Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3231392e3135382e302f32332d3234203d3e203238333435.roa
File:                     3230302e3231392e3135382e302f32332d3234203d3e203238333435.roa (raw, json)
Hash identifier:          H+LgRJe9YG77unMjGnG65Fh0nlwSiP7cJXT+Nuqm1W4=
Subject key identifier:   14:12:68:E6:A9:9B:D4:48:54:F0:C3:13:4D:76:E0:F3:D4:2A:8B:E9
Certificate issuer:       /CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
Certificate serial:       33EC68E51D4CEEC776075162D392447E83FC7526
Authority key identifier: A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3231392e3135382e302f32332d3234203d3e203238333435.roa
Signing time:             Wed 03 Apr 2024 14:42:00 +0000
ROA not before:           Wed 03 Apr 2024 14:37:00 +0000
ROA not after:            Wed 02 Apr 2025 14:42:00 +0000
asID:                     28345
IP address blocks:        200.219.158.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:ec:68:e5:1d:4c:ee:c7:76:07:51:62:d3:92:44:7e:83:fc:75:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
        Validity
            Not Before: Apr  3 14:37:00 2024 GMT
            Not After : Apr  2 14:42:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:3f:49:28:70:ba:09:b3:1d:63:06:a2:17:31:
                    9f:b4:07:3f:66:01:42:42:ff:a6:f7:99:b0:fa:03:
                    68:5d:ef:a8:e8:52:3c:58:e4:50:95:c4:2a:99:fd:
                    3c:7c:03:cc:18:53:48:8c:0c:f7:ba:55:01:fe:b5:
                    32:94:d4:dc:10:0c:61:2c:47:2a:ac:9f:0d:30:4d:
                    a6:e8:df:9e:78:78:c2:15:50:63:83:fc:90:86:6d:
                    7b:6e:e5:e8:ad:c6:19:d5:74:7f:34:97:86:18:42:
                    0d:e2:b3:8c:20:fa:fc:dd:32:11:ba:78:d3:2f:f6:
                    90:eb:33:7a:3d:76:c1:91:dd:9e:36:d8:f4:72:6d:
                    46:61:10:89:32:09:36:02:53:ca:19:b9:57:d0:d3:
                    1b:6e:63:ca:5a:01:6e:07:6d:11:2f:48:a9:84:0a:
                    a9:f7:e3:17:c3:e9:13:c7:a0:d9:15:d8:f7:b1:1c:
                    21:3e:c3:7f:2d:6c:cd:3b:99:8d:09:7a:be:67:dd:
                    9f:36:e1:96:d9:1c:13:6f:f2:42:fc:91:a7:fa:40:
                    3c:72:02:bc:65:50:8f:20:eb:f3:fd:41:7d:9a:a6:
                    0f:9e:0f:f0:81:f6:d9:64:f6:8b:3a:dc:8b:18:87:
                    f7:b6:54:f1:fe:59:9f:df:ab:14:d3:3f:57:7f:5f:
                    88:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:12:68:E6:A9:9B:D4:48:54:F0:C3:13:4D:76:E0:F3:D4:2A:8B:E9
            X509v3 Authority Key Identifier:
                keyid:A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/A483B4186AD840A7AC891A010501E4DCDA8B38A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3231392e3135382e302f32332d3234203d3e203238333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.158.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:53:c7:5a:3b:dc:74:5f:9c:85:0b:1e:c3:fb:b2:b8:97:c1:
         7b:ce:55:46:e6:5d:34:95:ae:98:f9:ab:b4:0c:07:36:f0:43:
         8e:d5:cb:dc:f5:d1:10:17:a8:b9:43:99:37:18:15:f6:e0:7c:
         b9:b0:42:8c:34:40:c1:6f:ce:52:0a:21:dc:f4:62:7f:c3:30:
         9d:c6:28:e3:eb:16:1c:20:e4:e2:ed:ef:4d:1a:08:69:d2:57:
         8b:95:6f:60:80:59:ae:8c:e6:0e:6f:ec:6c:97:ba:d2:b0:6f:
         2c:bd:31:f3:9c:0d:8e:da:12:38:22:73:2d:af:d5:bb:68:12:
         ab:72:7a:04:d5:49:2c:0d:8e:08:3d:57:87:3a:9a:93:d6:05:
         a8:d6:b4:0c:1a:b4:a8:5a:29:e1:53:58:14:4a:4b:c9:50:74:
         30:00:16:53:95:84:6a:8b:86:2e:86:79:53:4a:e5:cc:05:8b:
         92:4f:72:d7:ca:9b:68:5a:c7:9c:6b:5f:4f:55:1a:67:66:1e:
         02:12:ca:8d:95:ec:39:d6:48:97:a5:b0:fd:36:63:07:d4:16:
         a7:f1:3e:cf:77:7e:fe:9f:38:24:6a:e2:6a:94:8c:f3:33:87:
         86:e1:c7:2c:94:56:11:ab:99:6a:f1:2b:7e:57:0e:87:76:4c:
         56:80:fe:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:12 2024 by rpki-client on console-ams.rpki-client.org