Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3139322e3233322e302f32332d3234203d3e203238333435.roa
File:                     3230302e3139322e3233322e302f32332d3234203d3e203238333435.roa (raw, json)
Hash identifier:          /khTdzCBAz9ZYhFLAb72THxFRH4/HWuE/T0ObwYhGP8=
Subject key identifier:   B8:D4:C8:D5:1C:55:FB:4C:A7:3F:CD:A7:4F:51:91:18:CD:BA:58:26
Certificate issuer:       /CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
Certificate serial:       31FE5ED06B794C30C63D2E4473CAAD4514B86C1B
Authority key identifier: A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3139322e3233322e302f32332d3234203d3e203238333435.roa
Signing time:             Wed 03 Apr 2024 14:38:00 +0000
ROA not before:           Wed 03 Apr 2024 14:33:00 +0000
ROA not after:            Wed 02 Apr 2025 14:38:00 +0000
asID:                     28345
IP address blocks:        200.192.232.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:fe:5e:d0:6b:79:4c:30:c6:3d:2e:44:73:ca:ad:45:14:b8:6c:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
        Validity
            Not Before: Apr  3 14:33:00 2024 GMT
            Not After : Apr  2 14:38:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cb:84:d9:4a:cd:7c:14:26:fb:8e:13:c4:b3:
                    b1:7f:d4:c7:3c:f5:ab:5b:7e:96:34:93:95:98:63:
                    cc:53:97:f8:d2:87:dc:b2:12:df:c6:ed:ad:24:3e:
                    d2:4b:a2:3a:cb:3a:71:74:8a:10:d2:da:b2:ee:c3:
                    b4:84:8a:ec:33:4e:fd:66:48:b4:2d:f5:c9:07:05:
                    6b:ff:f6:a7:83:eb:bf:ad:4c:b5:34:03:dd:18:7c:
                    37:87:28:20:2a:f6:4e:50:42:b7:e7:97:93:5d:f5:
                    2b:8d:8f:60:d0:d7:6e:c8:74:51:b6:2e:ac:fc:8e:
                    cd:9c:03:5f:3d:17:4e:ef:c9:3d:a8:71:cb:36:7d:
                    20:33:aa:34:33:4e:65:3c:00:86:12:02:50:97:b1:
                    bf:e3:a1:7d:52:0e:b3:41:d8:c0:0d:de:75:e3:29:
                    29:2f:f1:0b:a9:83:1d:ce:c2:b6:48:d3:ab:0f:54:
                    8b:3f:6e:90:df:ec:14:fd:25:ce:6d:c8:f3:2c:36:
                    e6:c3:c8:50:bf:96:a6:5f:f9:65:56:7a:22:b3:4b:
                    5a:ac:9d:00:2c:9c:0c:a5:ba:4f:83:0b:47:4f:40:
                    8e:e9:0d:c5:57:82:36:fe:2e:0f:06:60:9e:de:6f:
                    35:22:2c:43:bb:a3:d3:54:cc:66:72:83:bc:b6:e6:
                    d1:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:D4:C8:D5:1C:55:FB:4C:A7:3F:CD:A7:4F:51:91:18:CD:BA:58:26
            X509v3 Authority Key Identifier:
                keyid:A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/A483B4186AD840A7AC891A010501E4DCDA8B38A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3139322e3233322e302f32332d3234203d3e203238333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.192.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c7:1a:06:c3:0a:d3:df:57:a2:b7:f5:2b:6a:7d:ee:ea:16:95:
         09:e3:f0:c5:15:ac:f0:00:01:34:f2:8f:74:8f:ff:58:a8:ce:
         80:b2:81:a9:c0:ed:8a:54:3d:59:6e:61:25:bf:5f:92:d7:43:
         9f:f6:64:b6:eb:64:8e:c3:8f:ae:2b:b3:5a:fc:d1:85:21:d2:
         d2:03:0e:69:06:2f:6c:7e:71:44:f7:47:a4:a4:3c:95:05:00:
         9b:c5:45:94:eb:e7:29:ce:a6:31:03:84:71:40:17:5e:28:dc:
         fb:d0:54:17:ba:ca:ab:5b:f7:12:b1:8f:c1:f0:13:30:6b:57:
         30:a9:2c:40:cb:fc:db:ae:6d:c9:9a:43:ea:99:08:7f:85:39:
         47:e5:77:4e:1c:21:b2:e4:cb:e3:3d:3c:69:13:51:24:24:d9:
         f9:a2:de:29:24:c8:2c:3f:0a:eb:60:e7:e0:ad:60:74:54:58:
         3c:72:6e:87:80:c9:c0:1c:ae:9c:57:70:a1:ab:03:50:44:2b:
         d1:09:30:3d:ff:aa:d8:d9:26:6e:e7:c2:7e:78:68:15:78:39:
         50:c6:84:45:26:d5:25:5d:91:4f:ba:14:0a:be:20:67:10:f7:
         b4:7a:bb:b3:0a:57:50:2d:30:d7:ab:75:c1:01:62:3b:e9:34:
         b1:1a:22:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:53 2024 by rpki-client on console-fra.rpki-client.org