Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3139322e3233322e302f32332d3234203d3e203131323834.roa
File:                     3230302e3139322e3233322e302f32332d3234203d3e203131323834.roa (raw, json)
Hash identifier:          yvyBFGgzpkSJ7OkQmujEAYcRH5yhccSBHiD1uPLRYWk=
Subject key identifier:   62:1B:60:B4:5B:B9:03:C4:85:C8:37:30:6C:B3:DA:3F:55:13:13:F4
Certificate issuer:       /CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
Certificate serial:       65A274024B2474044AA6F6202984B0BD486C8F19
Authority key identifier: A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3139322e3233322e302f32332d3234203d3e203131323834.roa
Signing time:             Thu 31 Aug 2023 13:00:00 +0000
ROA not before:           Thu 31 Aug 2023 12:55:00 +0000
ROA not after:            Thu 29 Aug 2024 13:00:00 +0000
asID:                     11284
IP address blocks:        200.192.232.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:a2:74:02:4b:24:74:04:4a:a6:f6:20:29:84:b0:bd:48:6c:8f:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
        Validity
            Not Before: Aug 31 12:55:00 2023 GMT
            Not After : Aug 29 13:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:24:59:8a:d1:b0:5b:56:29:e2:26:bf:d3:ef:
                    7c:ee:73:09:d9:ae:5c:0d:33:54:b6:b8:6b:a4:41:
                    99:0d:9c:86:d4:c6:fe:c3:04:af:06:39:61:7e:32:
                    30:e7:ce:1d:6a:15:c3:2d:85:39:f8:2c:19:e4:e0:
                    19:53:bc:8f:c7:e8:6c:7b:71:73:16:c9:e6:fe:7c:
                    42:9b:38:6a:97:4b:ad:d9:b2:6a:96:75:46:0c:4f:
                    7e:c0:30:fe:da:40:75:37:64:e8:6d:76:a2:07:c9:
                    b9:88:e5:d1:a5:00:fe:f6:11:c3:8f:45:88:96:33:
                    72:a6:fc:2e:c2:33:d3:5e:2c:33:ea:34:6f:7a:d1:
                    4d:67:2a:9f:8e:67:5f:6a:6c:70:5e:3c:52:86:85:
                    b0:75:db:21:02:70:d6:a5:01:f4:f1:06:26:dc:48:
                    f8:d0:d7:96:82:c0:78:45:92:54:52:91:46:4f:c9:
                    4c:96:5c:12:6a:9a:8c:a9:28:86:60:fc:85:48:74:
                    62:76:90:fa:9e:98:b8:a3:87:7f:f0:96:10:7b:f0:
                    6f:5d:b3:bf:09:c4:1f:ed:88:30:66:97:84:70:dd:
                    89:35:62:80:83:34:1e:58:12:7f:e6:68:f6:0f:4b:
                    98:9f:1f:d2:2c:45:86:fc:ac:a8:28:ee:32:b6:9b:
                    cd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:1B:60:B4:5B:B9:03:C4:85:C8:37:30:6C:B3:DA:3F:55:13:13:F4
            X509v3 Authority Key Identifier:
                keyid:A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/A483B4186AD840A7AC891A010501E4DCDA8B38A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3139322e3233322e302f32332d3234203d3e203131323834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.192.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:dc:00:47:69:75:8f:c5:70:60:b4:a9:c2:9b:09:b4:b8:bd:
         32:11:ec:4d:91:89:88:f3:a9:ca:fb:68:c0:7f:ec:77:3d:c2:
         df:32:48:e2:b2:3a:71:0c:c3:2b:3a:eb:4b:3b:53:28:de:c2:
         8f:3b:d2:a7:e0:f4:b8:b0:bb:5f:2d:4f:c5:10:d7:44:15:96:
         3e:57:aa:d4:a1:8d:af:67:d7:0e:1b:29:d5:45:5f:52:8c:02:
         bf:17:4d:3a:c1:29:f8:1a:aa:26:bb:10:ac:57:c1:29:0a:ce:
         71:d8:34:45:8a:5b:8a:df:bc:a8:19:4c:a6:47:ae:8f:74:2e:
         2c:78:d7:b5:29:6f:5d:1d:d2:ef:7f:eb:e7:da:f3:85:43:f7:
         6a:8d:a3:e4:ea:c2:78:ca:d0:09:ac:d9:96:5f:3d:63:9d:5d:
         63:24:78:be:aa:f9:be:2b:11:35:a4:7c:81:21:80:e1:04:e7:
         7c:77:21:0f:f3:19:52:00:7d:64:5c:fa:47:e5:3d:17:1b:2d:
         ae:ef:6f:08:9c:ab:20:aa:0c:aa:5a:5d:0c:e7:7b:fc:66:62:
         ad:bb:8d:17:b1:84:17:ef:e9:f5:38:e6:b9:bf:1c:4d:56:90:
         8e:b7:90:b7:2a:14:02:65:28:46:1e:8a:01:10:15:e6:ec:70:
         85:59:cf:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org