Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3136302e302e302f32302d3234203d3e203232353438.roa
File:                     3230302e3136302e302e302f32302d3234203d3e203232353438.roa (raw, json)
Hash identifier:          1+Q1EuXeWmavlpP0lJjjxhabX2YjQAGCAOwaxWDlM7E=
Subject key identifier:   6F:06:DC:E4:34:9A:76:5D:17:B1:2D:94:4F:B8:56:01:D3:F2:F5:87
Certificate issuer:       /CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
Certificate serial:       54FC1AE0F4245BFF928EFCC3C8D5E3EA558974EA
Authority key identifier: A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3136302e302e302f32302d3234203d3e203232353438.roa
Signing time:             Sun 20 Aug 2023 18:02:00 +0000
ROA not before:           Sun 20 Aug 2023 17:57:00 +0000
ROA not after:            Sun 18 Aug 2024 18:02:00 +0000
asID:                     22548
IP address blocks:        200.160.0.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:fc:1a:e0:f4:24:5b:ff:92:8e:fc:c3:c8:d5:e3:ea:55:89:74:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
        Validity
            Not Before: Aug 20 17:57:00 2023 GMT
            Not After : Aug 18 18:02:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:26:99:eb:0d:ab:8b:fd:16:b8:e3:43:22:53:
                    e0:66:a0:a9:2f:49:fb:0f:1b:dc:71:93:92:5d:6f:
                    11:a7:f1:b8:1d:ee:9c:7e:01:e4:e9:e5:f5:54:ba:
                    60:5d:08:e1:18:05:9c:24:62:aa:7e:73:15:1b:c9:
                    f7:3d:3b:c0:2d:18:e1:d8:71:37:d2:28:38:36:22:
                    bc:a3:e0:37:c0:1e:29:a4:6c:b7:c8:1b:c8:2f:a8:
                    3e:b4:bb:2d:f4:a2:f3:49:1d:3f:b8:58:2d:94:eb:
                    b5:63:b3:4b:20:65:a7:38:41:7b:1e:e6:98:47:0e:
                    c7:cd:c1:75:18:a4:71:5b:0c:5e:79:97:eb:51:ff:
                    05:88:23:f5:55:02:ad:f2:c7:5b:89:5b:f5:0e:b6:
                    4f:46:8d:d1:8e:7d:a7:2e:ad:b5:97:62:9a:f8:6f:
                    a0:9e:1a:f8:9d:04:44:45:dc:bc:32:26:bf:96:ba:
                    46:27:87:06:72:68:91:36:f0:d9:87:18:8e:14:ef:
                    6f:2f:47:2e:3a:0b:09:f5:fe:47:d4:93:95:91:97:
                    ec:86:7a:da:1d:62:20:b5:15:20:d4:49:99:ff:98:
                    6d:7f:41:fb:a0:38:17:35:9a:37:d3:0c:3c:f3:50:
                    12:81:1b:8d:74:66:6c:96:44:92:fd:81:05:00:80:
                    ed:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:06:DC:E4:34:9A:76:5D:17:B1:2D:94:4F:B8:56:01:D3:F2:F5:87
            X509v3 Authority Key Identifier:
                keyid:A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/A483B4186AD840A7AC891A010501E4DCDA8B38A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3136302e302e302f32302d3234203d3e203232353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.160.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a4:c2:f0:f7:45:91:b0:aa:8e:7c:10:91:26:70:c9:2d:3a:5f:
         41:f1:8a:61:7c:86:03:03:8e:84:aa:5b:63:5c:31:e3:70:f6:
         f1:ef:a8:5a:de:32:f4:ea:4f:42:33:2b:8e:0e:5c:af:4b:6c:
         8b:50:5e:c2:15:e6:82:70:39:22:3f:c2:da:81:43:0c:54:d6:
         39:07:e2:5a:aa:c0:7b:81:d8:57:e4:53:88:05:ab:3b:50:0c:
