Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3231392e3133382e302f32332d3332203d3e2030.roa
File:                     3230302e3231392e3133382e302f32332d3332203d3e2030.roa (raw, json)
Hash identifier:          dKIoZKXN8NHvlkNsQ7AO/kYdGmdUAr8Ge0U4piUecvk=
Subject key identifier:   39:D6:FA:F7:D8:32:F6:5F:10:19:C5:E3:5D:CE:F4:09:71:7D:9F:82
Certificate issuer:       /CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
Certificate serial:       4442937F92F09A717C289915993187F0FDC5D473
Authority key identifier: A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3231392e3133382e302f32332d3332203d3e2030.roa
Signing time:             Sat 23 Sep 2023 16:56:00 +0000
ROA not before:           Sat 23 Sep 2023 16:51:00 +0000
ROA not after:            Sat 21 Sep 2024 16:56:00 +0000
asID:                     0
IP address blocks:        200.219.138.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:42:93:7f:92:f0:9a:71:7c:28:99:15:99:31:87:f0:fd:c5:d4:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
        Validity
            Not Before: Sep 23 16:51:00 2023 GMT
            Not After : Sep 21 16:56:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:10:ec:20:f3:fd:a2:8d:c5:be:0a:3e:22:9a:
                    f4:ea:e1:5f:ad:ce:d0:03:d1:54:80:a6:68:91:1d:
                    db:d1:1e:58:0d:e4:a9:1f:1f:e8:14:56:a9:ac:0c:
                    43:86:28:d1:34:37:d6:2e:ff:3c:b4:6f:7f:c7:fa:
                    a2:ad:da:1c:f1:64:58:3d:18:a2:9c:d3:a6:7c:04:
                    c4:37:03:89:cc:89:cb:ae:86:2f:b8:30:3b:ba:ff:
                    3a:6f:5f:78:a3:ec:cb:9c:5e:10:a4:ca:39:32:58:
                    46:9f:d5:de:89:1c:95:05:1c:f9:73:c4:d7:9e:2d:
                    92:0a:ac:b9:58:a1:77:47:05:89:09:e5:f8:0b:1b:
                    00:d4:a4:f8:bd:bc:3d:fa:96:83:dc:ff:a6:bf:01:
                    b8:43:5c:b3:39:ba:93:31:5e:0d:fd:43:96:22:ef:
                    cd:35:b8:52:46:91:9f:ff:9f:a9:16:22:7b:36:81:
                    95:f4:a6:ea:a5:35:bb:89:54:ae:c4:b7:87:df:3d:
                    51:8e:4f:46:0f:61:94:f5:f0:e2:da:31:13:74:5b:
                    41:e5:d5:ce:54:fb:9a:55:0e:01:1a:f0:6a:cc:81:
                    6b:f4:be:c0:39:03:98:eb:1f:be:54:72:a2:4b:70:
                    3c:1c:e5:0d:3b:fe:0a:16:73:22:63:b9:3b:e6:0c:
                    ea:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:D6:FA:F7:D8:32:F6:5F:10:19:C5:E3:5D:CE:F4:09:71:7D:9F:82
            X509v3 Authority Key Identifier:
                keyid:A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/A483B4186AD840A7AC891A010501E4DCDA8B38A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3231392e3133382e302f32332d3332203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:a0:34:34:c5:a6:4e:e8:e3:98:42:85:72:1d:59:be:90:48:
         70:f3:c6:c2:97:6f:52:c0:4d:00:03:21:cb:fd:1b:b8:41:d8:
         75:93:02:7a:a5:cf:b8:f8:72:68:b4:23:b2:7f:2f:60:9f:35:
         33:c7:30:6e:e2:6d:c8:56:73:78:13:d2:08:87:6a:9b:c5:fd:
         b2:ff:76:14:5c:37:98:48:b8:98:5c:6e:26:87:bd:fa:ca:7f:
         1a:9f:a6:49:78:45:b8:a3:45:ce:bd:fb:a1:14:1f:ca:ff:e2:
         59:75:eb:0a:9c:ff:82:f1:bc:82:4d:b8:95:44:0b:dc:a1:4f:
         ab:1b:c5:bc:95:f9:23:00:a7:e0:a9:26:d6:e3:0c:91:0c:1f:
         1a:6d:4c:c8:9e:85:a7:95:8f:07:39:b6:18:9d:3f:a2:13:3f:
         bb:1c:d0:f3:6c:1d:90:2d:a1:cc:80:5f:d0:d6:6c:6c:32:1c:
         5c:b0:8f:f8:56:a2:6b:f9:82:7c:22:87:f8:90:d2:56:60:81:
         8d:5e:99:05:06:29:ce:eb:d0:3a:ed:67:60:09:ec:1b:f7:59:
         f1:24:58:4c:07:37:82:36:15:95:f0:e2:cb:65:fd:c2:56:7a:
         a4:fd:5d:97:e9:0e:63:2e:53:c0:9a:41:50:1c:86:6e:8a:cb:
         0a:ac:6c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:12 2024 by rpki-client on console-ams.rpki-client.org