Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3231392e3135342e302f32332d3234203d3e203131363434.roa
File:                     3230302e3231392e3135342e302f32332d3234203d3e203131363434.roa (raw, json)
Hash identifier:          RIa3F8JLig5kZkNUx+bPm9sgEd8jDfA8mEsV2z3p4G4=
Subject key identifier:   D7:E7:D7:FB:9A:09:5B:8A:43:8B:64:EF:CC:72:D5:55:B7:BA:5F:A3
Certificate issuer:       /CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
Certificate serial:       670837A54074545D6A6A42C5E78026CCD1B4B55A
Authority key identifier: A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3231392e3135342e302f32332d3234203d3e203131363434.roa
Signing time:             Mon 04 Sep 2023 11:02:00 +0000
ROA not before:           Mon 04 Sep 2023 10:57:00 +0000
ROA not after:            Mon 02 Sep 2024 11:02:00 +0000
asID:                     11644
IP address blocks:        200.219.154.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:08:37:a5:40:74:54:5d:6a:6a:42:c5:e7:80:26:cc:d1:b4:b5:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
        Validity
            Not Before: Sep  4 10:57:00 2023 GMT
            Not After : Sep  2 11:02:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e2:e0:4f:e3:b1:7b:c0:fc:9a:f0:7a:c9:b9:
                    ca:56:25:f3:a3:64:da:73:48:d9:6a:06:de:1b:0f:
                    28:14:b6:4c:1f:67:64:4b:04:2e:36:c9:46:6e:67:
                    71:bb:b6:ae:47:24:c1:92:0e:80:c7:95:cf:88:53:
                    25:b0:2e:1f:55:0d:4b:14:47:bc:a0:8e:2c:b4:ef:
                    6a:7e:2d:e8:0f:08:7f:4c:f5:fd:34:91:7d:44:6d:
                    be:80:32:b1:fc:0a:49:c2:0c:22:7c:4a:1f:14:8a:
                    1e:d5:18:f5:6a:5d:65:49:fb:d8:a2:59:2a:b1:b0:
                    cc:e0:9e:6a:4b:22:13:6f:06:68:ef:3f:d9:14:f1:
                    15:9a:45:45:be:99:6d:be:19:12:14:1e:3f:c8:eb:
                    05:82:5e:45:0e:88:57:75:8b:ce:60:3c:14:3c:46:
                    e8:23:14:00:3b:b3:96:fe:1a:a2:ae:0c:71:92:65:
                    ae:ff:b5:b3:be:ff:93:e2:a8:2f:d3:05:8f:fd:38:
                    73:ff:cb:d8:2c:63:16:5d:3a:13:4f:3c:2d:8d:5f:
                    07:d6:d8:eb:cc:08:7f:10:50:00:78:fc:b6:0b:b0:
                    fa:4f:ee:e2:66:27:02:05:35:d5:04:7e:f9:e5:ab:
                    e0:a6:16:b1:3d:b9:6c:31:a7:5a:a1:15:e6:73:9d:
                    3d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:E7:D7:FB:9A:09:5B:8A:43:8B:64:EF:CC:72:D5:55:B7:BA:5F:A3
            X509v3 Authority Key Identifier:
                keyid:A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/A483B4186AD840A7AC891A010501E4DCDA8B38A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3231392e3135342e302f32332d3234203d3e203131363434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:d2:94:d0:da:bd:53:75:b1:be:f4:33:6e:bc:e9:a0:d1:f7:
         12:2d:6d:bb:c0:9a:df:d2:35:e4:16:6a:c7:85:c3:57:9a:0c:
         9c:ca:a4:35:47:24:c0:7c:68:ad:13:ec:91:35:a6:55:80:6f:
         1c:50:5d:a6:6f:2f:ef:cc:0c:5f:5f:f3:3a:f0:8c:2e:c3:24:
         d3:91:db:4a:1e:ea:ee:0b:c1:7b:82:67:fa:dd:83:89:ff:25:
         00:e0:a8:94:e2:fc:c6:38:13:a5:c7:c6:4e:c3:08:47:84:38:
         34:a6:93:ef:81:7d:b2:e3:c5:f4:2f:e2:7f:82:cf:43:c0:65:
         bd:da:95:30:89:d8:85:7e:c3:a6:77:4d:d7:00:87:ca:2f:a3:
         c0:c8:a4:47:9e:cb:ee:f4:02:42:dc:13:6e:ac:4e:3d:de:f0:
         32:d5:65:4f:e5:26:47:a3:c1:00:74:6f:46:49:c6:87:10:a7:
         c7:43:f7:87:19:17:a1:ce:a3:20:7c:11:a7:d4:62:a0:b8:c8:
         64:cb:e1:f7:d3:6a:08:6e:9a:be:99:83:53:92:14:43:30:01:
         55:c3:30:89:1b:db:d5:6c:4a:c8:f0:72:17:8b:4b:6e:52:32:
         7d:a0:af:70:63:0d:4c:1d:16:a2:e7:2a:fc:59:20:aa:9f:9a:
         84:cf:21:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:53 2024 by rpki-client on console-fra.rpki-client.org