Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3234302e302f32312d3231203d3e203238353934.roa
File:                     3230302e3231382e3234302e302f32312d3231203d3e203238353934.roa (raw, json)
Hash identifier:          JN2iCOH7ic9x2tAgFKDqH9BnJZ2FCGryC0t5pJulI0s=
Subject key identifier:   C8:7D:79:D0:B4:1F:4F:E5:CB:1C:EA:39:B7:29:00:3D:F9:27:F7:D8
Certificate issuer:       /CN=022A43659AD22D768D09981B94C1A7A7BFC1AF03
Certificate serial:       2233A5116FA7DE19F75B1AF901EB6BF7389B0B6A
Authority key identifier: 02:2A:43:65:9A:D2:2D:76:8D:09:98:1B:94:C1:A7:A7:BF:C1:AF:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/022A43659AD22D768D09981B94C1A7A7BFC1AF03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3234302e302f32312d3231203d3e203238353934.roa
Signing time:             Mon 03 Jul 2023 10:29:35 +0000
ROA not before:           Mon 03 Jul 2023 10:24:35 +0000
ROA not after:            Mon 01 Jul 2024 10:29:35 +0000
asID:                     28594
IP address blocks:        200.218.240.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:33:a5:11:6f:a7:de:19:f7:5b:1a:f9:01:eb:6b:f7:38:9b:0b:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=022A43659AD22D768D09981B94C1A7A7BFC1AF03
        Validity
            Not Before: Jul  3 10:24:35 2023 GMT
            Not After : Jul  1 10:29:35 2024 GMT
        Subject: CN=C87D79D0B41F4FE5CB1CEA39B729003DF927F7D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:4c:94:75:1e:2d:ee:ac:7e:0d:05:dd:e1:de:
                    09:47:7c:be:78:7f:fb:72:1e:13:f3:5f:5e:fd:76:
                    2a:ae:bb:3c:51:02:8b:de:f4:c3:90:92:18:e6:27:
                    d3:39:5a:4c:8b:90:92:6f:66:59:7d:70:fa:07:3c:
                    6c:5a:12:5b:00:94:52:ba:95:f3:0f:03:32:71:22:
                    57:d6:c9:6d:3f:fd:0b:74:09:ae:1c:13:34:17:40:
                    2d:4b:be:9e:8c:a3:66:4b:cb:42:ce:96:fd:85:54:
                    cb:bf:37:da:96:ea:66:ac:33:86:33:c0:d2:40:d1:
                    3c:a2:42:49:18:e7:d3:62:fb:e6:01:3f:0d:39:aa:
                    50:d0:69:e5:e6:46:0a:88:b4:cf:9a:f0:19:2f:02:
                    f5:15:ae:5b:b6:a6:21:0f:f0:0a:ed:a7:80:23:1f:
                    b5:03:b3:52:b8:00:bb:3b:d3:c7:c0:83:11:f8:8a:
                    b2:67:1c:b8:48:b0:17:5a:d2:ff:b1:a9:fd:be:24:
                    ab:f9:60:f2:61:0c:d6:c6:18:92:25:91:3d:9a:cf:
                    9b:88:6d:3a:96:eb:01:d4:f1:66:30:5d:ce:88:a2:
                    32:28:3d:ed:9b:90:c0:19:d6:1f:e9:c2:15:2a:08:
                    db:05:e7:5e:d5:c0:2f:a5:08:52:d1:15:09:cf:19:
                    83:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:7D:79:D0:B4:1F:4F:E5:CB:1C:EA:39:B7:29:00:3D:F9:27:F7:D8
            X509v3 Authority Key Identifier:
                keyid:02:2A:43:65:9A:D2:2D:76:8D:09:98:1B:94:C1:A7:A7:BF:C1:AF:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/022A43659AD22D768D09981B94C1A7A7BFC1AF03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/022A43659AD22D768D09981B94C1A7A7BFC1AF03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3234302e302f32312d3231203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a6:de:12:41:67:c2:c3:a1:ef:d2:e5:52:0a:f4:43:37:53:fc:
         64:cd:1d:50:04:72:ea:39:bf:91:96:ae:a6:f1:e5:2d:7b:62:
         34:94:45:5d:b0:e9:ef:a2:79:ff:58:e7:e7:51:50:e5:44:54:
         32:90:d4:a9:65:68:b4:f3:2f:13:7c:c6:e0:f4:2d:c0:ef:a1:
         b5:8a:df:86:64:1a:87:87:29:05:db:d0:74:94:88:3f:47:49:
         d6:64:3a:8a:48:59:52:53:4d:1e:18:f4:5d:fe:30:b7:b1:de:
         60:fa:e0:8c:77:f0:c8:c0:b8:e2:73:0b:8f:6b:8d:93:00:13:
         c8:4d:aa:9a:28:82:b1:ea:d8:f0:8d:cb:70:e6:88:47:ea:3c:
         4d:f3:f8:21:f5:c4:73:35:8a:ae:04:8a:12:8f:61:83:83:e9:
         35:83:20:b5:2e:d2:dc:10:2b:6f:a4:b8:57:9e:b3:c2:48:f6:
         b2:e8:59:30:20:20:73:98:7a:d5:06:96:bc:fe:24:8b:25:ed:
         7f:85:cc:2a:53:3b:d0:5d:4a:19:5f:94:18:1a:fd:f0:c1:38:
         85:62:51:2d:38:16:28:0c:0d:87:fc:33:ef:c8:f7:ca:53:de:
         48:bf:e6:4f:7d:f9:fd:ad:bb:77:ac:5a:1c:44:80:62:9e:30:
         6f:99:df:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org