Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3231392e3134382e302f3234203d3e203533303335.roa
File:                     3230302e3231392e3134382e302f3234203d3e203533303335.roa (raw, json)
Hash identifier:          ARj/vMvqA7r/m31Db0EibO2glfq7zO4uf1B8RWuy8dA=
Subject key identifier:   37:81:E1:B8:BD:1B:3C:27:76:94:54:2A:AF:26:5F:29:3D:67:3C:EA
Certificate issuer:       /CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
Certificate serial:       7AFF2F881D64498BD4A8066BAE4AD383E3DC3C71
Authority key identifier: A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3231392e3134382e302f3234203d3e203533303335.roa
Signing time:             Thu 14 Sep 2023 18:04:00 +0000
ROA not before:           Thu 14 Sep 2023 17:59:00 +0000
ROA not after:            Thu 12 Sep 2024 18:04:00 +0000
asID:                     53035
IP address blocks:        200.219.148.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ff:2f:88:1d:64:49:8b:d4:a8:06:6b:ae:4a:d3:83:e3:dc:3c:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
        Validity
            Not Before: Sep 14 17:59:00 2023 GMT
            Not After : Sep 12 18:04:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ea:27:79:1c:0b:01:11:02:4e:3b:91:aa:7e:
                    5e:a8:71:08:de:62:1d:db:a4:27:b2:ad:ac:52:bc:
                    9a:42:6a:0f:54:24:f2:4c:42:bb:66:1c:e1:34:96:
                    51:4c:22:3b:da:0e:10:4b:5b:ff:38:6e:6b:d8:0a:
                    6c:25:d6:4e:4a:eb:1d:a9:85:cd:8a:d3:2c:d2:72:
                    0e:c6:66:3d:ca:b6:42:bc:10:87:ff:60:be:bc:d6:
                    05:b4:82:d8:de:eb:db:fe:c9:78:0d:f7:9b:34:ea:
                    7e:0e:a3:b7:e3:00:6b:c2:cb:eb:a7:50:c8:25:3b:
                    df:fb:ec:4b:e1:30:ff:2d:d2:db:85:f5:6e:f3:a4:
                    56:c7:ad:a0:6a:4d:74:b5:9d:23:f4:98:75:b2:0b:
                    e1:dc:cc:66:dc:04:b0:94:4a:ad:bb:1f:04:e8:ea:
                    8f:bf:1f:af:ce:7d:07:bf:10:ed:2b:c7:71:cd:88:
                    94:65:ea:6f:c7:d0:80:66:ad:54:de:39:64:49:4a:
                    c9:6f:b2:9a:e6:41:0b:ca:c7:96:12:25:77:3f:4d:
                    df:1c:07:46:4e:16:15:8a:64:6e:4c:8b:18:e2:e5:
                    58:10:6d:a5:3e:b4:f0:08:de:28:1f:84:52:90:8a:
                    ce:8a:3d:68:46:f8:70:5e:63:e3:6e:ee:58:41:e4:
                    d0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:81:E1:B8:BD:1B:3C:27:76:94:54:2A:AF:26:5F:29:3D:67:3C:EA
            X509v3 Authority Key Identifier:
                keyid:A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/A483B4186AD840A7AC891A010501E4DCDA8B38A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3231392e3134382e302f3234203d3e203533303335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:c1:d8:14:89:65:48:05:58:57:75:1a:60:60:be:2e:73:9d:
         e3:00:09:c1:c0:c5:dc:1f:c2:d0:97:d9:ef:a5:45:bc:62:d8:
         e7:de:00:cd:05:7a:61:7c:c8:04:39:9b:8b:b5:9f:89:dd:47:
         c3:2f:d0:a9:b4:7e:37:3d:5a:cd:31:f7:a2:9a:ee:13:0f:b0:
         c5:c8:6c:dc:da:fd:5a:be:13:a8:72:32:6a:b8:d2:48:dc:0c:
         ae:99:a7:10:16:c3:34:74:28:7e:0f:32:a6:28:ff:3e:37:f8:
         97:5e:24:ee:8d:bd:01:3e:4a:98:46:6d:6a:21:7f:69:03:ea:
         d9:5f:86:74:ac:7a:d7:37:32:3b:b5:3c:98:22:76:4b:2e:70:
         9a:fe:db:65:c9:9a:1a:3c:e1:0f:44:b8:7a:e3:91:05:37:75:
         d6:24:fa:83:ca:d8:73:da:77:b8:14:09:69:8b:96:8a:42:7e:
         89:c8:4e:05:7d:97:97:56:fb:a1:3c:72:09:fd:9f:34:7a:51:
         04:85:46:d1:7e:46:5b:93:e3:a0:51:66:ab:bd:0c:bb:68:db:
         36:65:a9:fe:8e:49:49:06:62:b1:eb:fc:16:19:82:bc:cd:c9:
         a2:ad:76:5a:41:81:49:a2:ea:16:fe:0d:2c:ef:8e:25:f2:a9:
         01:59:94:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:12 2024 by rpki-client on console-ams.rpki-client.org