Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3234322e302f32342d3234203d3e203238353934.roa
File:                     3230302e3231382e3234322e302f32342d3234203d3e203238353934.roa (raw, json)
Hash identifier:          1gYxdtTdAqcjBoY4AhfYcR4p01kwdgelqwbvT5/BaqI=
Subject key identifier:   0E:F7:D6:24:9B:35:1F:3C:8F:A6:F7:DC:BE:73:4A:71:4C:A4:70:B6
Certificate issuer:       /CN=FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54
Certificate serial:       0321E8ADA25E2EE896B2D8A015C6915D928B1878
Authority key identifier: FA:E4:EF:6F:4B:DB:EA:3F:80:BA:4A:0C:9E:E6:C6:D0:EE:C8:EB:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3234322e302f32342d3234203d3e203238353934.roa
Signing time:             Wed 20 Sep 2023 13:22:44 +0000
ROA not before:           Wed 20 Sep 2023 13:17:44 +0000
ROA not after:            Wed 18 Sep 2024 13:22:44 +0000
asID:                     28594
IP address blocks:        200.218.242.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:21:e8:ad:a2:5e:2e:e8:96:b2:d8:a0:15:c6:91:5d:92:8b:18:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54
        Validity
            Not Before: Sep 20 13:17:44 2023 GMT
            Not After : Sep 18 13:22:44 2024 GMT
        Subject: CN=0EF7D6249B351F3C8FA6F7DCBE734A714CA470B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:97:d1:64:a9:b8:de:bb:6f:fd:9e:41:98:ba:
                    67:b0:41:4b:8b:2e:48:66:92:9c:62:fb:81:b9:b7:
                    57:81:ee:6f:8e:c3:b1:36:8e:8b:a4:5d:4d:a5:40:
                    e2:fb:17:be:31:68:3f:00:82:26:5f:33:5d:89:04:
                    47:7d:05:42:de:91:84:e1:e6:91:0e:1f:a0:2d:3b:
                    6a:00:e1:1f:b3:a7:45:81:a8:a4:cb:3f:0c:46:fd:
                    ac:51:07:66:dc:eb:59:b1:31:5c:99:13:87:37:0f:
                    a2:79:4f:93:06:b0:19:a4:e9:f1:56:38:be:f7:3b:
                    8b:5f:58:bc:85:e8:49:ea:96:0f:d6:a9:d5:7e:96:
                    8b:bb:de:76:87:56:94:1b:c0:8e:dd:7a:c7:5b:c5:
                    a0:23:c6:ec:a7:9e:74:e5:52:26:0a:f1:d4:a8:5e:
                    d3:6c:7c:b8:1c:15:d1:84:7f:0b:37:56:7e:67:7a:
                    8b:91:e0:07:5f:e1:b8:30:35:49:52:0d:fb:cb:c8:
                    c7:87:bb:37:8f:13:79:2b:af:a4:a1:60:66:f7:75:
                    e7:23:ef:1e:e6:6d:d5:78:84:2d:93:20:d4:9f:b6:
                    a3:65:37:73:e0:d8:02:af:3c:9c:78:54:c2:37:4b:
                    c1:6c:61:c5:a0:c6:73:ea:7f:d6:c7:8c:15:a1:7c:
                    06:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:F7:D6:24:9B:35:1F:3C:8F:A6:F7:DC:BE:73:4A:71:4C:A4:70:B6
            X509v3 Authority Key Identifier:
                keyid:FA:E4:EF:6F:4B:DB:EA:3F:80:BA:4A:0C:9E:E6:C6:D0:EE:C8:EB:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3234322e302f32342d3234203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:dd:79:ce:c8:e8:1f:02:25:05:e9:56:f2:fe:1c:41:e6:0b:
