Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3234362e302f32332d3233203d3e203238353934.roa
File:                     3230302e3231382e3234362e302f32332d3233203d3e203238353934.roa (raw, json)
Hash identifier:          gASittEm26hTVqCfwE1n6nIlRusgmOyv/4vDQ8ddhhQ=
Subject key identifier:   A3:A9:B7:BD:C3:41:0C:B3:2A:F3:A7:99:77:F5:22:9B:4C:06:3A:AC
Certificate issuer:       /CN=FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54
Certificate serial:       CD3C21BD838E2DCBB4F8057EA9463259402450
Authority key identifier: FA:E4:EF:6F:4B:DB:EA:3F:80:BA:4A:0C:9E:E6:C6:D0:EE:C8:EB:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3234362e302f32332d3233203d3e203238353934.roa
Signing time:             Wed 20 Sep 2023 13:22:45 +0000
ROA not before:           Wed 20 Sep 2023 13:17:45 +0000
ROA not after:            Wed 18 Sep 2024 13:22:45 +0000
asID:                     28594
IP address blocks:        200.218.246.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            cd:3c:21:bd:83:8e:2d:cb:b4:f8:05:7e:a9:46:32:59:40:24:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54
        Validity
            Not Before: Sep 20 13:17:45 2023 GMT
            Not After : Sep 18 13:22:45 2024 GMT
        Subject: CN=A3A9B7BDC3410CB32AF3A79977F5229B4C063AAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4b:d2:ff:da:77:9b:df:3d:91:4c:b7:2b:76:
                    28:78:fd:43:60:3e:aa:a1:5e:0b:fb:49:c1:14:7f:
                    e0:6c:0c:03:a9:7d:de:e4:b2:18:21:25:77:c0:50:
                    15:48:ac:b2:9b:40:e2:81:21:15:d7:c5:aa:9f:14:
                    05:f3:ff:11:da:e2:5d:b8:fc:68:8a:67:86:fe:36:
                    0d:3f:dd:1e:40:11:b5:b2:7f:b8:0d:87:77:17:38:
                    78:fa:76:d9:44:a6:77:2f:5d:55:07:c9:0e:c0:6c:
                    12:8d:a6:f5:07:24:74:32:7f:db:d6:e5:16:9a:f1:
                    cd:f6:f7:1f:ee:d2:12:bf:5c:41:94:25:cf:d0:78:
                    66:a9:22:ad:38:48:f0:55:e7:ff:ec:68:d3:29:ec:
                    f5:97:7b:7f:62:a8:bf:0b:d5:07:69:c3:c3:e4:5a:
                    da:e4:09:70:06:2f:ff:86:c4:ba:8d:27:35:27:15:
                    9f:64:bd:bf:59:25:37:64:1a:4a:67:ed:33:9f:17:
                    34:9a:2a:b5:47:e2:62:dc:34:50:8b:5f:a9:70:3c:
                    fb:83:8d:97:d7:49:7a:d3:54:aa:8a:75:ea:40:f3:
                    be:b0:6f:03:1d:9b:11:36:c8:ea:ae:ae:40:64:84:
                    b6:5f:76:dd:85:7b:71:67:f3:6e:14:d3:3d:6d:2a:
                    89:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:A9:B7:BD:C3:41:0C:B3:2A:F3:A7:99:77:F5:22:9B:4C:06:3A:AC
            X509v3 Authority Key Identifier:
                keyid:FA:E4:EF:6F:4B:DB:EA:3F:80:BA:4A:0C:9E:E6:C6:D0:EE:C8:EB:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3234362e302f32332d3233203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:6d:38:c3:16:cb:87:cf:1f:2c:92:9d:3e:11:ea:fa:83:62:
         36:17:cf:4e:04:cc:07:71:2a:e5:1d:15:8b:9e:1b:74:a8:64:
         fb:8f:47:69:44:63:5f:cf:13:1d:c2:75:8c:a7:8c:86:26:a3:
         cd:3c:13:e0:66:57:36:2c:25:df:0d:13:c7:8d:99:9d:dc:bf:
         06:d1:a6:6e:ed:74:87:19:5d:42:84:d3:86:25:92:c7:49:c8:
         5b:e8:61:d6:e6:0f:52:a3:e1:97:e8:86:c1:54:fe:4d:c2:f9:
         1c:81:0c:aa:b1:aa:5a:36:9b:6c:33:37:46:48:f3:e5:08:e4:
         e8:e7:e1:89:1e:69:6e:f0:d0:6c:ea:bf:1f:b4:a1:c5:ee:54:
         f6:65:a1:b0:ac:1e:9b:ad:a0:61:41:c3:09:d1:29:07:23:bf:
         2c:04:34:23:c5:7c:73:de:be:7d:24:19:42:93:d7:4d:ce:3b:
         a0:c7:70:f5:ef:f0:d9:14:ec:73:6b:b7:9c:29:fb:4b:42:08:
         8d:40:09:e6:b5:b6:f8:1c:a7:ca:b2:66:74:77:62:b7:1c:54:
         1b:b9:cf:78:ed:be:da:9e:c8:8f:58:64:a7:b5:f3:1d:48:5d:
         14:f8:bf:ef:c3:18:23:7b:12:78:33:83:3e:51:f8:97:32:c1:
         e8:1f:1b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:44 2024 by rpki-client on console-fra.rpki-client.org