Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3231392e3135342e302f32332d3234203d3e203131343331.roa
File:                     3230302e3231392e3135342e302f32332d3234203d3e203131343331.roa (raw, json)
Hash identifier:          l8+rC9OVdpCjV4ZtpNDCekMmk7Azaa1Nym0R6GaMhKE=
Subject key identifier:   08:7F:03:DB:03:9C:C6:C5:63:88:01:25:43:26:B1:4E:2A:77:15:99
Certificate issuer:       /CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
Certificate serial:       71C55E2E01A4D7512AE003C96AAC85829F144B32
Authority key identifier: A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3231392e3135342e302f32332d3234203d3e203131343331.roa
Signing time:             Mon 04 Sep 2023 11:02:00 +0000
ROA not before:           Mon 04 Sep 2023 10:57:00 +0000
ROA not after:            Mon 02 Sep 2024 11:02:00 +0000
asID:                     11431
IP address blocks:        200.219.154.0/23 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:c5:5e:2e:01:a4:d7:51:2a:e0:03:c9:6a:ac:85:82:9f:14:4b:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A483B4186AD840A7AC891A010501E4DCDA8B38A9
        Validity
            Not Before: Sep  4 10:57:00 2023 GMT
            Not After : Sep  2 11:02:00 2024 GMT
        Subject: CN=3082010A0282010100C7CB1579876F57E61D6F46226F7F9BBFBF6D6E842BB1949352D27C4A41CACCA003DFB1CEDAB59D75A22C9D31728F72804BCA605DB69B8248D7330E679A484723582913349E095526FE540DB36288695CEF90C7759AFCF10143D6F1FB11A444F123498E3BDC302E707F10F33A6A15FEB94CF72302BCD9EAD856AD2BC122F39B0C1BFEA901A0C5B869E7E80316C306D7B090C3E1FD03F5871DD19C4E834BAF805A4E8CA6BDF7164A622A233C27393CEE6C3DE5537DCF591227F77DC6759F3C1C79718DF0728B795958AD584257444B593B3ACC07507938399C5B0F5BAEC57812A0017B0736CEAD38C4950B48A851D01C6A469998F2ADC513927A3694044E508B770203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:cb:15:79:87:6f:57:e6:1d:6f:46:22:6f:7f:
                    9b:bf:bf:6d:6e:84:2b:b1:94:93:52:d2:7c:4a:41:
                    ca:cc:a0:03:df:b1:ce:da:b5:9d:75:a2:2c:9d:31:
                    72:8f:72:80:4b:ca:60:5d:b6:9b:82:48:d7:33:0e:
                    67:9a:48:47:23:58:29:13:34:9e:09:55:26:fe:54:
                    0d:b3:62:88:69:5c:ef:90:c7:75:9a:fc:f1:01:43:
                    d6:f1:fb:11:a4:44:f1:23:49:8e:3b:dc:30:2e:70:
                    7f:10:f3:3a:6a:15:fe:b9:4c:f7:23:02:bc:d9:ea:
                    d8:56:ad:2b:c1:22:f3:9b:0c:1b:fe:a9:01:a0:c5:
                    b8:69:e7:e8:03:16:c3:06:d7:b0:90:c3:e1:fd:03:
                    f5:87:1d:d1:9c:4e:83:4b:af:80:5a:4e:8c:a6:bd:
                    f7:16:4a:62:2a:23:3c:27:39:3c:ee:6c:3d:e5:53:
                    7d:cf:59:12:27:f7:7d:c6:75:9f:3c:1c:79:71:8d:
                    f0:72:8b:79:59:58:ad:58:42:57:44:4b:59:3b:3a:
                    cc:07:50:79:38:39:9c:5b:0f:5b:ae:c5:78:12:a0:
                    01:7b:07:36:ce:ad:38:c4:95:0b:48:a8:51:d0:1c:
                    6a:46:99:98:f2:ad:c5:13:92:7a:36:94:04:4e:50:
                    8b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:7F:03:DB:03:9C:C6:C5:63:88:01:25:43:26:B1:4E:2A:77:15:99
            X509v3 Authority Key Identifier:
                keyid:A4:83:B4:18:6A:D8:40:A7:AC:89:1A:01:05:01:E4:DC:DA:8B:38:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/A483B4186AD840A7AC891A010501E4DCDA8B38A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A483B4186AD840A7AC891A010501E4DCDA8B38A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A2x6icaKpVWP5uUBzJQzRvEpjvS7PVW7Z2Er4F2qt1Ct/1/3230302e3231392e3135342e302f32332d3234203d3e203131343331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.154.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:53:29:4b:e8:4d:da:c0:1f:b6:8c:b3:19:1c:9e:48:6c:b4:
