Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3232392e3234382e302f32332d3234203d3e203238333435.roa
File:                     3230302e3232392e3234382e302f32332d3234203d3e203238333435.roa (raw, json)
Hash identifier:          Mtnv9tmU55ALyGZLR1GJKVUTXm++TpFcIC0YhrfvAyo=
Subject key identifier:   3B:FD:C4:B3:33:54:B6:87:CD:43:AC:32:1F:43:D4:FB:18:F0:83:18
Certificate issuer:       /CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
Certificate serial:       721D43B69DC6BE465AEBD7015924E9BD4B642482
Authority key identifier: A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3232392e3234382e302f32332d3234203d3e203238333435.roa
Signing time:             Wed 03 Apr 2024 14:42:00 +0000
ROA not before:           Wed 03 Apr 2024 14:37:00 +0000
ROA not after:            Wed 02 Apr 2025 14:42:00 +0000
asID:                     28345
IP address blocks:        200.229.248.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:1d:43:b6:9d:c6:be:46:5a:eb:d7:01:59:24:e9:bd:4b:64:24:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
        Validity
            Not Before: Apr  3 14:37:00 2024 GMT
            Not After : Apr  2 14:42:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:88:57:8d:9a:60:74:70:4f:14:8f:46:db:8e:
                    e9:f2:f9:f8:e3:b9:6e:94:43:be:cf:95:d3:93:c2:
                    aa:ef:e9:6c:53:ca:13:66:b9:85:0f:08:c8:9f:c4:
                    d7:cd:41:bb:12:3d:ef:54:4c:bd:50:8a:08:72:69:
                    8a:55:ef:10:7e:39:b7:a4:a7:e9:f1:82:dd:75:0f:
                    f2:a9:5b:7d:1b:19:e2:2a:87:02:76:e6:ed:c0:8c:
                    ae:2a:26:7f:20:f6:9d:ee:be:52:7f:53:ed:d0:84:
                    bb:48:c2:e8:16:9b:a6:a4:00:07:82:82:69:9c:1d:
                    fb:f5:9d:f6:4b:d3:34:22:ae:28:a8:7d:98:ff:b5:
                    4f:75:5f:4f:80:7c:a5:56:8f:4f:e6:ca:22:35:3e:
                    32:b8:84:4b:be:ab:0d:c1:99:f4:c1:52:db:df:38:
                    03:68:85:db:84:b0:f0:2d:92:b4:30:b8:7a:62:2b:
                    1e:63:08:ad:c0:ff:a2:1b:74:9c:e2:64:da:16:63:
                    52:f7:b7:6c:cc:59:38:82:4c:52:c0:25:fd:24:2b:
                    15:d0:54:b2:af:63:f3:de:96:57:f7:74:c5:07:6b:
                    c8:78:69:b3:55:5b:01:2c:6f:a9:ba:d1:c0:88:aa:
                    e8:e8:f4:f3:7c:f7:da:2a:49:5a:22:8e:f6:82:30:
                    03:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:FD:C4:B3:33:54:B6:87:CD:43:AC:32:1F:43:D4:FB:18:F0:83:18
            X509v3 Authority Key Identifier:
                keyid:A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/A483B4186AD840A7AC891A010501E4DCDA8B38A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3232392e3234382e302f32332d3234203d3e203238333435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.229.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:4a:66:f0:b9:5c:0b:73:61:b4:52:14:cf:71:82:ca:4f:a9:
         df:ae:9d:42:a7:82:1c:3c:df:dc:4f:1e:cc:ec:14:97:b5:a4:
         92:a6:38:ad:fb:e7:7f:28:f1:0c:41:57:f2:18:b2:8c:be:fe:
         81:8d:de:ab:ee:7d:b3:16:da:94:a1:62:31:10:93:8d:e1:97:
         dd:6f:21:2d:35:2a:70:31:b0:4a:68:c5:c1:ee:0e:be:90:20:
         3a:6f:7d:d7:9b:a9:f3:0f:77:b4:c5:e4:be:8a:4f:17:a3:33:
         11:f7:8b:40:d5:8f:2c:1a:ce:9f:9b:99:53:03:08:6e:fb:89:
         07:3c:c1:e3:94:93:2c:25:82:c4:cc:fe:ca:23:8e:3c:bc:80:
         30:15:4b:0d:d6:ca:dc:df:b0:32:ec:58:17:19:f8:e6:f0:ac:
         31:3d:b2:0d:08:9d:9d:f4:64:79:c2:8f:36:35:c1:43:af:15:
         8e:e3:07:a5:92:02:26:b9:91:79:36:48:58:69:5b:7f:19:09:
         e8:c8:e0:dd:55:7a:3a:a5:33:ef:2c:3c:0c:ca:dd:55:48:15:
         1d:65:38:ef:79:6c:3a:08:23:9e:20:a9:99:93:ea:8d:4b:ed:
         5a:e6:05:34:50:4e:eb:b2:58:ce:54:00:cb:5a:da:eb:9a:48:
         91:a3:fc:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:53 2024 by rpki-client on console-fra.rpki-client.org