Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3139322e3130382e302f32322d3332203d3e2030.roa
File:                     3230302e3139322e3130382e302f32322d3332203d3e2030.roa (raw, json)
Hash identifier:          KLiDODWMcUHteF1Ac3D0V9+KqSm1hxiCe5OXduXD/fU=
Subject key identifier:   C1:F7:F0:C6:1D:8A:13:88:D3:3B:2F:20:0A:6D:DD:5D:CA:8B:55:2C
Certificate issuer:       /CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
Certificate serial:       4F691D88CD354493D4AA1AC47295DC446FCAB213
Authority key identifier: A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3139322e3130382e302f32322d3332203d3e2030.roa
Signing time:             Sat 23 Sep 2023 16:56:01 +0000
ROA not before:           Sat 23 Sep 2023 16:51:01 +0000
ROA not after:            Sat 21 Sep 2024 16:56:01 +0000
asID:                     0
IP address blocks:        200.192.108.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:69:1d:88:cd:35:44:93:d4:aa:1a:c4:72:95:dc:44:6f:ca:b2:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
        Validity
            Not Before: Sep 23 16:51:01 2023 GMT
            Not After : Sep 21 16:56:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:6b:1d:b5:62:8f:86:9e:39:01:ce:a0:d4:83:
                    6a:e6:51:b0:4a:83:3b:ed:99:a0:8e:6e:c0:0d:38:
                    0c:af:ab:6f:87:25:0e:67:9f:34:3c:cc:d6:6f:d7:
                    7d:5d:b8:72:e7:b8:02:ab:ac:4a:96:2f:43:47:e4:
                    36:ba:79:66:48:e9:60:a0:8b:fb:a1:88:9b:92:e9:
                    86:65:97:41:b3:22:09:39:c4:f8:a0:b5:d2:e7:95:
                    e6:de:0f:8f:ac:47:a8:ce:8e:30:d2:2d:1e:d9:e4:
                    e6:14:46:7e:a2:0e:7f:a3:3f:86:fc:42:98:66:01:
                    9d:f6:db:fd:9a:cf:4a:a0:ef:af:a3:6a:13:4f:b1:
                    3c:01:42:76:7f:8a:88:38:25:d4:dd:00:93:24:df:
                    62:49:e7:a4:35:0d:c8:c1:18:5d:95:52:82:bf:a5:
                    5f:d8:de:22:79:a9:a0:4b:cb:1d:6f:b0:13:41:03:
                    2e:5f:37:56:25:9a:df:8b:69:bd:4c:43:bc:fe:83:
                    27:83:66:00:ab:8d:07:56:42:ca:25:42:de:13:cb:
                    95:7d:8c:f4:c7:a4:e3:de:92:22:b6:aa:6b:f8:43:
                    0d:40:df:aa:b2:96:69:83:69:c6:cb:cf:77:95:33:
                    ae:cf:4a:8b:ba:fd:89:1e:e0:11:49:d2:f0:aa:2e:
                    af:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:F7:F0:C6:1D:8A:13:88:D3:3B:2F:20:0A:6D:DD:5D:CA:8B:55:2C
            X509v3 Authority Key Identifier:
                keyid:A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/A483B4186AD840A7AC891A010501E4DCDA8B38A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3139322e3130382e302f32322d3332203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.192.108.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:47:ef:27:bf:23:a4:e5:3f:7e:d9:fc:30:cf:23:da:e6:f7:
         5a:45:70:ac:32:73:93:5e:72:d4:bf:9f:94:fa:c0:1b:89:7a:
         62:83:05:2d:d2:1e:c5:73:df:33:bd:92:94:c1:ca:12:a5:99:
         f7:ed:c9:fe:f6:ad:09:a7:67:59:69:b5:33:48:a6:74:6e:dc:
         80:02:b7:49:51:2b:d6:0d:00:a5:78:11:a0:2f:d7:4c:59:32:
         72:8b:34:ef:2a:a8:6b:ec:2d:d9:3e:30:8f:a3:65:41:70:81:
         95:82:ce:40:f4:df:99:13:95:81:ef:80:cf:9a:3f:51:61:b1:
         0e:28:1b:41:4d:92:77:28:28:c6:58:84:a4:6b:e9:b4:4f:a6:
         34:53:33:06:ff:e4:8d:e3:f3:f3:00:50:d2:dc:96:84:00:11:
         ff:b2:f1:fa:e1:85:37:1a:16:69:26:6b:5b:20:de:dc:31:7f:
         fd:84:2f:f5:ba:bd:ff:2a:b0:95:98:20:4c:f5:48:cd:b2:9f:
         7d:cc:34:8a:55:32:f7:5c:ee:b8:79:e6:20:a6:58:99:a3:17:
         1d:59:20:ae:9c:54:9e:e7:92:da:3f:51:6b:b7:e9:d9:0b:38:
         7b:f0:c3:df:37:ea:03:48:76:be:6e:a3:4c:ef:6b:fe:29:b4:
         a2:8b:c5:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:12 2024 by rpki-client on console-ams.rpki-client.org