Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3231392e3135382e302f32332d3234203d3e203131343331.roa
File:                     3230302e3231392e3135382e302f32332d3234203d3e203131343331.roa (raw, json)
Hash identifier:          lXfO4U8UUcYgNXDAOSoT73BXyGA5v+orkYwHoWZA2cs=
Subject key identifier:   36:E6:C0:CA:EF:C3:54:4A:66:E8:EF:A0:B2:89:5C:24:5F:FB:E0:58
Certificate issuer:       /CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
Certificate serial:       7CC017C196176FCF8FA376192B70A893490FC8CF
Authority key identifier: A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3231392e3135382e302f32332d3234203d3e203131343331.roa
Signing time:             Thu 31 Aug 2023 16:06:00 +0000
ROA not before:           Thu 31 Aug 2023 16:01:00 +0000
ROA not after:            Thu 29 Aug 2024 16:06:00 +0000
asID:                     11431
IP address blocks:        200.219.158.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:c0:17:c1:96:17:6f:cf:8f:a3:76:19:2b:70:a8:93:49:0f:c8:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
        Validity
            Not Before: Aug 31 16:01:00 2023 GMT
            Not After : Aug 29 16:06:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:49:e0:b0:a5:5c:56:01:b3:83:57:b1:3c:12:
                    e9:17:81:c7:27:a6:cf:81:84:79:6a:ee:3f:f6:c3:
                    f0:6d:7b:88:f7:4c:f6:e2:de:c2:15:2f:b0:13:a2:
                    76:b0:d3:d9:eb:fc:26:a7:b3:a3:7d:72:e4:41:8b:
                    30:d0:c2:54:35:26:be:db:cd:0a:23:7a:46:26:5a:
                    80:6b:c8:88:87:60:44:4d:7b:17:d3:60:45:b4:aa:
                    a7:bf:79:2a:76:fe:30:da:b7:9a:5b:2f:5d:b3:8d:
                    8d:bc:fe:37:d7:37:10:99:fc:31:18:a1:92:2f:3f:
                    25:1b:83:93:e1:b6:f8:02:3c:f4:b2:05:b8:3b:ec:
                    4f:22:6a:7c:ae:0a:7b:76:00:cc:b3:38:58:51:0b:
                    a9:1d:1a:ab:31:15:d3:8e:26:22:85:1d:96:11:c3:
                    ce:e1:89:fa:5b:ca:ab:e2:1d:41:29:4f:b9:ef:55:
                    2e:b6:9e:84:0a:e1:e4:9b:48:ca:cd:93:54:f6:55:
                    de:f7:68:54:fe:b2:65:7e:92:5a:86:ec:a0:eb:42:
                    25:fc:18:05:af:70:73:8f:5f:84:d7:1f:fe:b8:11:
                    dd:0e:06:ad:4e:1b:17:f4:92:7b:8e:2d:e6:b7:e8:
                    3a:75:59:ee:0a:96:73:c8:17:48:63:34:5c:48:53:
                    79:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E6:C0:CA:EF:C3:54:4A:66:E8:EF:A0:B2:89:5C:24:5F:FB:E0:58
            X509v3 Authority Key Identifier:
                keyid:A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/A483B4186AD840A7AC891A010501E4DCDA8B38A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3231392e3135382e302f32332d3234203d3e203131343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:37:04:c9:95:91:29:78:ac:ef:ee:99:5b:c6:f9:7b:55:5d:
         ba:51:5c:ee:35:5e:88:cb:dc:a3:1c:5f:f3:a9:5a:d8:2c:c6:
         fb:0f:a9:90:a9:59:3f:33:f5:20:f3:95:bf:54:01:be:5b:c0:
         83:94:6c:63:02:23:6f:b2:75:ff:b2:f7:31:ee:64:09:58:e7:
         7c:32:10:69:09:58:9c:23:ff:a2:78:a2:1b:99:f2:b9:90:ec:
         ec:f8:cc:94:90:0d:ac:35:0e:4f:18:36:11:b0:94:68:9e:05:
         32:a1:57:a4:51:14:dc:94:78:fc:21:9b:53:d2:82:6d:19:f0:
         87:db:fa:8c:92:7c:f7:3d:49:77:9f:56:77:bc:c6:74:f4:28:
         a6:83:18:4d:6b:eb:ab:2f:b5:78:a1:ce:ad:08:9e:3d:c3:6a:
         3a:8f:82:8f:b1:c2:fd:ec:3f:d7:f4:da:db:0b:43:a8:61:48:
         d8:2a:04:de:b6:2f:7c:de:16:6d:9f:71:67:fb:ed:a6:f9:fd:
         0f:52:ad:dd:98:37:e9:0e:47:be:7d:1b:c2:dd:51:de:11:a9:
         15:16:95:13:c5:5e:67:eb:14:c0:2a:7e:e5:59:3a:e2:cb:0a:
         58:82:09:d3:86:c4:dd:3a:a1:f7:27:ba:4f:be:c2:b1:56:c2:
         a4:99:64:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:53 2024 by rpki-client on console-fra.rpki-client.org