Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3234372e302f32342d3234203d3e203238353934.roa
File:                     3230302e3231382e3234372e302f32342d3234203d3e203238353934.roa (raw, json)
Hash identifier:          eRoTsWs4BwpWt3psbdV7mj5wJaSW/sNzqxm/thtSjVg=
Subject key identifier:   8E:07:65:16:77:85:2C:69:60:3D:07:CF:44:E7:02:54:4E:3D:40:D4
Certificate issuer:       /CN=FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54
Certificate serial:       749EB8E2EE85E1A871FDCCFA1A6CA8908A06D533
Authority key identifier: FA:E4:EF:6F:4B:DB:EA:3F:80:BA:4A:0C:9E:E6:C6:D0:EE:C8:EB:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3234372e302f32342d3234203d3e203238353934.roa
Signing time:             Wed 20 Sep 2023 13:22:45 +0000
ROA not before:           Wed 20 Sep 2023 13:17:45 +0000
ROA not after:            Wed 18 Sep 2024 13:22:45 +0000
asID:                     28594
IP address blocks:        200.218.247.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:9e:b8:e2:ee:85:e1:a8:71:fd:cc:fa:1a:6c:a8:90:8a:06:d5:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54
        Validity
            Not Before: Sep 20 13:17:45 2023 GMT
            Not After : Sep 18 13:22:45 2024 GMT
        Subject: CN=8E07651677852C69603D07CF44E702544E3D40D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:55:7b:56:40:f2:fb:9f:7c:62:73:d5:37:f7:
                    79:b7:22:02:43:7d:6b:d1:db:8d:6e:f7:1d:72:09:
                    6c:bd:5c:c7:22:f2:86:68:78:e3:f0:f5:e1:6a:01:
                    09:2d:77:6c:e8:8d:88:29:d2:1b:3c:e3:1a:4c:cd:
                    38:ad:b5:2c:61:bc:1e:20:61:de:2a:18:40:b0:25:
                    81:a8:e9:b4:cf:15:37:51:0f:74:84:71:39:d5:89:
                    f3:be:3d:0c:73:ca:c2:1f:6a:44:18:ba:9c:9e:29:
                    30:97:f4:aa:ae:ca:41:02:45:65:9f:bf:cf:96:86:
                    a4:9d:06:97:bd:b5:47:76:40:4a:53:f3:d0:0f:42:
                    48:30:05:f1:7b:33:91:fc:ab:03:1b:5d:ba:0e:5d:
                    df:0c:86:ac:39:ea:15:29:1a:82:b4:f1:ed:c2:c7:
                    ba:72:96:83:49:dd:91:78:66:e8:64:60:06:03:26:
                    16:b7:1b:76:d7:8b:46:33:08:64:0c:df:ab:0e:7f:
                    bb:b8:33:1c:fb:80:75:a1:32:4c:b8:a0:4e:8f:ba:
                    e3:fe:10:50:24:72:08:bb:ab:bb:e0:b7:82:02:da:
                    5d:7a:ac:96:b2:3e:ff:d1:6a:4d:d7:80:ec:1c:6c:
                    86:8c:8d:74:a9:17:25:8d:34:66:6d:89:a5:95:32:
                    78:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:07:65:16:77:85:2C:69:60:3D:07:CF:44:E7:02:54:4E:3D:40:D4
            X509v3 Authority Key Identifier:
                keyid:FA:E4:EF:6F:4B:DB:EA:3F:80:BA:4A:0C:9E:E6:C6:D0:EE:C8:EB:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3234372e302f32342d3234203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:0c:8b:b0:db:8f:ba:7e:08:24:12:42:0a:71:94:b0:f7:32:
