Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3232392e3234382e302f32332d3234203d3e203131343331.roa
File:                     3230302e3232392e3234382e302f32332d3234203d3e203131343331.roa (raw, json)
Hash identifier:          31aUV35NYbZ3cRT6+MqMHCNYIWd+FhNI9MUPQHwe0cg=
Subject key identifier:   12:E7:65:32:04:8F:E5:7C:AC:DB:2A:39:64:DF:8D:1F:73:F6:DB:20
Certificate issuer:       /CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
Certificate serial:       4725C7BD6A2E562FCF5276F2EF4730F74607D3E6
Authority key identifier: A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3232392e3234382e302f32332d3234203d3e203131343331.roa
Signing time:             Sun 10 Sep 2023 12:04:00 +0000
ROA not before:           Sun 10 Sep 2023 11:59:00 +0000
ROA not after:            Sun 08 Sep 2024 12:04:00 +0000
asID:                     11431
IP address blocks:        200.229.248.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:25:c7:bd:6a:2e:56:2f:cf:52:76:f2:ef:47:30:f7:46:07:d3:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
        Validity
            Not Before: Sep 10 11:59:00 2023 GMT
            Not After : Sep  8 12:04:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1d:88:b2:c5:1d:be:de:06:a4:dc:53:a3:fa:
                    af:0f:1a:fd:4d:29:7e:9d:bb:3c:53:54:95:57:f7:
                    96:2c:09:d2:5e:ae:0f:91:ef:90:ff:61:c6:58:f7:
                    59:78:cf:e5:9e:e9:4e:b3:3e:c4:22:fd:b6:ca:2a:
                    3e:30:31:06:78:ed:e6:c2:c7:0e:44:a3:a5:c0:1b:
                    10:92:8c:b0:b8:15:cf:97:a1:20:ef:69:e3:87:eb:
                    ef:0e:b7:a0:8b:87:64:0a:0e:58:8e:66:3c:8f:3b:
                    ee:17:2d:de:8b:58:3b:69:b3:02:f4:64:55:94:70:
                    98:d0:1f:b6:1a:8f:7d:42:a2:19:db:be:f1:13:ae:
                    e5:10:3a:a4:fb:33:d8:a5:9d:5e:38:0e:0d:57:d7:
                    0a:a4:4b:41:9f:3a:27:6b:dd:9d:e2:46:d6:9c:d1:
                    3e:43:63:9a:7e:3f:76:23:90:4d:d7:05:12:86:de:
                    4f:a6:d2:a8:15:a6:91:59:16:f1:db:a5:12:e2:17:
                    ca:47:4f:5a:e8:69:31:29:0d:8c:a3:0f:af:87:44:
                    2c:46:c5:62:ab:47:ca:b8:f8:2b:e7:c4:9c:25:1d:
                    9c:e5:8d:38:8a:aa:1c:80:f1:14:2d:91:39:2d:43:
                    6f:ea:cf:cb:ee:fe:17:3a:75:f7:c9:fa:94:5d:84:
                    37:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E7:65:32:04:8F:E5:7C:AC:DB:2A:39:64:DF:8D:1F:73:F6:DB:20
            X509v3 Authority Key Identifier:
                keyid:A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/A483B4186AD840A7AC891A010501E4DCDA8B38A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3232392e3234382e302f32332d3234203d3e203131343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:cc:2d:56:2f:c3:c0:a9:d9:d9:56:19:37:b1:b0:ea:03:82:
         33:9d:8a:4e:24:f2:67:5d:48:8e:c8:91:90:59:26:44:d7:ef:
         94:13:ae:75:d7:86:ca:73:f5:4f:bb:21:da:4b:d7:46:4c:06:
         eb:d6:b5:c6:00:87:8f:16:dc:42:fc:29:96:34:4c:ad:e4:24:
         21:d9:ac:07:f2:5a:ec:8b:c0:4b:60:ca:01:69:c0:84:a1:e5:
         14:47:57:f6:af:03:38:7e:93:ff:b2:01:0a:65:9e:1c:10:d5:
         76:81:d9:21:af:37:28:89:bc:5a:68:4b:80:0e:9b:43:0e:0b:
         d8:38:4b:20:70:f5:7c:e5:18:e8:82:93:46:c9:ad:36:8c:9c:
         42:18:6c:3d:cf:7a:09:5f:45:03:ea:46:44:00:df:49:4c:3a:
         fe:58:2a:69:b1:e6:d3:e8:1a:cd:1c:0a:3a:5d:13:b1:e2:5c:
         c7:b3:87:4b:e5:dd:23:f4:45:81:6d:55:3e:49:98:1b:60:58:
         a5:13:bc:f8:3e:7b:92:58:52:cb:1a:4c:1d:02:21:43:ec:90:
         06:7f:99:31:45:72:c5:77:1e:58:d1:9d:17:63:5f:6c:f9:e4:
         8f:93:b4:03:b6:63:3a:54:41:a5:cd:8c:8e:08:02:e1:fd:87:
         96:69:08:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:12 2024 by rpki-client on console-ams.rpki-client.org