         25:00:b2:c4:03:54:c0:40:fb:49:02:ed:ed:99:30:54:90:8d:
         33:c7:64:15:82:b9:ed:94:76:bb:07:b4:0e:21:2c:ee:cb:74:
         25:8b:25:22:d6:60:82:92:dd:b6:e4:f7:01:3a:8f:eb:f2:c1:
         83:8c:c0:11:54:77:e0:af:a1:19:92:63:20:d6:5f:59:fe:aa:
         71:2f:42:33:a2:0f:64:bd:e1:1f:4f:9a:c2:94:80:dc:03:0c:
         c7:14:d6:c5:30:ef:0f:8b:89:bd:b6:8d:19:c8:ac:75:38:70:
         80:8d:bd:dc:6b:ca:df:1f:7e:e2:e3:df:f9:e6:60:6d:8f:81:
         23:9e:aa:12:1f:04:a9:47:0d:4c:da:57:1f:a0:fa:3d:bf:f8:
         02:73:ed:a2:f4:f7:8b:2c:67:22:f8:c3:e2:75:fc:19:d6:3c:
         68:7d:f6:0e:8a:19:e1:d6:0a:81:08:26:4d:45:3e:8d:7a:30:
         67:2e:0f:3b:4c:63:f5:3f:c9:b2:67:fb:c0:88:7f:0f:81:4f:
         5b:b0:59:8a:e5:81:54:1b:54:27:68:00:76:cf:52:62:b8:7f:
         ce:4b:86:19:02:55:eb:5e:a8:4e:ee:1a:d4:9a:31:a9:09:a0:
         49:3b:d1:6e
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUccVeLgGk11Eq4APJaqyFgp8USzIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTQ4M0I0MTg2QUQ4NDBBN0FDODkxQTAxMDUwMUU0RENE
QThCMzhBOTAeFw0yMzA5MDQxMDU3MDBaFw0yNDA5MDIxMTAyMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzdDQjE1Nzk4NzZGNTdFNjFE
NkY0NjIyNkY3RjlCQkZCRjZENkU4NDJCQjE5NDkzNTJEMjdDNEE0MUNBQ0NBMDAz
REZCMUNFREFCNTlENzVBMjJDOUQzMTcyOEY3MjgwNEJDQTYwNURCNjlCODI0OEQ3
MzMwRTY3OUE0ODQ3MjM1ODI5MTMzNDlFMDk1NTI2RkU1NDBEQjM2Mjg4Njk1Q0VG
OTBDNzc1OUFGQ0YxMDE0M0Q2RjFGQjExQTQ0NEYxMjM0OThFM0JEQzMwMkU3MDdG
MTBGMzNBNkExNUZFQjk0Q0Y3MjMwMkJDRDlFQUQ4NTZBRDJCQzEyMkYzOUIwQzFC
RkVBOTAxQTBDNUI4NjlFN0U4MDMxNkMzMDZEN0IwOTBDM0UxRkQwM0Y1ODcxREQx
OUM0RTgzNEJBRjgwNUE0RThDQTZCREY3MTY0QTYyMkEyMzNDMjczOTNDRUU2QzNE
RTU1MzdEQ0Y1OTEyMjdGNzdEQzY3NTlGM0MxQzc5NzE4REYwNzI4Qjc5NTk1OEFE
NTg0MjU3NDQ0QjU5M0IzQUNDMDc1MDc5MzgzOTlDNUIwRjVCQUVDNTc4MTJBMDAx
N0IwNzM2Q0VBRDM4QzQ5NTBCNDhBODUxRDAxQzZBNDY5OTk4RjJBREM1MTM5MjdB
MzY5NDA0NEU1MDhCNzcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAx8sVeYdvV+Ydb0Yib3+bv79tboQrsZSTUtJ8SkHKzKAD37HO2rWd
daIsnTFyj3KAS8pgXbabgkjXMw5nmkhHI1gpEzSeCVUm/lQNs2KIaVzvkMd1mvzx
AUPW8fsRpETxI0mOO9wwLnB/EPM6ahX+uUz3IwK82erYVq0rwSLzmwwb/qkBoMW4
aefoAxbDBtewkMPh/QP1hx3RnE6DS6+AWk6Mpr33FkpiKiM8Jzk87mw95VN9z1kS
J/d9xnWfPBx5cY3wcot5WVitWEJXREtZOzrMB1B5ODmcWw9brsV4EqABewc2zq04
xJULSKhR0BxqRpmY8q3FE5J6NpQETlCLdwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FAh/A9sDnMbFY4gBJUMmsU4qdxWZMB8GA1UdIwQYMBaAFKSDtBhq2ECnrIkaAQUB
5NzaizipMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0EyeDZpY2FLcFZXUDV1
VUJ6SlF6UnZFcGp2UzdQVlc3WjJFcjRGMnF0MUN0LzEvQTQ4M0I0MTg2QUQ4NDBB
N0FDODkxQTAxMDUwMUU0RENEQThCMzhBOS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC9BNDgzQjQxODZBRDg0MEE3QUM4OTFBMDEwNTAxRTREQ0RBOEIz
OEE5LmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9BMng2aWNhS3BWV1A1dVVCekpR
elJ2RXBqdlM3UFZXN1oyRXI0RjJxdDFDdC8xLzMyMzAzMDJlMzIzMTM5MmUzMTM1
MzQyZTMwMmYzMjMzMmQzMjM0MjAzZDNlMjAzMTMxMzQzMzMxLnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
yNuaMA0GCSqGSIb3DQEBCwUAA4IBAQCiUylL6E3awB+2jLMZHJ5IbLQlALLEA1TA
QPtJAu3tmTBUkI0zx2QVgrntlHa7B7QOISzuy3QliyUi1mCCkt225PcBOo/r8sGD
jMARVHfgr6EZkmMg1l9Z/qpxL0Izog9kveEfT5rClIDcAwzHFNbFMO8Pi4m9to0Z
yKx1OHCAjb3ca8rfH37i49/55mBtj4EjnqoSHwSpRw1M2lcfoPo9v/gCc+2i9PeL
LGci+MPidfwZ1jxoffYOihnh1gqBCCZNRT6NejBnLg87TGP1P8myZ/vAiH8PgU9b
sFmK5YFUG1QnaAB2z1JiuH/OS4YZAlXrXqhO7hrUmjGpCaBJO9Fu
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org