         c2:25:43:6b:07:e2:52:ee:cc:21:ae:7d:0c:aa:7b:4a:ca:bd:
         77:23:35:66:79:e0:36:6d:9d:ac:6b:a8:aa:05:91:ee:ef:06:
         de:6b:fd:34:c4:fe:71:31:e5:39:f1:ae:56:da:92:0f:5f:72:
         13:1a:7e:96:09:44:3e:74:de:39:8b:07:f8:cc:17:23:d0:98:
         f4:81:66:05:67:57:f5:5a:2c:8c:71:c0:46:33:12:b1:ac:db:
         4d:eb:16:dd:2b:df:7c:0c:1e:e5:63:96:59:0b:8c:f5:f7:44:
         85:a5:32:ba:22:58:a8:6e:7e:71:4e:43:76:88:29:6d:97:5e:
         ed:3f:34:a0:1e:9d:1a:01:4c:3f:25:15:53:21:26:27:68:ef:
         4f:af:79:0c:15:31:65:a5:ac:1c:24:58:4b:2d:df:c5:40:0c:
         2e:17:bf:44:ea:92:9f:a0:ad:43:70:36:c3:d7:92:bf:ea:b0:
         b1:65:5f:5f:93:f4:bf:26:f9:e7:f5:a0:9c:53:d2:db:b6:2f:
         3c:a0:15:57:08:d4:2e:3b:84:1f:3a:04:da:08:db:d3:9d:90:
         6a:8f:2c:ce:1f:2f:16:ca:8f:83:c1:4d:36:69:09:c3:d2:a8:
         8b:83:db:14
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUdJ644u6F4ahx/cz6GmyokIoG1TMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkFFNEVGNkY0QkRCRUEzRjgwQkE0QTBDOUVFNkM2RDBF
RUM4RUI1NDAeFw0yMzA5MjAxMzE3NDVaFw0yNDA5MTgxMzIyNDVaMDMxMTAvBgNV
BAMTKDhFMDc2NTE2Nzc4NTJDNjk2MDNEMDdDRjQ0RTcwMjU0NEUzRDQwRDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQVXtWQPL7n3xic9U393m3IgJD
fWvR241u9x1yCWy9XMci8oZoeOPw9eFqAQktd2zojYgp0hs84xpMzTittSxhvB4g
Yd4qGECwJYGo6bTPFTdRD3SEcTnVifO+PQxzysIfakQYupyeKTCX9KquykECRWWf
v8+WhqSdBpe9tUd2QEpT89APQkgwBfF7M5H8qwMbXboOXd8Mhqw56hUpGoK08e3C
x7pyloNJ3ZF4ZuhkYAYDJha3G3bXi0YzCGQM36sOf7u4Mxz7gHWhMky4oE6PuuP+
EFAkcgi7q7vgt4IC2l16rJayPv/Rak3XgOwcbIaMjXSpFyWNNGZtiaWVMnj3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUjgdlFneFLGlgPQfPROcCVE49QNQwHwYDVR0j
BBgwFoAU+uTvb0vb6j+AukoMnubG0O7I61QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTNqampURGZVQWVSQ3FSd1lKNkZNcjlCb3l5dWNVOGNpd25QSzRNaEx5
d3ovMS9GQUU0RUY2RjRCREJFQTNGODBCQTRBMEM5RUU2QzZEMEVFQzhFQjU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZBRTRFRjZGNEJEQkVBM0Y4
MEJBNEEwQzlFRTZDNkQwRUVDOEVCNTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzUzampqVERmVUFlUkNxUndZSjZGTXI5Qm95eXVjVThjaXduUEs0TWhMeXd6LzEv
MzIzMDMwMmUzMjMxMzgyZTMyMzQzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzNTM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADI2vcwDQYJKoZIhvcNAQELBQADggEBAGwMi7Db
j7p+CCQSQgpxlLD3MsIlQ2sH4lLuzCGufQyqe0rKvXcjNWZ54DZtnaxrqKoFke7v
Bt5r/TTE/nEx5Tnxrlbakg9fchMafpYJRD503jmLB/jMFyPQmPSBZgVnV/VaLIxx
wEYzErGs203rFt0r33wMHuVjllkLjPX3RIWlMroiWKhufnFOQ3aIKW2XXu0/NKAe
nRoBTD8lFVMhJido70+veQwVMWWlrBwkWEst38VADC4Xv0Tqkp+grUNwNsPXkr/q
sLFlX1+T9L8m+ef1oJxT0tu2LzygFVcI1C47hB86BNoI29OdkGqPLM4fLxbKj4PB
TTZpCcPSqIuD2xQ=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:44 2024 by rpki-client on console-fra.rpki-client.org