Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3231392e3135382e302f32332d3234203d3e203134363530.roa
File:                     3230302e3231392e3135382e302f32332d3234203d3e203134363530.roa (raw, json)
Hash identifier:          GZXAMmOjob+mcOpfzy77IEQrP9bUamm6es7oyoROPN0=
Subject key identifier:   68:0E:41:49:38:AF:FA:A3:5C:DF:8C:DB:39:F9:74:26:67:CF:55:C1
Certificate issuer:       /CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
Certificate serial:       1F51C936999577185D7CBBA4B016CA7C2BB8230B
Authority key identifier: A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3231392e3135382e302f32332d3234203d3e203134363530.roa
Signing time:             Sat 26 Aug 2023 17:02:01 +0000
ROA not before:           Sat 26 Aug 2023 16:57:01 +0000
ROA not after:            Sat 24 Aug 2024 17:02:01 +0000
asID:                     14650
IP address blocks:        200.219.158.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:51:c9:36:99:95:77:18:5d:7c:bb:a4:b0:16:ca:7c:2b:b8:23:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
        Validity
            Not Before: Aug 26 16:57:01 2023 GMT
            Not After : Aug 24 17:02:01 2024 GMT
        Subject: CN=3082010A0282010100EB10C3A354547C711F9F11D961814951450AD2A3E09435D8ABA7D7D98BF0FD235C73D71FE5A6C839DC0A36595E060E702920946BAD69C419154E9914748CD89E88AAB8CB57AC04DC33E4EEC0711CC377F2D53B109EA39F6C736B2346A42031022AFE9D9551F9C15C8CD528B2EBC63604D2C459FC37C2BF03C6D90DBB13313FB6922C56FE866357AB25AC2310E1D66276198F72A2F50003A15FAED2E73718AA3AC13BF3288DB8E735E7CC4F5CC5B48586D7C019992A15AA46CE977952F591018D2C3756F7B5D4E55099725130D79EFA8C8CDB3BCF7D529F66D92F9D8A98A0E34222FEF9731A0C91C61AA3FF87F14F335B49974378A23461301AED7DF5611B02170203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:10:c3:a3:54:54:7c:71:1f:9f:11:d9:61:81:
                    49:51:45:0a:d2:a3:e0:94:35:d8:ab:a7:d7:d9:8b:
                    f0:fd:23:5c:73:d7:1f:e5:a6:c8:39:dc:0a:36:59:
                    5e:06:0e:70:29:20:94:6b:ad:69:c4:19:15:4e:99:
                    14:74:8c:d8:9e:88:aa:b8:cb:57:ac:04:dc:33:e4:
                    ee:c0:71:1c:c3:77:f2:d5:3b:10:9e:a3:9f:6c:73:
                    6b:23:46:a4:20:31:02:2a:fe:9d:95:51:f9:c1:5c:
                    8c:d5:28:b2:eb:c6:36:04:d2:c4:59:fc:37:c2:bf:
                    03:c6:d9:0d:bb:13:31:3f:b6:92:2c:56:fe:86:63:
                    57:ab:25:ac:23:10:e1:d6:62:76:19:8f:72:a2:f5:
                    00:03:a1:5f:ae:d2:e7:37:18:aa:3a:c1:3b:f3:28:
                    8d:b8:e7:35:e7:cc:4f:5c:c5:b4:85:86:d7:c0:19:
                    99:2a:15:aa:46:ce:97:79:52:f5:91:01:8d:2c:37:
                    56:f7:b5:d4:e5:50:99:72:51:30:d7:9e:fa:8c:8c:
                    db:3b:cf:7d:52:9f:66:d9:2f:9d:8a:98:a0:e3:42:
                    22:fe:f9:73:1a:0c:91:c6:1a:a3:ff:87:f1:4f:33:
                    5b:49:97:43:78:a2:34:61:30:1a:ed:7d:f5:61:1b:
                    02:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:0E:41:49:38:AF:FA:A3:5C:DF:8C:DB:39:F9:74:26:67:CF:55:C1
            X509v3 Authority Key Identifier:
                keyid:A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/A483B4186AD840A7AC891A010501E4DCDA8B38A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3231392e3135382e302f32332d3234203d3e203134363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:4b:0f:c4:86:fc:fb:ec:f9:eb:2f:60:b8:67:b2:95:76:51:
         e0:87:db:30:f6:68:f4:5a:78:55:14:cc:59:e2:1e:84:52:53:
         80:3b:bb:0e:56:45:09:f5:f8:eb:37:f9:d6:09:53:84:43:71:
         3d:e9:55:be:25:f3:c4:ac:95:b4:8d:ff:38:79:ee:fa:ca:f3:
         14:c9:71:43:9e:fd:d6:9b:f7:bc:00:0d:e1:05:eb:e5:3f:d1:
         f6:b6:bd:2f:2e:71:2b:a9:23:a8:32:00:1b:90:a5:5e:5c:25:
         3e:3c:10:3d:e9:0f:ce:e0:f1:fb:4f:68:93:36:4e:9e:31:27:
         5e:71:d9:a5:a2:5e:15:26:5e:00:33:14:ca:9e:f1:fe:bb:1f:
         c6:1f:a0:b0:4c:ea:12:0e:01:25:ed:ae:b2:7d:c7:43:2a:f2:
         bf:5c:f2:f9:bf:15:bf:0e:90:65:7c:dd:76:a8:b5:f8:5e:8c:
         fd:d5:c1:c6:57:d6:65:08:73:b0:da:a9:d2:67:3b:ed:6c:fe:
         a1:f8:cb:53:ab:f2:8e:96:14:ab:85:fb:14:bf:92:94:b1:fe:
         07:dc:d0:33:d6:13:47:69:e7:3e:da:f5:a4:47:a1:7e:bf:14:
         94:f4:cf:f1:1a:f4:8c:76:b9:62:8c:8f:0d:e6:9c:19:43:4f:
         67:81:90:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:12 2024 by rpki-client on console-ams.rpki-client.org