnSx2mYdKARxRUNl9edWLVdLn/YHZavnoFZ8OY
Pzmq4AOFZbH47v3QxwmO18qSDA7ij2kKRTgfmqh7xsaZRuBcLuktJ4Hf0uEg48pu
NpYPGtXkbQCVropRNyFyCjvjsyM2sVFAVR/JypcKJSfEA49eFoTG/T0+BBQp8PsH
Ju3uHINNWJB5LgHUxs8WhuNwoU1kLgHnV9KKuZSM0Sw0Ss+G0pGSusCcuVMwom25
lRFNTnmNmTmin28B8rpxt4+fB3niTayL9P9jvzOmEO548c2N9b6aNrVsELtjJ7Jd
lvzSxocy3dJYUJrVRH2Tm+6XlPJHzTYrGwIDAQABo4ICSjCCAkYwHQYDVR0OBBYE
FA262fSiV7PQK9+sKFG3t98XHTlkMB8GA1UdIwQYMBaAFIOdKL5kz/plHUj8EyhE
EG2gJEnSMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dVUjRKZWR2WlNuYjho
S21NVWdRNjg3YjRNWFhtMzVtU1pETUxRTkhTRnBwLzAvODM5RDI4QkU2NENGRkE2
NTFENDhGQzEzMjg0NDEwNkRBMDI0NDlEMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84MzlEMjhCRTY0Q0ZGQTY1MUQ0OEZDMTMyODQ0MTA2REEwMjQ0
OUQyLmNlcjCBpgYIKwYBBQUHAQsEgZkwgZYwgZMGCCsGAQUFBzALhoGGcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVVI0SmVkdlpTbmI4aEttTVVn
UTY4N2I0TVhYbTM1bVNaRE1MUU5IU0ZwcC8wLzMyMzgzMDM0M2EzMTM3NjMzYTNh
MmYzMzMyMmQzMzMyMjAzZDNlMjAzNDMyMzMzMC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgEAXwwDQYJ
KoZIhvcNAQELBQADggEBAJmf1hFhoEEQfUz04D5UY18Gn4gv7Tb8S0Mfn/5FTTeU
+Rs/f5UwaDVSSAFNw9WkZvOKrVcK0PIOMdLf0wbxyA9QdjNcm8hwR4TUwdGGJX8O
nLkNMZCdoGP3H4/OQNWWEXnP3alJfIBGoOHvtQDxq4zKBHWAkag0JXgthIQOOvbX
bflvO/xZqrfMJX2vD4bwWmdhbJX6MAGDqno35zsv5mrjfR14Oka8gVZVez1wbr2G
6PvGTluFqlQ2vlKidyIjtU/SFV70kmw5lERaEJlsGKgSg3UgbjL6F4dy12OnB//N
DqtYi3lHoBmF+ZBxSQPL1myzv9ZBIQNFxJTJNFYoiwY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org