Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3234302e302f32332d3233203d3e203238353934.roa
File:                     3230302e3231382e3234302e302f32332d3233203d3e203238353934.roa (raw, json)
Hash identifier:          QXmQ/cct9p69tFc9HLturFCtEiDMii+AP8wpW2Bnk6g=
Subject key identifier:   61:3D:85:0E:36:4E:81:44:20:03:73:2D:6C:66:04:67:3D:3C:13:42
Certificate issuer:       /CN=022A43659AD22D768D09981B94C1A7A7BFC1AF03
Certificate serial:       451EAD43F18E021DA3462BDDC6631CB94D76377A
Authority key identifier: 02:2A:43:65:9A:D2:2D:76:8D:09:98:1B:94:C1:A7:A7:BF:C1:AF:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/022A43659AD22D768D09981B94C1A7A7BFC1AF03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3234302e302f32332d3233203d3e203238353934.roa
Signing time:             Mon 03 Jul 2023 10:29:39 +0000
ROA not before:           Mon 03 Jul 2023 10:24:39 +0000
ROA not after:            Mon 01 Jul 2024 10:29:39 +0000
asID:                     28594
IP address blocks:        200.218.240.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:1e:ad:43:f1:8e:02:1d:a3:46:2b:dd:c6:63:1c:b9:4d:76:37:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=022A43659AD22D768D09981B94C1A7A7BFC1AF03
        Validity
            Not Before: Jul  3 10:24:39 2023 GMT
            Not After : Jul  1 10:29:39 2024 GMT
        Subject: CN=613D850E364E81442003732D6C6604673D3C1342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:d9:3c:09:82:60:5a:e7:bd:be:c7:81:a2:76:
                    dd:19:79:58:00:c9:85:27:66:c9:6f:9b:63:fb:d2:
                    f9:dc:8c:50:d4:92:2a:84:0d:cc:71:2b:2b:58:c6:
                    ce:b1:58:7d:e6:20:ac:5d:6b:df:97:43:25:6e:8a:
                    a3:1f:af:22:a2:fe:1b:ca:f6:b5:4a:dc:b3:d4:65:
                    83:be:f8:1f:d6:31:e4:07:0e:68:7e:de:7a:81:3c:
                    80:b8:37:32:a2:77:6b:75:6e:6c:a0:c5:81:9d:27:
                    aa:00:c2:be:ac:3d:36:bc:95:86:43:7f:87:38:68:
                    c6:74:c6:1a:62:bf:fe:11:c2:f0:ef:2d:04:0a:2d:
                    6e:f2:d5:16:7b:83:3e:3f:42:dd:cc:65:06:ea:64:
                    f8:b7:39:cf:9e:88:74:da:2e:5f:89:e6:53:1c:05:
                    29:35:6b:97:04:04:8a:ca:69:f1:d4:a9:bb:51:18:
                    e8:0e:2f:46:6c:d9:cc:43:0e:d7:c0:a4:82:4a:03:
                    2b:78:d9:14:be:8d:d5:f3:39:7a:91:f0:d7:88:bc:
                    03:89:bf:5c:f1:12:14:34:b6:b7:4c:a5:ac:63:81:
                    fb:b5:0d:b8:d0:0f:43:5a:0d:32:0c:db:dd:94:4f:
                    fa:0b:33:96:5d:00:c2:f7:45:6b:0b:86:b2:f3:f3:
                    61:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:3D:85:0E:36:4E:81:44:20:03:73:2D:6C:66:04:67:3D:3C:13:42
            X509v3 Authority Key Identifier:
                keyid:02:2A:43:65:9A:D2:2D:76:8D:09:98:1B:94:C1:A7:A7:BF:C1:AF:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/022A43659AD22D768D09981B94C1A7A7BFC1AF03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/022A43659AD22D768D09981B94C1A7A7BFC1AF03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3234302e302f32332d3233203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:ae:bf:b3:f0:c8:e0:87:0e:e6:2e:37:f3:26:39:85:c6:9a:
         b8:4e:87:49:27:82:0c:96:53:b1:3f:75:d2:cd:a8:c7:81:65:
         81:00:2d:49:a0:c9:ca:34:b6:99:c6:16:26:d3:9d:2c:a2:00:
         c9:6e:02:a5:d0:f9:21:96:e4:13:0d:d1:c3:1c:be:96:b4:28:
         f4:5f:fa:04:fd:d0:7a:bf:1f:28:fb:ce:b2:60:d9:a6:f2:c1:
         83:26:03:0e:81:73:9f:97:4a:71:12:4e:52:f0:e3:df:d9:71:
         41:4a:09:74:ba:aa:0f:56:e5:33:89:29:ab:42:ca:68:8e:74:
         53:5d:4f:df:11:23:f2:5f:80:d1:36:2b:60:b6:de:0b:c4:ea:
         6d:71:a7:d8:1e:b9:45:c2:18:b7:d0:d3:1f:a5:22:f6:d7:5f:
         38:e5:a0:07:de:35:bf:cd:13:66:c6:db:3e:42:2c:ae:79:d9:
         29:83:8a:ef:f9:dc:4c:f7:db:66:6c:c9:22:2a:11:0e:86:2c:
         83:c2:3f:ff:1e:1b:e7:05:98:30:d8:a5:31:e9:7f:ef:86:35:
         3f:43:05:f0:db:11:2b:f5:9e:2b:be:b5:bb:19:b6:ad:8d:e6:
         f0:2c:e2:9d:87:ce:63:13:b3:30:b5:69:58:df:b8:02:b5:ba:
         0a:45:b5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org