Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3138392e34302e302f32332d3234203d3e203130393036.roa
File:                     3230302e3138392e34302e302f32332d3234203d3e203130393036.roa (raw, json)
Hash identifier:          pK2T8feWOBQff88ZuE5ZJvlM59Aesn/TsUy7+0bQeH0=
Subject key identifier:   4F:C5:EB:87:D9:71:8F:80:AA:E2:46:8E:8A:F5:79:8D:50:B1:ED:5C
Certificate issuer:       /CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
Certificate serial:       468D3A17AA545796323830D17178742C0917412A
Authority key identifier: A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3138392e34302e302f32332d3234203d3e203130393036.roa
Signing time:             Mon 28 Aug 2023 18:02:00 +0000
ROA not before:           Mon 28 Aug 2023 17:57:00 +0000
ROA not after:            Mon 26 Aug 2024 18:02:00 +0000
asID:                     10906
IP address blocks:        200.189.40.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:8d:3a:17:aa:54:57:96:32:38:30:d1:71:78:74:2c:09:17:41:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
        Validity
            Not Before: Aug 28 17:57:00 2023 GMT
            Not After : Aug 26 18:02:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ac:a3:4e:00:ae:ff:89:94:a4:c8:62:10:3b:
                    ee:6b:68:d7:9c:d3:3f:83:65:4a:80:ff:5e:7b:3f:
                    56:29:79:e5:b5:31:92:14:88:94:18:49:cb:49:da:
                    d2:de:ff:73:51:9c:de:f0:8b:74:77:bb:03:28:3e:
                    57:c4:32:be:65:78:98:e1:47:ab:b8:aa:2e:1b:4c:
                    5c:6d:bb:f8:c3:26:56:16:7f:1f:db:dd:99:41:1b:
                    74:3a:41:19:3c:b1:25:16:a3:d0:53:9a:16:a8:3e:
                    f1:08:8d:12:ed:f4:a0:3d:6e:81:1a:38:cd:eb:46:
                    4e:d1:d6:41:a6:e7:a7:22:88:2d:82:79:5e:84:1a:
                    22:e0:37:dd:83:aa:53:e8:dc:86:5d:ec:87:ac:9b:
                    29:7d:87:16:24:4e:7c:ff:ab:9e:ef:95:7c:3f:4f:
                    80:f8:01:5a:b8:2f:62:4c:eb:bd:c7:9e:d4:f2:4e:
                    5f:b0:29:ee:b8:f6:9e:c5:4f:95:7a:c8:16:8c:1b:
                    2f:80:de:44:57:a0:3e:5d:7d:54:24:e3:74:b3:ec:
                    4b:01:f9:74:74:7c:e5:97:ff:fa:db:35:ba:9d:de:
                    c3:8d:99:ba:14:0d:ff:52:8c:6c:70:1c:9a:91:57:
                    36:29:9f:e4:05:79:20:7a:33:68:f5:61:68:92:38:
                    fc:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:C5:EB:87:D9:71:8F:80:AA:E2:46:8E:8A:F5:79:8D:50:B1:ED:5C
            X509v3 Authority Key Identifier:
                keyid:A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/A483B4186AD840A7AC891A010501E4DCDA8B38A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3138392e34302e302f32332d3234203d3e203130393036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.189.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:c2:81:0f:51:fd:b6:a3:15:4f:f5:8e:eb:f7:6e:be:ba:d6:
         c9:42:6a:05:e0:86:ee:35:ad:93:26:f8:ab:8c:07:3f:12:c2:
         a3:0a:3d:06:6c:92:ca:48:1e:86:8a:5d:06:cb:67:a6:21:24:
         5f:2f:a2:4e:c9:3a:25:f9:b2:95:ef:9c:d0:b7:29:35:94:60:
         17:9c:60:ee:36:8b:eb:d3:0d:5c:55:d6:d6:76:97:a9:4a:0f:
         17:25:44:0c:09:7a:27:39:f0:ce:73:d4:de:9e:ac:fc:d1:5b:
         1f:0d:1f:24:aa:b9:ba:1b:50:5d:38:06:a3:82:c7:5a:9b:57:
         50:de:39:a1:6d:bb:65:03:0d:fb:dc:c8:11:c2:dc:00:a8:e7:
         24:cf:0f:60:32:2a:7c:86:fa:1f:de:fa:c1:75:ea:69:99:40:
         f3:4a:74:11:92:70:cf:a3:12:e2:b1:54:a1:b6:43:77:5d:42:
         7b:13:67:9e:b1:2d:ab:9d:3b:8c:a6:6f:98:bf:8e:d6:c4:75:
         fa:c9:8e:5b:1b:a5:a7:9f:58:b2:0c:ce:5c:e4:d7:83:c3:ce:
         19:1c:f0:10:ea:fc:6c:40:ab:f8:dd:98:1c:81:89:86:37:eb:
         6b:43:e4:4f:6d:8b:80:cc:fa:8d:9f:b1:b3:05:1a:6c:f2:a4:
         79:64:9f:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:12 2024 by rpki-client on console-ams.rpki-client.org