Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3231392e3134302e302f32332d3332203d3e2030.roa
File:                     3230302e3231392e3134302e302f32332d3332203d3e2030.roa (raw, json)
Hash identifier:          y8aIn804pdF7MskLT5vmtQ3tu9GjURj2oMtpwrVC80o=
Subject key identifier:   53:E1:B7:0F:84:01:DF:7A:36:EB:A6:59:D5:B1:BA:13:C1:19:3C:9D
Certificate issuer:       /CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
Certificate serial:       2B53DB9524265723185FCD00F010D4AD68CE2D2F
Authority key identifier: A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3231392e3134302e302f32332d3332203d3e2030.roa
Signing time:             Sat 23 Sep 2023 16:56:00 +0000
ROA not before:           Sat 23 Sep 2023 16:51:00 +0000
ROA not after:            Sat 21 Sep 2024 16:56:00 +0000
asID:                     0
IP address blocks:        200.219.140.0/23 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:53:db:95:24:26:57:23:18:5f:cd:00:f0:10:d4:ad:68:ce:2d:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
        Validity
            Not Before: Sep 23 16:51:00 2023 GMT
            Not After : Sep 21 16:56:00 2024 GMT
        Subject: CN=3082010A0282010100CDD7635CA0C7143778CB7210B325C5D6EC127E6DF486888E1AD9DA6875F0919134BFCEDA0D8CC632460B373265BD7B72A4FB5C88EAE47BC50AF9AFD47F2798E6E2E0205A2FBC1D57A4834A7758F2B8A7130FFCCEC7912E3EF43B6ECD5664C2F99D01DDE67AE99A4296213C821A1F6BBF7A21B78F82B20E1F6D33274209B3087C59E24F00F2DE6102A8E4630E032F1E83BDAC470E516E4F199779EA461F3EB8E5C503DB78E8821D3973181BD71B777D5ED910800D957E7D06F27919327C5BE318ABCDF3B803AF2F95BE7F7258D0F70918386041143D95A3D3DBEAE32CE4A5BE4180EE202CBFEC60716F994DC2257620999B1CEC9DDAC8476A7E0B86AD95CC76CB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d7:63:5c:a0:c7:14:37:78:cb:72:10:b3:25:
                    c5:d6:ec:12:7e:6d:f4:86:88:8e:1a:d9:da:68:75:
                    f0:91:91:34:bf:ce:da:0d:8c:c6:32:46:0b:37:32:
                    65:bd:7b:72:a4:fb:5c:88:ea:e4:7b:c5:0a:f9:af:
                    d4:7f:27:98:e6:e2:e0:20:5a:2f:bc:1d:57:a4:83:
                    4a:77:58:f2:b8:a7:13:0f:fc:ce:c7:91:2e:3e:f4:
                    3b:6e:cd:56:64:c2:f9:9d:01:dd:e6:7a:e9:9a:42:
                    96:21:3c:82:1a:1f:6b:bf:7a:21:b7:8f:82:b2:0e:
                    1f:6d:33:27:42:09:b3:08:7c:59:e2:4f:00:f2:de:
                    61:02:a8:e4:63:0e:03:2f:1e:83:bd:ac:47:0e:51:
                    6e:4f:19:97:79:ea:46:1f:3e:b8:e5:c5:03:db:78:
                    e8:82:1d:39:73:18:1b:d7:1b:77:7d:5e:d9:10:80:
                    0d:95:7e:7d:06:f2:79:19:32:7c:5b:e3:18:ab:cd:
                    f3:b8:03:af:2f:95:be:7f:72:58:d0:f7:09:18:38:
                    60:41:14:3d:95:a3:d3:db:ea:e3:2c:e4:a5:be:41:
                    80:ee:20:2c:bf:ec:60:71:6f:99:4d:c2:25:76:20:
                    99:9b:1c:ec:9d:da:c8:47:6a:7e:0b:86:ad:95:cc:
                    76:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E1:B7:0F:84:01:DF:7A:36:EB:A6:59:D5:B1:BA:13:C1:19:3C:9D
            X509v3 Authority Key Identifier:
                keyid:A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/A483B4186AD840A7AC891A010501E4DCDA8B38A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3231392e3134302e302f32332d3332203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b3:89:7c:bc:e9:54:64:08:d8:24:7e:d4:cc:d1:99:e0:d0:f5:
         58:a0:87:d5:7d:6f:c4:76:10:4f:f0:2d:a5:a4:45:8b:1a:eb:
         5f:db:06:6c:1c:de:e2:fc:9a:a0:42:a3:d3:67:3d:fc:35:67:
         b5:35:4b:51:0b:70:33:a6:8c:e9:8e:d9:ad:16:56:5a:01:57:
         63:da:b0:ec:8c:95:36:4b:55:ad:e7:cd:34:53:de:86:40:07:
         dc:e3:ef:6f:94:18:d7:98:23:7c:3a:30:fe:81:94:aa:a8:f8:
         25:4b:6b:13:d2:49:95:49:a6:a7:b1:19:82:25:56:0f:87:91:
         ea:f2:42:84:77:53:c8:41:5c:3c:70:79:22:26:ce:9b:c8:1d:
         be:4a:f5:ee:ef:b5:cb:8e:ea:68:5f:bb:38:b1:c6:4e:5a:cd:
         67:23:d8:33:02:d0:bb:41:0c:74:5f:f2:42:64:5a:ff:6c:8c:
         60:21:56:62:0b:19:77:4e:dc:58:fd:6d:4c:e3:fe:db:5c:74:
         3e:86:af:53:7b:48:37:11:48:e9:e4:6f:5a:c3:39:1a:f0:3f:
         b2:4f:96:72:00:c5:cd:67:38:0c:1e:0c:e8:15:48:aa:59:d1:
         cf:5c:88:80:7f:81:23:ec:0a:05:c0:62:94:41:31:23:0a:3a:
         94:cb:76:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:12 2024 by rpki-client on console-ams.rpki-client.org