Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3138392e34302e302f32332d3234203d3e203131343331.roa
File:                     3230302e3138392e34302e302f32332d3234203d3e203131343331.roa (raw, json)
Hash identifier:          KZSD2orcsRmQaKhdK7sKqfOUJkOWx79sPNWtSF/Vyf0=
Subject key identifier:   07:5E:FC:40:C3:5F:18:F9:B5:47:5C:8E:79:36:2D:EF:68:AB:92:02
Certificate issuer:       /CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
Certificate serial:       794D6F8C353CBD76BAED9B8DB8D8ABB90B684016
Authority key identifier: A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3138392e34302e302f32332d3234203d3e203131343331.roa
Signing time:             Thu 31 Aug 2023 16:04:00 +0000
ROA not before:           Thu 31 Aug 2023 15:59:00 +0000
ROA not after:            Thu 29 Aug 2024 16:04:00 +0000
asID:                     11431
IP address blocks:        200.189.40.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:4d:6f:8c:35:3c:bd:76:ba:ed:9b:8d:b8:d8:ab:b9:0b:68:40:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
        Validity
            Not Before: Aug 31 15:59:00 2023 GMT
            Not After : Aug 29 16:04:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4f:67:9b:44:0b:9b:9c:46:a4:06:5e:79:af:
                    3e:2a:57:39:c1:cc:70:29:bb:ab:85:db:94:ec:90:
                    32:37:ac:05:55:a1:3b:89:64:0e:cc:b8:3c:b5:ce:
                    dc:55:7e:e3:40:23:ce:7d:65:a9:33:5c:9f:de:ae:
                    2a:3e:67:4b:f0:05:3f:df:cf:37:bb:99:90:65:be:
                    7a:80:fb:dc:d7:41:d6:f0:8d:ac:cf:0a:3d:d7:54:
                    d0:39:e7:4a:6a:1a:d8:7d:7c:99:ec:42:f2:76:04:
                    1a:b7:5f:2c:f3:86:c3:bc:44:e8:55:c0:67:bf:13:
                    77:e7:66:be:da:31:42:26:5e:6e:d6:fd:6f:ba:0c:
                    6e:9d:91:d4:07:ee:a6:00:e5:a1:da:c8:28:ac:d7:
                    9c:b8:68:3c:06:d8:d2:4e:5b:e1:3e:69:1f:fb:e6:
                    2b:17:94:bc:c9:54:1b:21:07:e6:ab:9b:96:45:9e:
                    c2:88:fd:1e:7d:6b:8a:2a:c5:a2:61:ae:1c:0c:fc:
                    b4:3a:57:06:3b:15:5d:19:a8:64:27:3e:d7:cf:5e:
                    94:40:2b:68:49:6f:4b:01:e0:20:0d:bb:f7:6b:69:
                    f5:1f:39:2c:d8:ed:2e:18:34:5b:3d:3f:0d:4a:6e:
                    2f:d5:5c:ee:0f:a1:62:88:a8:8a:a5:aa:c8:7b:0c:
                    24:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:5E:FC:40:C3:5F:18:F9:B5:47:5C:8E:79:36:2D:EF:68:AB:92:02
            X509v3 Authority Key Identifier:
                keyid:A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/A483B4186AD840A7AC891A010501E4DCDA8B38A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3138392e34302e302f32332d3234203d3e203131343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.189.40.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:d3:69:fc:f5:24:df:9d:21:ab:eb:d3:5c:95:5b:55:13:54:
         05:4b:c1:88:36:c7:25:93:96:dc:d1:3b:64:1f:15:00:d0:71:
         2d:39:3f:31:9c:e4:5c:a9:55:c7:35:8c:41:5d:e3:e6:b7:19:
         f6:cf:ac:d2:ee:0b:9c:ca:6f:a8:02:83:a6:27:69:9f:fb:28:
         e9:ca:cf:fb:ec:44:50:c8:4e:27:71:0f:d9:c1:5a:1e:6a:25:
         70:9d:6a:9a:bf:9f:08:78:98:ee:04:f4:63:6a:ba:73:92:2c:
         83:10:37:90:a8:3a:da:c1:81:87:0d:8a:67:33:61:42:97:09:
         7f:2b:a3:3c:f2:9e:4f:ed:b6:2d:15:ff:2a:96:0a:03:ad:1b:
         c3:42:a3:4a:f2:64:79:47:57:44:7e:bc:e8:51:20:f9:c5:c9:
         cf:8b:62:30:db:70:3f:c9:c7:97:0b:cb:97:58:46:56:d6:5c:
         1a:2f:6b:8c:7a:5a:b6:66:b3:e6:a9:64:5e:7f:1e:b0:d7:10:
         7f:db:fc:d7:de:6b:20:e1:22:3f:c7:a7:6f:72:66:e7:64:b5:
         96:5b:8e:69:fc:ce:8f:1a:16:6c:68:5b:6a:58:89:1e:cf:23:
         44:c2:d8:7b:6d:4e:a1:ec:3a:07:4d:59:57:8c:64:a7:0d:30:
         85:24:1c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org