Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/323830343a61383a3a2f33322d3332203d3e2034323330.roa
File:                     323830343a61383a3a2f33322d3332203d3e2034323330.roa (raw, json)
Hash identifier:          FfRmkxq95lBqtqwOh/kwfzhokm8PUvbQ4OzfG7E5mgI=
Subject key identifier:   E0:D9:35:9A:48:58:58:2B:8E:99:43:A0:94:29:ED:5B:2E:05:17:A3
Certificate issuer:       /CN=839D28BE64CFFA651D48FC132844106DA02449D2
Certificate serial:       48C8025F9E591892A31476AD4C4D8989ACDC4C20
Authority key identifier: 83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/323830343a61383a3a2f33322d3332203d3e2034323330.roa
Signing time:             Wed 27 Sep 2023 20:00:00 +0000
ROA not before:           Wed 27 Sep 2023 19:55:00 +0000
ROA not after:            Wed 25 Sep 2024 20:00:00 +0000
asID:                     4230
IP address blocks:        2804:a8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:c8:02:5f:9e:59:18:92:a3:14:76:ad:4c:4d:89:89:ac:dc:4c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=839D28BE64CFFA651D48FC132844106DA02449D2
        Validity
            Not Before: Sep 27 19:55:00 2023 GMT
            Not After : Sep 25 20:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9d:8a:3e:7b:6a:45:82:fd:56:f4:ec:65:00:
                    fd:21:29:2a:7b:ff:f5:aa:9b:c4:3b:a6:36:6d:34:
                    f2:c4:0d:0e:e8:94:a3:4b:c6:2f:b5:38:f8:f6:cb:
                    83:c5:a3:92:ce:32:96:9f:77:ac:30:6d:09:8f:2e:
                    d5:57:9e:a4:cf:ba:17:ee:80:6d:41:d2:0a:7b:7b:
                    83:26:34:0c:b9:e4:c3:cd:9f:b1:2b:8b:b4:5b:60:
                    0d:14:02:d3:fe:58:d6:6d:cf:e5:4c:a7:94:fe:47:
                    2a:eb:df:55:8a:20:92:46:bd:b2:ff:d7:00:d9:4d:
                    ac:eb:6d:f8:53:c7:13:b0:d7:06:73:dd:9b:11:4d:
                    00:6b:d6:0f:dc:e6:b4:af:bf:3c:66:b4:ff:f4:28:
                    5c:f1:0c:e1:49:cc:18:f5:7c:d3:8d:78:0c:08:45:
                    b1:50:2a:d1:a1:ef:11:b4:00:20:58:c5:af:41:b4:
                    a4:8e:d2:cc:d6:9e:1b:13:a2:b1:af:ec:d7:6e:f9:
                    63:dd:58:17:04:26:33:7e:f6:ee:6c:20:5e:fd:3e:
                    bc:6a:3d:36:68:bf:c5:bb:bc:57:84:7e:52:5a:73:
                    02:83:f9:41:1b:71:0f:52:d5:e8:dd:b4:ae:59:97:
                    ed:70:52:76:60:f9:49:db:69:d8:7e:50:fd:d8:10:
                    7d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:D9:35:9A:48:58:58:2B:8E:99:43:A0:94:29:ED:5B:2E:05:17:A3
            X509v3 Authority Key Identifier:
                keyid:83:9D:28:BE:64:CF:FA:65:1D:48:FC:13:28:44:10:6D:A0:24:49:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/839D28BE64CFFA651D48FC132844106DA02449D2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/839D28BE64CFFA651D48FC132844106DA02449D2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GUR4JedvZSnb8hKmMUgQ687b4MXXm35mSZDMLQNHSFpp/0/323830343a61383a3a2f33322d3332203d3e2034323330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:82:77:46:de:b3:df:c7:ce:da:ea:98:12:b9:fe:8a:60:d1:
         96:b8:68:6c:a9:30:29:af:66:f4:f5:7d:38:90:30:e9:29:1b:
         a9:f0:b0:75:f4:4b:7e:1e:53:c4:ec:11:79:8e:e0:9b:bd:4d:
         7c:d1:5d:e1:2a:51:86:44:9c:0e:34:42:c6:bf:8f:1e:8a:36:
