Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3231392e3135342e302f32332d3234203d3e203238333435.roa
File:                     3230302e3231392e3135342e302f32332d3234203d3e203238333435.roa (raw, json)
Hash identifier:          1NgT+JiDRT0whA5qYP1To87NwzYU8+LRaIm76Y2Wk68=
Subject key identifier:   0B:6F:04:18:DD:27:F9:80:A1:70:C1:4F:46:08:B4:DC:D5:A4:85:45
Certificate issuer:       /CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
Certificate serial:       4D7BF2B65F1B178D3ABD9D1FC30A86782526F6A4
Authority key identifier: A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3231392e3135342e302f32332d3234203d3e203238333435.roa
Signing time:             Wed 03 Apr 2024 14:42:00 +0000
ROA not before:           Wed 03 Apr 2024 14:37:00 +0000
ROA not after:            Wed 02 Apr 2025 14:42:00 +0000
asID:                     28345
IP address blocks:        200.219.154.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:7b:f2:b6:5f:1b:17:8d:3a:bd:9d:1f:c3:0a:86:78:25:26:f6:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
        Validity
            Not Before: Apr  3 14:37:00 2024 GMT
            Not After : Apr  2 14:42:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:60:d7:76:67:78:7c:79:ba:1c:cf:5e:2a:2a:
                    ad:b1:3b:e6:ff:fc:d5:79:68:da:f7:0a:67:fe:37:
                    d0:95:8f:0d:f1:b8:41:60:8c:78:4d:d9:1c:a1:23:
                    a3:40:29:5a:74:2a:ae:eb:98:00:f3:1a:2e:0c:61:
                    73:29:08:60:23:a7:31:13:8b:4c:a7:58:eb:8e:4f:
                    3a:01:a1:d1:69:56:f8:46:e8:a7:31:81:1b:c9:9f:
                    d4:dd:9d:9d:64:eb:9d:c5:bb:50:42:9a:92:45:2b:
                    aa:74:f4:94:73:9c:ef:83:5f:b2:9c:67:f7:5a:96:
                    72:80:f3:f6:5b:57:31:76:dd:0d:6e:8d:f2:93:df:
                    26:5e:00:06:87:00:ff:4a:1e:18:c0:99:9e:3e:3a:
                    80:2f:4d:34:94:18:b6:81:d1:ab:94:f9:9c:1b:40:
                    3c:e4:3a:ea:c7:2b:12:f9:65:33:a8:1b:89:9b:48:
                    58:b5:82:0f:0c:78:7c:0c:d4:0c:b4:e8:7d:27:9d:
                    d6:6b:33:90:79:5d:d9:03:e9:68:e3:76:24:38:81:
                    29:bf:2b:f4:62:10:f4:ec:4d:91:22:fc:d6:74:18:
                    06:06:cc:5c:23:5a:aa:52:7c:c4:ed:b6:df:e6:8a:
                    6d:6a:5a:2b:af:b0:31:d5:f0:60:2e:3d:8b:74:6d:
                    00:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:6F:04:18:DD:27:F9:80:A1:70:C1:4F:46:08:B4:DC:D5:A4:85:45
            X509v3 Authority Key Identifier:
                keyid:A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/A483B4186AD840A7AC891A010501E4DCDA8B38A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3231392e3135342e302f32332d3234203d3e203238333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:84:d2:8f:23:90:6d:07:ed:f3:23:a1:09:8c:f6:12:76:1a:
         86:dd:62:a7:c7:5f:7d:cf:b2:eb:5a:46:d0:a9:fa:eb:20:c7:
         47:bf:60:81:82:c9:15:8c:84:f3:4e:52:c7:02:fc:41:d8:0e:
         85:2a:25:4c:c1:cc:10:77:23:48:b6:33:e1:d8:09:d0:f5:42:
         ae:49:ae:d8:93:12:25:18:df:4f:f8:b4:f5:26:6c:de:a2:7f:
         9f:21:ed:f9:f0:12:91:4a:2d:43:b0:0f:4e:e9:00:c5:19:7b:
         2b:f9:c6:26:b2:3d:03:78:d3:ea:cd:a9:bb:9e:19:34:b2:fa:
         17:4d:23:67:6b:48:cd:b4:d8:95:b9:ce:5a:d5:bf:78:2c:50:
         18:ba:45:f9:df:39:86:36:8f:40:a8:ec:fc:ce:8b:2a:89:28:
         9a:17:ba:0c:43:f7:00:5a:c2:11:d2:be:66:1d:b9:ba:11:92:
         b9:52:30:b3:c5:aa:ab:d6:7b:e2:96:f9:ca:ae:52:0d:5e:d9:
         5c:85:b4:be:b3:d9:7e:b4:69:29:27:32:fc:35:8a:ab:c5:ec:
         76:9c:29:77:4c:96:77:0b:49:ba:28:f8:58:41:2d:e3:a6:56:
         a6:df:6b:c3:bc:22:53:32:0e:8d:2c:14:47:f0:52:51:37:f9:
         6c:fa:39:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:53 2024 by rpki-client on console-fra.rpki-client.org