         3b:da:0e:94:3a:b6:eb:bd:1e:b2:6f:b8:90:13:d7:a1:d1:69:
         72:71:0c:49:98:c5:f4:e1:aa:96:01:44:57:03:90:e2:72:87:
         04:72:cc:53:57:dc:71:90:95:47:d2:5c:3b:64:85:9f:9b:3a:
         14:b1:9d:6d:cc:de:d6:5f:ab:ef:f8:19:95:62:64:56:df:98:
         6f:0a:cb:17:5c:f4:29:9f:0a:b8:f2:7c:83:98:e3:00:2b:9b:
         33:63:ad:35:5f:25:01:a1:ca:f7:72:f5:24:f9:30:94:e3:36:
         d6:81:02:29:1f:09:37:90:76:02:5d:1d:6b:37:2c:c3:89:cb:
         5a:2e:80:65:16:d2:d0:55:75:08:0f:58:f6:35:9e:90:3c:9a:
         2f:95:46:41:b2:a5:50:99:d4:89:18:96:9e:59:a4:d2:98:36:
         d5:47:90:9d
-----BEGIN CERTIFICATE-----
MIIHPzCCBiegAwIBAgIUVPwa4PQkW/+SjvzDyNXj6lWJdOowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTQ4M0I0MTg2QUQ4NDBBN0FDODkxQTAxMDUwMUU0RENE
QThCMzhBOTAeFw0yMzA4MjAxNzU3MDBaFw0yNDA4MTgxODAyMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUUyNjk5RUIwREFCOEJGRDE2
QjhFMzQzMjI1M0UwNjZBMEE5MkY0OUZCMEYxQkRDNzE5MzkyNUQ2RjExQTdGMUI4
MURFRTlDN0UwMUU0RTlFNUY1NTRCQTYwNUQwOEUxMTgwNTlDMjQ2MkFBN0U3MzE1
MUJDOUY3M0QzQkMwMkQxOEUxRDg3MTM3RDIyODM4MzYyMkJDQTNFMDM3QzAxRTI5
QTQ2Q0I3QzgxQkM4MkZBODNFQjRCQjJERjRBMkYzNDkxRDNGQjg1ODJEOTRFQkI1
NjNCMzRCMjA2NUE3Mzg0MTdCMUVFNjk4NDcwRUM3Q0RDMTc1MThBNDcxNUIwQzVF
Nzk5N0VCNTFGRjA1ODgyM0Y1NTUwMkFERjJDNzVCODk1QkY1MEVCNjRGNDY4REQx
OEU3REE3MkVBREI1OTc2MjlBRjg2RkEwOUUxQUY4OUQwNDQ0NDVEQ0JDMzIyNkJG
OTZCQTQ2Mjc4NzA2NzI2ODkxMzZGMEQ5ODcxODhFMTRFRjZGMkY0NzJFM0EwQjA5
RjVGRTQ3RDQ5Mzk1OTE5N0VDODY3QURBMUQ2MjIwQjUxNTIwRDQ0OTk5RkY5ODZE
N0Y0MUZCQTAzODE3MzU5QTM3RDMwQzNDRjM1MDEyODExQjhENzQ2NjZDOTY0NDky
RkQ4MTA1MDA4MEVENUQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAriaZ6w2ri/0WuONDIlPgZqCpL0n7DxvccZOSXW8Rp/G4He6cfgHk
6eX1VLpgXQjhGAWcJGKqfnMVG8n3PTvALRjh2HE30ig4NiK8o+A3wB4ppGy3yBvI
L6g+tLst9KLzSR0/uFgtlOu1Y7NLIGWnOEF7HuaYRw7HzcF1GKRxWwxeeZfrUf8F
iCP1VQKt8sdbiVv1DrZPRo3Rjn2nLq21l2Ka+G+gnhr4nQRERdy8Mia/lrpGJ4cG
cmiRNvDZhxiOFO9vL0cuOgsJ9f5H1JOVkZfshnraHWIgtRUg1EmZ/5htf0H7oDgX
NZo30ww881ASgRuNdGZslkSS/YEFAIDtXQIDAQABo4ICTTCCAkkwHQYDVR0OBBYE
FG8G3OQ0mnZdF7EtlE+4VgHT8vWHMB8GA1UdIwQYMBaAFKSDtBhq2ECnrIkaAQUB
5NzaizipMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0EyeDZpY2FLcFZXUDV1
VUJ6SlF6UnZFcGp2UzdQVlc3WjJFcjRGMnF0MUN0LzEvQTQ4M0I0MTg2QUQ4NDBB
N0FDODkxQTAxMDUwMUU0RENEQThCMzhBOS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9BNDgzQjQxODZBRDg0MEE3QUM4OTFBMDEwNTAxRTREQ0RBOEIz
OEE5LmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BMng2aWNhS3BWV1A1dVVCekpR
elJ2RXBqdlM3UFZXN1oyRXI0RjJxdDFDdC8xLzMyMzAzMDJlMzEzNjMwMmUzMDJl
MzAyZjMyMzAyZDMyMzQyMDNkM2UyMDMyMzIzNTM0Mzgucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBATIoAAw
DQYJKoZIhvcNAQELBQADggEBAKTC8PdFkbCqjnwQkSZwyS06X0HximF8hgMDjoSq
W2NcMeNw9vHvqFreMvTqT0IzK44OXK9LbItQXsIV5oJwOSI/wtqBQwxU1jkH4lqq
wHuB2FfkU4gFqztQDDvaDpQ6tuu9HrJvuJAT16HRaXJxDEmYxfThqpYBRFcDkOJy
hwRyzFNX3HGQlUfSXDtkhZ+bOhSxnW3M3tZfq+/4GZViZFbfmG8Kyxdc9CmfCrjy
fIOY4wArmzNjrTVfJQGhyvdy9ST5MJTjNtaBAikfCTeQdgJdHWs3LMOJy1ougGUW
0tBVdQgPWPY1npA8mi+VRkGypVCZ1IkYlp5ZpNKYNtVHkJ0=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:12 2024 by rpki-client on console-ams.rpki-client.org