Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3234352e302f32342d3234203d3e203238353934.roa
File:                     3230302e3231382e3234352e302f32342d3234203d3e203238353934.roa (raw, json)
Hash identifier:          f5cgT6Vy0E54WCs3zlKdEvav/B3jltMkmtOp1OfMmw4=
Subject key identifier:   7C:A1:05:95:A2:81:90:ED:CF:73:97:F6:90:A2:FD:B6:04:D9:F6:57
Certificate issuer:       /CN=FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54
Certificate serial:       7E83EFFC39178518CFDCBC45DAFCA99DC058FD26
Authority key identifier: FA:E4:EF:6F:4B:DB:EA:3F:80:BA:4A:0C:9E:E6:C6:D0:EE:C8:EB:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3234352e302f32342d3234203d3e203238353934.roa
Signing time:             Wed 20 Sep 2023 13:22:44 +0000
ROA not before:           Wed 20 Sep 2023 13:17:44 +0000
ROA not after:            Wed 18 Sep 2024 13:22:44 +0000
asID:                     28594
IP address blocks:        200.218.245.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:83:ef:fc:39:17:85:18:cf:dc:bc:45:da:fc:a9:9d:c0:58:fd:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54
        Validity
            Not Before: Sep 20 13:17:44 2023 GMT
            Not After : Sep 18 13:22:44 2024 GMT
        Subject: CN=7CA10595A28190EDCF7397F690A2FDB604D9F657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:32:0b:74:fb:f5:d5:41:1a:bc:b2:0d:f7:8d:
                    40:0a:08:9d:29:b5:95:67:03:2b:3a:29:57:aa:2a:
                    81:3e:19:fd:a8:6f:4f:52:7f:f1:92:d2:dd:ce:4f:
                    fc:57:dc:a6:2a:8c:5b:a5:87:ab:4a:1c:29:9c:70:
                    95:0d:a8:c5:9c:e4:a8:ad:a1:74:a2:e8:0a:8f:e7:
                    14:ef:9b:e0:81:4c:32:19:8b:ae:10:0e:83:b5:97:
                    27:d9:ef:68:41:17:c0:bb:34:10:18:32:f1:6c:4b:
                    8a:25:43:07:d6:3b:ea:4c:43:8a:25:7a:60:a9:6a:
                    76:17:52:15:03:f0:c8:c1:80:6e:05:ac:d5:84:cc:
                    d0:8e:cc:dc:5b:eb:99:63:32:61:5b:92:9e:b4:9e:
                    80:2d:85:5c:a0:07:b4:68:96:47:e7:e1:df:d4:8f:
                    b0:d2:9a:5a:20:53:d8:07:41:70:05:58:cb:59:fa:
                    00:b2:02:dd:e8:4b:4c:b4:0e:5c:04:a8:95:05:01:
                    55:fb:d5:91:28:31:f9:a9:26:8a:bc:2c:67:ab:c7:
                    e2:71:31:50:5c:4e:5a:82:20:4f:35:11:92:35:73:
                    c6:28:13:3b:48:e1:5c:8f:81:2f:03:0a:f1:92:fe:
                    ad:78:71:cf:1d:07:ea:c8:75:a8:39:7c:aa:ed:ae:
                    80:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A1:05:95:A2:81:90:ED:CF:73:97:F6:90:A2:FD:B6:04:D9:F6:57
            X509v3 Authority Key Identifier:
                keyid:FA:E4:EF:6F:4B:DB:EA:3F:80:BA:4A:0C:9E:E6:C6:D0:EE:C8:EB:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3234352e302f32342d3234203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:e7:34:eb:3d:ed:5f:22:67:5d:56:36:81:e9:b3:b9:29:d8:
         a9:9e:d0:0e:71:bd:32:75:f7:f4:71:7f:24:16:3c:39:7e:0e:
         c3:d5:b1:68:02:fc:af:1d:20:da:1b:b9:6f:32:7e:87:78:2a:
         5f:8d:fc:4c:11:82:b9:cb:39:21:ba:ed:ec:24:27:66:dc:03:
         1d:0c:c4:df:a8:9e:17:cd:e1:c1:7f:b6:c1:fe:cf:69:e0:cb:
         16:de:38:cd:b0:6f:d9:19:ad:d0:78:f2:8d:c8:0f:1d:7e:3b:
         95:ac:e3:a4:0e:7b:28:e8:6b:f0:be:ba:13:3e:22:f5:5b:f6:
         99:cd:fe:5b:e8:dd:87:aa:1c:a4:e5:9f:84:fd:79:5d:c2:ca:
         4c:50:4d:c1:c0:9b:f7:31:ad:54:a6:7e:ba:44:db:e8:59:88:
         fa:82:e9:dd:f2:f7:08:61:e3:b7:2f:54:90:92:1f:a0:5b:1d:
         29:f6:c3:42:bc:db:cf:ef:d1:ee:e8:16:a1:a2:2e:d2:3a:a4:
         e6:6d:be:b7:ba:98:c4:f2:32:1b:6b:f5:a9:89:1b:e4:31:38:
         b4:a4:e7:2c:9f:35:24:75:51:c6:18:33:b0:2d:1c:c0:3e:ce:
         e1:5b:39:6e:21:47:31:6f:42:04:81:cc:39:9a:93:e6:35:09:
         f0:38:7f:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:02 2024 by rpki-client on console-ams.rpki-client.org