Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3231392e3134332e302f32342d3332203d3e2030.roa
File:                     3230302e3231392e3134332e302f32342d3332203d3e2030.roa (raw, json)
Hash identifier:          g5i36M6mjJc9B4ah6S9nPkRseIkhjw7bSC95VJURVHQ=
Subject key identifier:   4E:65:4E:4A:BB:EA:FA:CF:60:54:F7:CF:9E:70:B6:B3:84:6F:5B:11
Certificate issuer:       /CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
Certificate serial:       76B0633D42D3B7A9DCA2ED9C62BCA2524DDDCD98
Authority key identifier: A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3231392e3134332e302f32342d3332203d3e2030.roa
Signing time:             Sat 23 Sep 2023 16:54:00 +0000
ROA not before:           Sat 23 Sep 2023 16:49:00 +0000
ROA not after:            Sat 21 Sep 2024 16:54:00 +0000
asID:                     0
IP address blocks:        200.219.143.0/24 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:b0:63:3d:42:d3:b7:a9:dc:a2:ed:9c:62:bc:a2:52:4d:dd:cd:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
        Validity
            Not Before: Sep 23 16:49:00 2023 GMT
            Not After : Sep 21 16:54:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:4b:09:77:ba:c0:3a:a3:d2:53:f0:dd:51:46:
                    01:49:45:15:42:53:d9:6c:cf:4b:a4:fc:06:92:fe:
                    46:31:b3:83:0f:c7:32:2c:48:90:5d:7f:1c:3f:f7:
                    92:93:ed:0a:56:80:1b:df:60:b2:d9:1e:61:78:8d:
                    c2:74:9b:49:b3:db:3e:16:1a:83:d0:67:b1:27:1a:
                    67:0a:e8:a1:2b:b8:fb:e6:6d:93:ee:3d:a7:1c:e2:
                    0a:dd:ea:63:91:4f:92:ad:3c:5e:b4:0d:4d:3f:77:
                    89:ad:f9:1f:30:9f:be:86:c1:38:4b:5a:76:e0:d5:
                    fb:30:4a:fe:c1:d7:12:13:27:0d:0d:e3:4f:5a:4c:
                    8b:f2:de:d0:4b:c0:a0:57:7a:4e:4f:9d:27:84:84:
                    9d:57:2c:a0:8d:c0:12:35:32:f1:22:10:72:cd:ae:
                    80:64:66:46:94:23:90:49:3f:ec:02:f5:e8:3e:4e:
                    4b:cd:4d:d5:86:ed:90:42:b9:d2:7c:47:2b:3a:f4:
                    96:44:93:8e:af:62:ae:e4:94:0f:ed:2f:25:46:d0:
                    2b:aa:ae:d7:b4:be:bf:cb:ef:1b:b5:f2:c7:b5:16:
                    4e:5d:3a:07:90:1e:c5:86:33:77:f0:41:fb:ec:3b:
                    b2:8e:0b:5d:5a:17:7b:09:eb:b4:23:bd:98:9c:d8:
                    42:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:65:4E:4A:BB:EA:FA:CF:60:54:F7:CF:9E:70:B6:B3:84:6F:5B:11
            X509v3 Authority Key Identifier:
                keyid:A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/A483B4186AD840A7AC891A010501E4DCDA8B38A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3231392e3134332e302f32342d3332203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:58:53:2d:36:bd:da:54:9a:b4:59:34:35:e1:fc:ca:53:3d:
         2a:ad:35:7f:eb:17:86:fe:9e:49:53:7d:76:22:80:26:13:2a:
         5e:79:8f:81:6f:ae:08:f8:08:d2:ca:aa:89:18:de:aa:b0:36:
         57:c8:23:c3:90:5c:53:5f:1b:10:55:b6:03:08:81:dc:22:87:
         0c:d6:df:25:bf:b3:c0:20:50:f5:6a:0e:9b:34:df:b4:a7:7b:
         76:64:5a:e1:36:ad:20:a8:23:fa:8c:d9:7f:2f:4f:e9:d3:eb:
