Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3139322e3233322e302f32332d3234203d3e203131343331.roa
File:                     3230302e3139322e3233322e302f32332d3234203d3e203131343331.roa (raw, json)
Hash identifier:          D9LZlVWvcmhXtIRem5OspQZ/agbmWYFB1er66C6cIGM=
Subject key identifier:   40:1D:36:99:62:95:99:54:EC:5C:84:BC:35:28:13:10:B3:02:7E:71
Certificate issuer:       /CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
Certificate serial:       70BA7BE4021A811FDEA727275ABE3C62ED3B7AD6
Authority key identifier: A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3139322e3233322e302f32332d3234203d3e203131343331.roa
Signing time:             Thu 31 Aug 2023 16:06:00 +0000
ROA not before:           Thu 31 Aug 2023 16:01:00 +0000
ROA not after:            Thu 29 Aug 2024 16:06:00 +0000
asID:                     11431
IP address blocks:        200.192.232.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:ba:7b:e4:02:1a:81:1f:de:a7:27:27:5a:be:3c:62:ed:3b:7a:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
        Validity
            Not Before: Aug 31 16:01:00 2023 GMT
            Not After : Aug 29 16:06:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e2:76:f9:03:43:35:af:40:3e:13:7b:78:cd:
                    60:49:1e:05:d3:36:35:f2:f0:3b:72:fe:0c:5f:fb:
                    ec:15:7a:69:c9:01:e7:3a:63:cf:9b:89:0b:48:ed:
                    23:58:47:3d:ce:7f:bf:bd:af:7b:9a:d7:45:02:42:
                    5c:60:42:17:27:17:06:ef:85:86:29:a1:f2:2c:4c:
                    1d:8e:f4:10:bf:b6:07:40:74:ea:a1:67:e4:bf:4e:
                    e1:9d:fa:99:e3:03:af:ff:db:12:fc:ac:76:8c:fe:
                    97:38:94:b6:62:84:59:72:9e:4c:10:21:ad:50:71:
                    a6:de:be:ba:dd:50:55:9c:65:76:8c:2f:32:14:7e:
                    7e:d2:8c:7f:01:e5:f5:ae:78:20:13:87:6d:df:90:
                    1e:fa:4c:e3:3d:ee:ed:69:e3:a3:64:d1:5b:02:ab:
                    26:d1:80:89:b0:a7:4f:75:55:5e:7e:3d:ef:62:df:
                    48:25:35:f5:77:dd:36:95:db:25:37:8b:ed:83:3d:
                    fd:7f:55:9b:e0:d1:8c:57:af:a7:22:8c:bf:51:90:
                    82:d5:26:58:7d:d2:0e:1c:97:37:27:6f:cb:19:90:
                    a2:20:ea:79:55:5d:cb:5a:cf:ed:8a:38:98:0f:a0:
                    3c:35:96:94:99:2a:3e:7c:36:1c:9c:5a:2d:cc:f8:
                    20:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:1D:36:99:62:95:99:54:EC:5C:84:BC:35:28:13:10:B3:02:7E:71
            X509v3 Authority Key Identifier:
                keyid:A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/A483B4186AD840A7AC891A010501E4DCDA8B38A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3139322e3233322e302f32332d3234203d3e203131343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.192.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         32:9e:01:79:7f:09:11:0f:19:24:8f:49:ee:92:bb:15:f3:3c:
         bc:54:ae:27:2d:45:e1:0e:ab:b4:23:4f:c9:be:a8:4f:38:01:
         c6:84:ad:b6:6f:b8:0b:52:ea:e5:f5:82:3e:f0:c6:bc:af:44:
         e0:60:8d:4a:57:06:64:66:8e:24:71:97:c8:4e:8f:1c:72:83:
         48:5a:07:97:a5:25:a0:0b:6c:cd:c0:e8:de:9a:b9:bc:d2:8d:
         a2:c2:59:f4:72:56:03:08:b3:e3:6c:94:82:a3:12:91:c2:be:
         29:37:d6:df:68:30:4c:cd:91:29:2c:15:b7:97:e6:28:17:6f:
         6f:ea:62:a8:42:86:ff:23:c1:2e:30:23:c2:14:3a:39:50:16:
         ec:39:44:7a:53:b9:70:07:18:f3:be:31:fe:46:85:61:ca:d1:
         e5:cd:eb:cb:19:66:b3:b6:98:bb:dc:cc:54:08:8f:5c:37:5e:
         9b:1f:35:d2:2e:fd:51:9c:f9:31:55:f3:3d:99:25:43:64:dd:
         5b:65:6f:9d:54:6e:c5:8f:97:c0:8a:eb:b2:2f:50:0a:a8:a4:
         39:1a:cb:a7:22:da:67:ef:6d:47:b7:b7:b0:7f:91:9c:7b:3f:
         f4:23:9b:b1:e7:52:3d:22:94:dc:37:40:82:8a:b3:48:f7:8a:
         b7:9e:08:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:25 2024 by rpki-client on console-ams.rpki-client.org