         8c:9e:2c:1e:df:75:ff:f1:97:f7:66:91:30:74:1c:c7:69:67:
         44:f7:64:70:2f:e5:ed:0d:61:a5:66:53:c4:0a:76:eb:e4:5c:
         bd:7c:8e:90:05:4e:fb:c6:fa:80:a9:9b:c1:2a:fd:7a:98:15:
         c4:be:fb:71:f0:58:bc:60:46:cb:5c:e8:98:04:c3:c9:5e:09:
         cd:a1:d5:62:36:ca:bd:93:19:4a:86:90:3d:61:40:92:e8:39:
         4b:6f:95:c4:b7:94:08:34:99:fd:ab:99:fc:76:74:3f:15:4d:
         b4:ec:15:1d:2f:58:4a:c6:59:96:47:e7:80:fc:1f:92:14:58:
         e8:58:3f:47:cd:54:76:55:63:d9:46:e6:54:e7:4e:5b:76:8e:
         c9:20:75:25:ec:67:34:45:9f:dc:3c:3d:8c:2a:ee:77:64:66:
         86:a8:e3:85:cf:e5:da:18:96:a2:fa:59:2a:30:16:29:fb:03:
         e9:31:23:8c:fd:e5:40:a1:69:20:37:67:36:9e:a8:15:99:75:
         5a:de:5a:3d:35:27:4c:23:c2:4f:27:56:d3:70:cf:d7:29:d5:
         d1:42:b0:5e:0c:8d:f2:02:8b:e3:1a:be:b3:ed:ff:08:1d:d4:
         67:81:ba:69
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUAyHoraJeLuiWstigFcaRXZKLGHgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkFFNEVGNkY0QkRCRUEzRjgwQkE0QTBDOUVFNkM2RDBF
RUM4RUI1NDAeFw0yMzA5MjAxMzE3NDRaFw0yNDA5MTgxMzIyNDRaMDMxMTAvBgNV
BAMTKDBFRjdENjI0OUIzNTFGM0M4RkE2RjdEQ0JFNzM0QTcxNENBNDcwQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTl9Fkqbjeu2/9nkGYumewQUuL
Lkhmkpxi+4G5t1eB7m+Ow7E2joukXU2lQOL7F74xaD8AgiZfM12JBEd9BULekYTh
5pEOH6AtO2oA4R+zp0WBqKTLPwxG/axRB2bc61mxMVyZE4c3D6J5T5MGsBmk6fFW
OL73O4tfWLyF6Enqlg/WqdV+lou73naHVpQbwI7desdbxaAjxuynnnTlUiYK8dSo
XtNsfLgcFdGEfws3Vn5neouR4Adf4bgwNUlSDfvLyMeHuzePE3krr6ShYGb3decj
7x7mbdV4hC2TINSftqNlN3Pg2AKvPJx4VMI3S8FsYcWgxnPqf9bHjBWhfAbtAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUDvfWJJs1HzyPpvfcvnNKcUykcLYwHwYDVR0j
BBgwFoAU+uTvb0vb6j+AukoMnubG0O7I61QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTNqampURGZVQWVSQ3FSd1lKNkZNcjlCb3l5dWNVOGNpd25QSzRNaEx5
d3ovMS9GQUU0RUY2RjRCREJFQTNGODBCQTRBMEM5RUU2QzZEMEVFQzhFQjU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZBRTRFRjZGNEJEQkVBM0Y4
MEJBNEEwQzlFRTZDNkQwRUVDOEVCNTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzUzampqVERmVUFlUkNxUndZSjZGTXI5Qm95eXVjVThjaXduUEs0TWhMeXd6LzEv
MzIzMDMwMmUzMjMxMzgyZTMyMzQzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzNTM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADI2vIwDQYJKoZIhvcNAQELBQADggEBAIHdec7I
6B8CJQXpVvL+HEHmC4yeLB7fdf/xl/dmkTB0HMdpZ0T3ZHAv5e0NYaVmU8QKduvk
XL18jpAFTvvG+oCpm8Eq/XqYFcS++3HwWLxgRstc6JgEw8leCc2h1WI2yr2TGUqG
kD1hQJLoOUtvlcS3lAg0mf2rmfx2dD8VTbTsFR0vWErGWZZH54D8H5IUWOhYP0fN
VHZVY9lG5lTnTlt2jskgdSXsZzRFn9w8PYwq7ndkZoao44XP5doYlqL6WSowFin7
A+kxI4z95UChaSA3ZzaeqBWZdVreWj01J0wjwk8nVtNwz9cp1dFCsF4MjfICi+Ma
vrPt/wgd1GeBumk=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:02 2024 by rpki-client on console-ams.rpki-client.org