Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3231392e3134382e302f3234203d3e203238333435.roa
File:                     3230302e3231392e3134382e302f3234203d3e203238333435.roa (raw, json)
Hash identifier:          ZebFvqg51ToLEyS2A4I5jR4WE2nHgVJZEiT9S61/iHE=
Subject key identifier:   33:27:1B:42:09:36:63:9E:1D:44:81:75:AF:9D:F6:41:F8:13:54:9E
Certificate issuer:       /CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
Certificate serial:       549B21CA67E6A1FA4CAE1CD8137CBA548344A823
Authority key identifier: A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3231392e3134382e302f3234203d3e203238333435.roa
Signing time:             Wed 03 Apr 2024 14:42:01 +0000
ROA not before:           Wed 03 Apr 2024 14:37:01 +0000
ROA not after:            Wed 02 Apr 2025 14:42:01 +0000
asID:                     28345
IP address blocks:        200.219.148.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:9b:21:ca:67:e6:a1:fa:4c:ae:1c:d8:13:7c:ba:54:83:44:a8:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
        Validity
            Not Before: Apr  3 14:37:01 2024 GMT
            Not After : Apr  2 14:42:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:89:97:4c:79:ec:53:a4:30:1b:c4:99:ba:7c:
                    4e:11:ed:40:91:9c:3f:04:63:87:04:bf:13:99:86:
                    cb:98:cd:84:65:df:8f:56:f2:58:63:36:fe:be:a4:
                    f1:2f:43:46:25:3f:b8:ff:c4:e9:9a:a4:97:0b:98:
                    69:87:f9:72:d8:d8:bf:94:87:c0:b4:81:b7:ba:09:
                    5c:03:33:31:0f:00:e1:d1:de:02:77:48:1f:85:88:
                    e2:b1:7a:77:46:07:2c:43:6c:b5:a2:1a:32:38:31:
                    cc:8a:ec:13:a3:c3:35:96:8d:8f:5a:d1:d1:60:f1:
                    c2:21:dc:be:6c:2e:1d:b4:09:8d:f2:37:2b:08:82:
                    c9:cc:51:9a:a2:ba:96:d2:82:53:24:9a:d9:67:b1:
                    95:b2:2f:be:e6:29:e9:24:6d:ec:bb:34:a0:00:bf:
                    65:66:f1:39:be:e0:53:e9:9a:19:8b:69:5d:2f:d5:
                    51:7c:d9:f2:01:cc:c5:20:cf:24:28:7f:c4:d2:ff:
                    c5:48:35:be:20:8c:eb:d4:49:4c:5b:77:f8:0f:40:
                    40:ac:4e:81:7a:2a:77:46:e5:3f:01:0f:a2:9b:0b:
                    97:ac:b6:5e:f6:1c:0d:3a:76:f8:01:cf:e5:bc:db:
                    39:f8:99:c1:29:9b:ac:66:83:66:af:fa:c7:70:f7:
                    c7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:27:1B:42:09:36:63:9E:1D:44:81:75:AF:9D:F6:41:F8:13:54:9E
            X509v3 Authority Key Identifier:
                keyid:A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/A483B4186AD840A7AC891A010501E4DCDA8B38A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3231392e3134382e302f3234203d3e203238333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:00:f9:73:22:ef:3e:98:ff:7d:6e:1d:66:75:73:17:22:da:
         23:5c:60:bb:0d:86:ee:ad:d0:b8:34:5d:e6:7a:fc:c5:49:26:
         e3:2f:be:b9:c5:6b:65:7f:d2:94:ee:da:9b:3e:c6:93:fd:1f:
         5f:7a:e2:39:04:eb:cc:e8:a9:29:c9:90:87:24:85:cb:53:04:
         98:70:19:d2:02:13:34:71:94:21:c3:db:b4:0a:64:ec:e3:a9:
         82:32:43:2d:78:d8:4e:55:1f:97:25:68:9c:06:f3:ed:03:08:
         89:2a:69:c6:03:a1:10:b1:49:f6:de:8e:4e:02:f0:a8:75:01:
         25:40:4b:47:37:f0:83:93:bf:98:24:d6:88:e2:14:e4:f4:7b:
         13:93:1c:06:75:9d:8f:c1:7e:20:eb:24:4e:98:b8:dd:f8:a4:
         b4:84:2e:75:76:d3:6d:81:2f:5a:fd:e7:04:9c:1f:2a:70:84:
         32:0f:f2:3c:95:d4:70:ce:ff:6f:fe:9e:5c:6d:b6:cf:10:b7:
         4e:44:05:e8:77:33:23:f7:a6:ab:48:10:3a:3d:a4:f6:c2:d6:
         57:03:bd:5c:21:ca:c9:95:95:c9:eb:57:38:b4:be:55:90:ef:
         36:12:fa:15:50:44:a1:53:6a:9b:2e:87:e4:12:36:2a:f5:34:
         fb:3e:69:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:53 2024 by rpki-client on console-fra.rpki-client.org