Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3231392e3134382e302f3234203d3e203131343331.roa
File:                     3230302e3231392e3134382e302f3234203d3e203131343331.roa (raw, json)
Hash identifier:          VyHvmYfZN7gkXvNZWMc5Z1OxdxBfqlfjHb2s+yp1KLU=
Subject key identifier:   22:76:B8:17:E3:BB:35:CC:B5:FC:D6:71:87:2C:58:73:7F:CA:7B:8B
Certificate issuer:       /CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
Certificate serial:       7035FAAFB3568657E0B4864A5A176C365F4E2BF3
Authority key identifier: A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3231392e3134382e302f3234203d3e203131343331.roa
Signing time:             Thu 14 Sep 2023 18:02:00 +0000
ROA not before:           Thu 14 Sep 2023 17:57:00 +0000
ROA not after:            Thu 12 Sep 2024 18:02:00 +0000
asID:                     11431
IP address blocks:        200.219.148.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:35:fa:af:b3:56:86:57:e0:b4:86:4a:5a:17:6c:36:5f:4e:2b:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
        Validity
            Not Before: Sep 14 17:57:00 2023 GMT
            Not After : Sep 12 18:02:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:82:71:95:e8:ff:ed:89:f4:7d:63:4b:e8:50:
                    12:ad:26:1d:a0:3e:95:8f:ea:3c:56:f1:fd:7f:ae:
                    7a:93:84:6a:fa:9d:f2:75:51:e3:7b:ba:51:e3:b9:
                    e8:b7:f4:6e:c6:b2:6f:eb:8d:63:91:74:0e:9b:5d:
                    2c:82:56:c2:a8:22:dd:26:64:9e:2a:2e:24:3c:ec:
                    b0:4d:89:4d:a5:45:57:b2:35:65:f4:2b:ab:1d:43:
                    6a:04:33:49:46:ab:58:e3:ea:95:2d:ff:fb:5a:df:
                    fb:dd:94:ca:a9:db:6e:74:63:0c:7c:1b:7c:73:d2:
                    d8:f8:ef:71:24:64:4a:8b:eb:f9:f0:96:20:ff:17:
                    ec:1e:5f:5c:8d:82:6d:b3:45:97:6c:de:cf:80:69:
                    a6:26:45:d4:4e:59:ad:6d:fe:98:59:1b:5a:5a:d3:
                    d6:2e:df:92:ed:f7:3b:86:b5:37:84:9d:b0:7f:e6:
                    8e:a3:2f:d0:52:22:ea:8a:86:d0:fd:93:13:a7:c0:
                    31:1f:4a:fc:ac:e3:de:6b:04:fd:8b:a1:41:fe:f8:
                    df:79:f7:79:c8:c9:e5:24:1f:ad:3a:96:63:f5:2a:
                    08:d1:eb:ed:f1:f3:ac:b2:07:6f:a3:e6:1e:33:52:
                    f9:70:d8:98:db:53:b4:fe:98:c3:45:eb:b4:60:62:
                    4c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:76:B8:17:E3:BB:35:CC:B5:FC:D6:71:87:2C:58:73:7F:CA:7B:8B
            X509v3 Authority Key Identifier:
                keyid:A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/A483B4186AD840A7AC891A010501E4DCDA8B38A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3231392e3134382e302f3234203d3e203131343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:f9:49:ac:d5:7f:5b:00:e6:1c:e8:6e:f9:46:82:d5:1e:72:
         71:7b:93:70:78:05:87:20:b5:06:76:d8:b1:ac:eb:e7:0e:ed:
         ce:5a:d3:0d:26:ae:94:6c:b1:bc:e9:8a:25:36:94:05:dc:56:
         a5:2a:0d:ae:09:0f:b7:da:fb:af:6f:20:e2:d2:7a:a5:82:33:
         dd:71:27:56:f5:d8:84:76:2e:3a:ff:a9:4f:bd:3c:b8:a7:6a:
         85:1a:f7:81:af:92:58:f6:08:3c:d1:cf:02:1d:11:46:40:a0:
         fb:5a:20:76:6f:c4:62:36:52:0d:09:50:ad:b4:94:40:6a:9e:
         ba:e9:98:dc:75:f1:f2:85:0a:fe:47:5b:a0:00:70:58:59:30:
         82:16:b4:b6:82:18:6d:dc:33:06:79:45:0d:dc:fc:c5:02:52:
         6d:53:9c:e6:30:0d:80:eb:79:02:bb:ec:1a:ca:bd:c3:ed:88:
         c1:3d:dc:5c:77:e4:58:38:11:84:64:1d:d7:4f:8a:62:34:f8:
         d6:2f:b8:bc:60:bc:69:38:30:ed:25:15:d2:ed:2b:d9:86:7a:
         5c:75:f3:90:30:6e:30:51:e1:35:0f:f1:b4:81:b8:76:8c:bd:
         b7:aa:b5:45:b7:90:4b:88:8c:fb:cd:d7:7f:8c:3f:36:72:23:
         66:1a:b8:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:53 2024 by rpki-client on console-fra.rpki-client.org