Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3234302e302f32302d3230203d3e203238353934.roa
File:                     3230302e3231382e3234302e302f32302d3230203d3e203238353934.roa (raw, json)
Hash identifier:          ryL8H64I8fbpJGaldUxwjqXqkoqYBuZkmHNiVAVezDM=
Subject key identifier:   DE:4B:8E:81:4C:AF:3F:70:9A:A9:DA:8D:90:A0:ED:DF:E8:7A:59:CB
Certificate issuer:       /CN=022A43659AD22D768D09981B94C1A7A7BFC1AF03
Certificate serial:       616BF8F19A1482E21DA43FCA479C5AC3AAB1F435
Authority key identifier: 02:2A:43:65:9A:D2:2D:76:8D:09:98:1B:94:C1:A7:A7:BF:C1:AF:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/022A43659AD22D768D09981B94C1A7A7BFC1AF03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3234302e302f32302d3230203d3e203238353934.roa
Signing time:             Mon 03 Jul 2023 10:29:37 +0000
ROA not before:           Mon 03 Jul 2023 10:24:37 +0000
ROA not after:            Mon 01 Jul 2024 10:29:37 +0000
asID:                     28594
IP address blocks:        200.218.240.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:6b:f8:f1:9a:14:82:e2:1d:a4:3f:ca:47:9c:5a:c3:aa:b1:f4:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=022A43659AD22D768D09981B94C1A7A7BFC1AF03
        Validity
            Not Before: Jul  3 10:24:37 2023 GMT
            Not After : Jul  1 10:29:37 2024 GMT
        Subject: CN=DE4B8E814CAF3F709AA9DA8D90A0EDDFE87A59CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:00:45:02:8e:8c:c6:70:93:a7:5d:b9:6b:ed:
                    f4:54:30:1d:fb:aa:65:01:a6:82:a5:c5:97:8c:46:
                    52:ae:90:b0:75:d5:71:30:e9:c0:9f:19:2c:b9:35:
                    b0:e5:00:48:f0:b4:47:6e:4c:a0:58:2d:65:fd:07:
                    19:b5:47:57:87:db:79:02:cc:fb:9f:41:30:77:17:
                    a6:48:f5:12:a2:90:84:2d:db:1a:90:0b:89:f2:9c:
                    3b:e1:d1:74:b0:85:b0:e3:fd:21:aa:bb:44:80:f5:
                    6d:0c:f3:63:13:c0:c4:c9:e9:bd:f9:01:0c:26:df:
                    83:1c:f2:2b:62:f8:6f:06:8f:5a:3a:8d:1a:77:6a:
                    9d:ef:e8:44:c8:56:ba:5e:9c:45:57:73:6c:55:41:
                    cf:9c:a8:4f:a0:92:19:aa:f4:fa:51:0f:ae:6c:ea:
                    97:3e:42:dc:38:0e:ec:52:51:cc:aa:56:7c:99:de:
                    d6:aa:3d:09:82:81:d0:ed:44:a7:22:93:19:78:39:
                    6a:88:71:bc:b3:d8:3f:a5:10:e3:19:ab:60:83:e7:
                    f9:51:d4:eb:11:fb:3f:74:b4:cb:48:46:c3:b9:25:
                    06:d8:e8:61:b6:d3:83:8a:34:ec:9d:0d:5c:10:27:
                    71:c1:59:31:72:b6:f0:6c:8b:4a:74:b9:80:d8:19:
                    ab:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:4B:8E:81:4C:AF:3F:70:9A:A9:DA:8D:90:A0:ED:DF:E8:7A:59:CB
            X509v3 Authority Key Identifier:
                keyid:02:2A:43:65:9A:D2:2D:76:8D:09:98:1B:94:C1:A7:A7:BF:C1:AF:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/022A43659AD22D768D09981B94C1A7A7BFC1AF03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/022A43659AD22D768D09981B94C1A7A7BFC1AF03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3234302e302f32302d3230203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3e:a2:8f:ec:50:cc:fc:f4:78:85:a7:44:5f:8e:b5:eb:87:7b:
         02:f1:07:5a:78:14:bb:16:9d:72:48:ab:06:bd:f6:95:6c:f2:
         f3:b5:63:0e:ad:1a:3b:9a:5e:06:ff:c9:d3:6c:1f:a0:7e:ae:
         91:36:03:84:da:22:6d:64:de:69:cf:81:a9:db:e3:cc:27:9f:
         1e:f0:11:c6:9d:84:6b:fb:87:0a:ea:fc:ee:ee:42:2b:65:3a:
         ea:45:e8:32:22:27:6b:ee:3d:03:44:39:e2:11:52:bb:23:d0:
         53:8a:5f:36:de:3d:c7:4f:37:b1:50:f6:5c:6b:e2:fe:a6:6b:
         03:04:f3:30:b0:0b:4b:5a:6d:2e:5c:b1:d3:68:a0:3c:aa:25:
         39:37:9a:b5:67:58:c6:5b:db:9c:36:03:ec:f3:59:28:71:1d:
         63:7a:9a:74:05:d8:71:03:3e:a1:c1:4b:4d:79:80:40:cd:f9:
         e4:c1:0b:80:0f:b7:f6:b6:39:92:b3:24:c0:5f:e9:b0:06:c7:
         43:94:3c:b9:7b:88:99:f8:0a:78:66:10:0c:99:e9:37:67:b6:
         0d:70:52:43:d4:30:35:dc:2a:c4:fd:15:ec:6a:1d:d6:a2:15:
         2f:0e:b4:85:90:f9:ef:c7:96:7a:ee:bc:d3:26:84:f4:db:dc:
         1e:e9:bd:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org