Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3232392e3234382e302f32332d3234203d3e203132313336.roa
File:                     3230302e3232392e3234382e302f32332d3234203d3e203132313336.roa (raw, json)
Hash identifier:          Z20nkWpGl8cD3g5h4HoFpnbhdV6f0gXLsmPGaV8m2rg=
Subject key identifier:   12:32:2D:3C:01:8A:1B:45:1A:8F:FC:22:BC:F2:74:EB:87:DE:81:94
Certificate issuer:       /CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
Certificate serial:       53C51325379D9FBAFC05559D3BE3A59FDAE42871
Authority key identifier: A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3232392e3234382e302f32332d3234203d3e203132313336.roa
Signing time:             Sun 10 Sep 2023 12:04:00 +0000
ROA not before:           Sun 10 Sep 2023 11:59:00 +0000
ROA not after:            Sun 08 Sep 2024 12:04:00 +0000
asID:                     12136
IP address blocks:        200.229.248.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:c5:13:25:37:9d:9f:ba:fc:05:55:9d:3b:e3:a5:9f:da:e4:28:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
        Validity
            Not Before: Sep 10 11:59:00 2023 GMT
            Not After : Sep  8 12:04:00 2024 GMT
        Subject: CN=3082010A0282010100B715D1313573F2258DB11224366B9245CC635BFA2E6670DDFD77CC0125457702050CB7A5998D1FAAA5F6533C4D770550B4902B0C903CABF71D93F1634C1A635A4DA6862214EB40EFA73CA7B360C8F34B49F60B76D7DA0EE8DE892DD6F644839A2A1809861443E8EACEAA4F0890DC7A857C76DCE4C8C6598ECF4F1783558C0781C7491B48189E273771FECE566BB362A60F2A1FB6C483E01862773FB3FAE1BA1C8CA59FE063E4D8CD301E9B21BD5A71468662783F4E78AAA4A589374E0040740B9936DF0378029AD160B5FC6070D4237694963472C389D08A24B2A8D53340989D4B822FBDA3DD2F247479AEFC7170119E1799F50BBB7FBB707E57447DF0476A7B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:15:d1:31:35:73:f2:25:8d:b1:12:24:36:6b:
                    92:45:cc:63:5b:fa:2e:66:70:dd:fd:77:cc:01:25:
                    45:77:02:05:0c:b7:a5:99:8d:1f:aa:a5:f6:53:3c:
                    4d:77:05:50:b4:90:2b:0c:90:3c:ab:f7:1d:93:f1:
                    63:4c:1a:63:5a:4d:a6:86:22:14:eb:40:ef:a7:3c:
                    a7:b3:60:c8:f3:4b:49:f6:0b:76:d7:da:0e:e8:de:
                    89:2d:d6:f6:44:83:9a:2a:18:09:86:14:43:e8:ea:
                    ce:aa:4f:08:90:dc:7a:85:7c:76:dc:e4:c8:c6:59:
                    8e:cf:4f:17:83:55:8c:07:81:c7:49:1b:48:18:9e:
                    27:37:71:fe:ce:56:6b:b3:62:a6:0f:2a:1f:b6:c4:
                    83:e0:18:62:77:3f:b3:fa:e1:ba:1c:8c:a5:9f:e0:
                    63:e4:d8:cd:30:1e:9b:21:bd:5a:71:46:86:62:78:
                    3f:4e:78:aa:a4:a5:89:37:4e:00:40:74:0b:99:36:
                    df:03:78:02:9a:d1:60:b5:fc:60:70:d4:23:76:94:
                    96:34:72:c3:89:d0:8a:24:b2:a8:d5:33:40:98:9d:
                    4b:82:2f:bd:a3:dd:2f:24:74:79:ae:fc:71:70:11:
                    9e:17:99:f5:0b:bb:7f:bb:70:7e:57:44:7d:f0:47:
                    6a:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:32:2D:3C:01:8A:1B:45:1A:8F:FC:22:BC:F2:74:EB:87:DE:81:94
            X509v3 Authority Key Identifier:
                keyid:A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/A483B4186AD840A7AC891A010501E4DCDA8B38A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3232392e3234382e302f32332d3234203d3e203132313336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5a:a2:ec:b9:5b:2e:35:da:f3:5b:ae:d4:2c:a1:52:00:1e:c2:
         5f:70:a0:b5:fa:63:53:52:66:4a:be:a1:fd:10:6f:68:c3:66:
         db:94:50:9a:4a:37:f2:a8:b1:98:b4:e2:63:2d:fe:26:b8:c8:
         af:a2:71:23:1a:37:06:11:c2:b8:48:91:6a:23:db:97:95:e3:
         6a:af:19:cb:50:51:24:31:13:84:35:a0:27:23:c6:2b:31:01:
         54:98:bb:c8:c6:2b:b1:59:e4:79:6b:73:b2:40:ba:03:b2:5b:
         f9:0c:5c:ce:1c:98:c3:04:d2:0e:d7:ff:cf:ff:02:6a:7c:0e:
         45:2e:e4:df:ac:f5:15:cd:93:e8:de:45:9e:c8:4d:72:25:9f:
         60:38:1f:eb:9d:f7:f2:4a:ff:e7:7d:7b:4a:0d:a9:19:b8:79:
         cc:d8:de:6d:c3:b3:2a:78:4b:42:a9:b7:64:3c:7a:65:4c:36:
         5f:4c:3e:7a:2a:58:e8:cf:c4:fb:a9:9c:85:b1:f3:42:98:a0:
         88:f7:6f:95:55:68:46:6d:b0:64:e1:7a:9b:b6:b0:64:ac:0d:
         12:02:e2:c7:70:c3:87:93:4d:b8:8e:a8:ba:6e:36:19:87:76:
         8f:28:1e:1e:9a:92:2c:10:36:61:aa:5d:21:86:55:95:71:b4:
         7f:62:e5:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:12 2024 by rpki-client on console-ams.rpki-client.org