Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3234302e302f32332d3233203d3e203238353934.roa
File:                     3230302e3231382e3234302e302f32332d3233203d3e203238353934.roa (raw, json)
Hash identifier:          hNssDPejOBuEPQxNfAnhZdxWwT49mTx8bGh6Nx8m8As=
Subject key identifier:   B9:ED:7F:08:B7:E5:BB:DF:A1:95:52:92:CB:A4:C6:D9:2B:BB:E3:56
Certificate issuer:       /CN=FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54
Certificate serial:       06CA7FE2CEC4977F37C3E19743D1A61365B6BE97
Authority key identifier: FA:E4:EF:6F:4B:DB:EA:3F:80:BA:4A:0C:9E:E6:C6:D0:EE:C8:EB:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3234302e302f32332d3233203d3e203238353934.roa
Signing time:             Wed 20 Sep 2023 13:22:46 +0000
ROA not before:           Wed 20 Sep 2023 13:17:46 +0000
ROA not after:            Wed 18 Sep 2024 13:22:46 +0000
asID:                     28594
IP address blocks:        200.218.240.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:ca:7f:e2:ce:c4:97:7f:37:c3:e1:97:43:d1:a6:13:65:b6:be:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54
        Validity
            Not Before: Sep 20 13:17:46 2023 GMT
            Not After : Sep 18 13:22:46 2024 GMT
        Subject: CN=B9ED7F08B7E5BBDFA1955292CBA4C6D92BBBE356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6c:8c:ef:6c:6b:3a:a8:e9:e6:7a:58:43:ec:
                    6e:70:80:84:90:c1:51:32:0c:6f:a9:fa:ab:76:b0:
                    5b:48:6e:88:1f:e9:9b:35:8d:7b:da:53:a8:59:2f:
                    1b:ea:a8:12:dd:f2:f1:c6:b8:87:81:cf:43:97:5c:
                    71:b9:d4:fc:92:33:76:ac:61:82:f7:3f:3e:81:a5:
                    20:8f:8d:40:29:47:ed:9e:ec:53:15:89:9e:e8:67:
                    9b:62:fb:d0:bd:d7:54:61:e8:3c:0c:3b:6b:99:f6:
                    a9:f0:d3:38:e9:ac:8f:ab:ea:d3:22:c2:9f:c5:48:
                    89:e6:9a:92:36:73:7c:74:e8:e6:cb:ea:b6:cf:91:
                    95:91:aa:00:06:7b:1c:9a:3f:da:16:b8:df:90:56:
                    9f:73:22:60:b7:dd:4e:22:5e:38:f9:dd:e1:99:60:
                    f6:67:53:8b:39:58:5e:ce:4a:99:93:69:ad:67:28:
                    62:8b:f1:e8:40:d9:83:18:60:c0:a1:78:4b:86:a8:
                    92:f2:c3:6c:61:2d:cb:51:9b:df:b5:2a:21:fe:d2:
                    0d:fb:f9:da:6d:45:38:e8:b8:6e:1e:a5:50:7f:99:
                    b7:f7:f7:b0:0a:7e:43:d8:66:78:83:79:10:d6:eb:
                    43:e9:34:98:82:8c:ae:d0:c9:69:aa:2b:c6:f3:6e:
                    c6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:ED:7F:08:B7:E5:BB:DF:A1:95:52:92:CB:A4:C6:D9:2B:BB:E3:56
            X509v3 Authority Key Identifier:
                keyid:FA:E4:EF:6F:4B:DB:EA:3F:80:BA:4A:0C:9E:E6:C6:D0:EE:C8:EB:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3234302e302f32332d3233203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:8b:fb:de:b5:ba:03:77:c3:12:a9:73:a6:85:de:2b:63:74:
         a5:72:67:0f:3f:33:72:f2:8f:9a:19:db:14:f0:6a:e8:95:d2:
         f6:22:82:1a:54:49:4a:1a:50:84:06:a2:c0:47:4d:47:1f:d9:
         56:50:3c:68:b6:24:16:e8:c0:4d:4f:bd:8a:27:7a:48:b4:10:
         c9:b4:d2:db:47:93:84:59:fd:18:83:8d:ed:c8:15:dd:9d:1d:
         d0:a4:a5:c4:a7:d5:57:f4:8b:e7:fe:9f:24:a8:e0:79:f3:de:
         7d:3f:fe:59:83:db:0f:86:f5:6d:00:da:2a:ef:2d:83:6d:47:
         e9:23:60:1a:59:b8:cd:44:40:e9:46:7e:ce:71:d8:75:13:ef:
         7f:e1:9d:00:0b:d5:8d:c0:92:03:61:ae:da:17:61:0f:4d:c1:
         8a:3f:ad:92:bf:25:e1:1a:e2:0a:ec:c8:b4:19:af:ab:6c:dd:
         00:e4:4b:97:88:ca:38:0c:b4:1f:34:f0:fc:78:da:e3:20:7d:
         86:2c:9f:af:47:27:56:bb:49:53:be:02:3a:d4:66:3b:e6:32:
         c5:c1:64:14:62:13:a7:70:14:a1:d5:0d:5c:18:c0:90:54:e6:
         c8:de:7c:b6:2b:d0:34:5b:f1:13:c8:14:66:39:d1:5d:3a:ba:
         c0:a9:e5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:44 2024 by rpki-client on console-fra.rpki-client.org