         99:ef:41:4c:4f:d5:e8:aa:b9:e4:cc:0f:5c:89:45:d6:cf:07:
         3e:3d:e4:9b:28:09:a5:bd:c7:3c:59:23:c6:42:b8:b1:3d:5e:
         e5:e6:ae:b3:c1:8c:d2:f8:b5:df:cc:a6:ea:b8:a7:bd:0c:99:
         9a:af:54:0f:92:39:31:be:29:cf:fe:67:a8:1f:f0:3a:71:a9:
         68:57:e0:a7:64:14:74:ee:03:c4:64:90:c0:f9:87:55:4c:47:
         04:64:12:da:90:3d:b3:32:07:9f:3a:da:90:72:34:ac:94:a4:
         05:64:35:d9:c5:cd:c8:97:56:7e:b8:29:a2:b9:80:2b:19:cb:
         58:7e:1d:c7:0f:98:d2:d4:cc:e4:63:44:00:90:f5:74:33:18:
         69:20:3e:7c
-----BEGIN CERTIFICATE-----
MIIHOzCCBiOgAwIBAgIUdrBjPULTt6ncou2cYryiUk3dzZgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTQ4M0I0MTg2QUQ4NDBBN0FDODkxQTAxMDUwMUU0RENE
QThCMzhBOTAeFw0yMzA5MjMxNjQ5MDBaFw0yNDA5MjExNjU0MDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRTk0QjA5NzdCQUMwM0FBM0Qy
NTNGMERENTE0NjAxNDk0NTE1NDI1M0Q5NkNDRjRCQTRGQzA2OTJGRTQ2MzFCMzgz
MEZDNzMyMkM0ODkwNUQ3RjFDM0ZGNzkyOTNFRDBBNTY4MDFCREY2MEIyRDkxRTYx
Nzg4REMyNzQ5QjQ5QjNEQjNFMTYxQTgzRDA2N0IxMjcxQTY3MEFFOEExMkJCOEZC
RTY2RDkzRUUzREE3MUNFMjBBRERFQTYzOTE0RjkyQUQzQzVFQjQwRDREM0Y3Nzg5
QURGOTFGMzA5RkJFODZDMTM4NEI1QTc2RTBENUZCMzA0QUZFQzFENzEyMTMyNzBE
MERFMzRGNUE0QzhCRjJERUQwNEJDMEEwNTc3QTRFNEY5RDI3ODQ4NDlENTcyQ0Ew
OERDMDEyMzUzMkYxMjIxMDcyQ0RBRTgwNjQ2NjQ2OTQyMzkwNDkzRkVDMDJGNUU4
M0U0RTRCQ0Q0REQ1ODZFRDkwNDJCOUQyN0M0NzJCM0FGNDk2NDQ5MzhFQUY2MkFF
RTQ5NDBGRUQyRjI1NDZEMDJCQUFBRUQ3QjRCRUJGQ0JFRjFCQjVGMkM3QjUxNjRF
NUQzQTA3OTAxRUM1ODYzMzc3RjA0MUZCRUMzQkIyOEUwQjVENUExNzdCMDlFQkI0
MjNCRDk4OUNEODQyMDkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA6UsJd7rAOqPSU/DdUUYBSUUVQlPZbM9LpPwGkv5GMbODD8cyLEiQ
XX8cP/eSk+0KVoAb32Cy2R5heI3CdJtJs9s+FhqD0GexJxpnCuihK7j75m2T7j2n
HOIK3epjkU+SrTxetA1NP3eJrfkfMJ++hsE4S1p24NX7MEr+wdcSEycNDeNPWkyL
8t7QS8CgV3pOT50nhISdVyygjcASNTLxIhByza6AZGZGlCOQST/sAvXoPk5LzU3V
hu2QQrnSfEcrOvSWRJOOr2Ku5JQP7S8lRtArqq7XtL6/y+8btfLHtRZOXToHkB7F
hjN38EH77DuyjgtdWhd7Ceu0I72YnNhCCQIDAQABo4ICSTCCAkUwHQYDVR0OBBYE
FE5lTkq76vrPYFT3z55wtrOEb1sRMB8GA1UdIwQYMBaAFKSDtBhq2ECnrIkaAQUB
5NzaizipMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0EyeDZpY2FLcFZXUDV1
VUJ6SlF6UnZFcGp2UzdQVlc3WjJFcjRGMnF0MUN0LzEvQTQ4M0I0MTg2QUQ4NDBB
N0FDODkxQTAxMDUwMUU0RENEQThCMzhBOS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9BNDgzQjQxODZBRDg0MEE3QUM4OTFBMDEwNTAxRTREQ0RBOEIz
OEE5LmNlcjCBpgYIKwYBBQUHAQsEgZkwgZYwgZMGCCsGAQUFBzALhoGGcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BMng2aWNhS3BWV1A1dVVCekpR
elJ2RXBqdlM3UFZXN1oyRXI0RjJxdDFDdC8xLzMyMzAzMDJlMzIzMTM5MmUzMTM0
MzMyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzMC5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMjbjzANBgkq
hkiG9w0BAQsFAAOCAQEAm1hTLTa92lSatFk0NeH8ylM9Kq01f+sXhv6eSVN9diKA
JhMqXnmPgW+uCPgI0sqqiRjeqrA2V8gjw5BcU18bEFW2AwiB3CKHDNbfJb+zwCBQ
9WoOmzTftKd7dmRa4TatIKgj+ozZfy9P6dPrme9BTE/V6Kq55MwPXIlF1s8HPj3k
mygJpb3HPFkjxkK4sT1e5eaus8GM0vi138ym6rinvQyZmq9UD5I5Mb4pz/5nqB/w
OnGpaFfgp2QUdO4DxGSQwPmHVUxHBGQS2pA9szIHnzrakHI0rJSkBWQ12cXNyJdW
frgpormAKxnLWH4dxw+Y0tTM5GNEAJD1dDMYaSA+fA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:25 2024 by rpki-client on console-ams.rpki-client.org