         d7:60:03:6c:68:b3:0e:fd:4b:32:c9:4d:8a:11:87:ff:bb:16:
         b0:94:6f:f5:42:39:48:10:26:53:f7:d6:6e:08:24:3d:ae:64:
         e4:68:35:0d:d4:dc:17:29:62:60:84:07:8d:50:23:d4:1a:22:
         e2:7f:54:81:91:6f:47:5e:ed:5c:6c:0a:12:76:ca:84:ee:11:
         8a:19:7c:bb:ea:25:1f:62:56:ba:31:dd:e7:d9:21:ba:fa:1e:
         ef:78:43:cd:d6:1a:ce:74:45:0b:87:6f:56:39:ec:9a:67:27:
         9e:c8:08:a1:f4:76:6b:e3:95:26:c1:24:0c:89:a4:62:ad:27:
         cf:60:18:e3:54:4a:45:0c:4a:14:5f:4e:cb:92:27:fb:cf:e3:
         bd:60:92:49:dc:a9:b6:69:01:ad:37:18:88:27:39:77:f1:35:
         7c:0f:a5:09:69:13:b3:14:ca:cb:f8:9b:56:ee:61:a1:51:01:
         57:83:90:84
-----BEGIN CERTIFICATE-----
MIIHOjCCBiKgAwIBAgIUSMgCX55ZGJKjFHatTE2JiazcTCAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODM5RDI4QkU2NENGRkE2NTFENDhGQzEzMjg0NDEwNkRB
MDI0NDlEMjAeFw0yMzA5MjcxOTU1MDBaFw0yNDA5MjUyMDAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkI5RDhBM0U3QjZBNDU4MkZE
NTZGNEVDNjUwMEZEMjEyOTJBN0JGRkY1QUE5QkM0M0JBNjM2NkQzNEYyQzQwRDBF
RTg5NEEzNEJDNjJGQjUzOEY4RjZDQjgzQzVBMzkyQ0UzMjk2OUY3N0FDMzA2RDA5
OEYyRUQ1NTc5RUE0Q0ZCQTE3RUU4MDZENDFEMjBBN0I3QjgzMjYzNDBDQjlFNEMz
Q0Q5RkIxMkI4QkI0NUI2MDBEMTQwMkQzRkU1OEQ2NkRDRkU1NENBNzk0RkU0NzJB
RUJERjU1OEEyMDkyNDZCREIyRkZENzAwRDk0REFDRUI2REY4NTNDNzEzQjBENzA2
NzNERDlCMTE0RDAwNkJENjBGRENFNkI0QUZCRjNDNjZCNEZGRjQyODVDRjEwQ0Ux
NDlDQzE4RjU3Q0QzOEQ3ODBDMDg0NUIxNTAyQUQxQTFFRjExQjQwMDIwNThDNUFG
NDFCNEE0OEVEMkNDRDY5RTFCMTNBMkIxQUZFQ0Q3NkVGOTYzREQ1ODE3MDQyNjMz
N0VGNkVFNkMyMDVFRkQzRUJDNkEzRDM2NjhCRkM1QkJCQzU3ODQ3RTUyNUE3MzAy
ODNGOTQxMUI3MTBGNTJENUU4RERCNEFFNTk5N0VENzA1Mjc2NjBGOTQ5REI2OUQ4
N0U1MEZERDgxMDdENEIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAu52KPntqRYL9VvTsZQD9ISkqe//1qpvEO6Y2bTTyxA0O6JSjS8Yv
tTj49suDxaOSzjKWn3esMG0Jjy7VV56kz7oX7oBtQdIKe3uDJjQMueTDzZ+xK4u0
W2ANFALT/ljWbc/lTKeU/kcq699ViiCSRr2y/9cA2U2s6234U8cTsNcGc92bEU0A
a9YP3Oa0r788ZrT/9Chc8QzhScwY9XzTjXgMCEWxUCrRoe8RtAAgWMWvQbSkjtLM
1p4bE6Kxr+zXbvlj3VgXBCYzfvbubCBe/T68aj02aL/Fu7xXhH5SWnMCg/lBG3EP
UtXo3bSuWZftcFJ2YPlJ22nYflD92BB9SwIDAQABo4ICSDCCAkQwHQYDVR0OBBYE
FODZNZpIWFgrjplDoJQp7VsuBRejMB8GA1UdIwQYMBaAFIOdKL5kz/plHUj8EyhE
EG2gJEnSMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0dVUjRKZWR2WlNuYjho
S21NVWdRNjg3YjRNWFhtMzVtU1pETUxRTkhTRnBwLzAvODM5RDI4QkU2NENGRkE2
NTFENDhGQzEzMjg0NDEwNkRBMDI0NDlEMi5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC84MzlEMjhCRTY0Q0ZGQTY1MUQ0OEZDMTMyODQ0MTA2REEwMjQ0
OUQyLmNlcjCBpAYIKwYBBQUHAQsEgZcwgZQwgZEGCCsGAQUFBzALhoGEcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9HVVI0SmVkdlpTbmI4aEttTVVn
UTY4N2I0TVhYbTM1bVNaRE1MUU5IU0ZwcC8wLzMyMzgzMDM0M2E2MTM4M2EzYTJm
MzMzMjJkMzMzMjIwM2QzZTIwMzQzMjMzMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYI
KwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoBACoMA0GCSqG
SIb3DQEBCwUAA4IBAQCOgndG3rPfx87a6pgSuf6KYNGWuGhsqTApr2b09X04kDDp
KRup8LB19Et+HlPE7BF5juCbvU180V3hKlGGRJwONELGv48eijbXYANsaLMO/Usy
yU2KEYf/uxawlG/1QjlIECZT99ZuCCQ9rmTkaDUN1NwXKWJghAeNUCPUGiLif1SB
kW9HXu1cbAoSdsqE7hGKGXy76iUfYla6Md3n2SG6+h7veEPN1hrOdEULh29WOeya
ZyeeyAih9HZr45UmwSQMiaRirSfPYBjjVEpFDEoUX07Lkif7z+O9YJJJ3Km2aQGt
NxiIJzl38TV8D6UJaROzFMrL+JtW7mGhUQFXg5CE
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org