Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3234302e302f32342d3234203d3e203238353934.roa
File:                     3230302e3231382e3234302e302f32342d3234203d3e203238353934.roa (raw, json)
Hash identifier:          +rHVOVxhh5fIWjsIwy6SiOVUDNIyUSXgPagvJvKrih8=
Subject key identifier:   E9:55:7C:88:5F:80:A2:C6:8E:FC:E7:77:B7:29:77:F7:C2:7F:F9:AF
Certificate issuer:       /CN=022A43659AD22D768D09981B94C1A7A7BFC1AF03
Certificate serial:       4D7B1D94F3D9D424327FDBF5F3F37168D6B9CCA0
Authority key identifier: 02:2A:43:65:9A:D2:2D:76:8D:09:98:1B:94:C1:A7:A7:BF:C1:AF:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/022A43659AD22D768D09981B94C1A7A7BFC1AF03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3234302e302f32342d3234203d3e203238353934.roa
Signing time:             Mon 03 Jul 2023 10:29:39 +0000
ROA not before:           Mon 03 Jul 2023 10:24:39 +0000
ROA not after:            Mon 01 Jul 2024 10:29:39 +0000
asID:                     28594
IP address blocks:        200.218.240.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:7b:1d:94:f3:d9:d4:24:32:7f:db:f5:f3:f3:71:68:d6:b9:cc:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=022A43659AD22D768D09981B94C1A7A7BFC1AF03
        Validity
            Not Before: Jul  3 10:24:39 2023 GMT
            Not After : Jul  1 10:29:39 2024 GMT
        Subject: CN=E9557C885F80A2C68EFCE777B72977F7C27FF9AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:cb:b6:b5:da:c4:08:cc:20:43:db:2a:62:03:
                    a5:63:12:c3:d2:51:48:fd:a0:d4:9d:41:d0:05:5c:
                    c5:14:8d:fc:81:4e:2e:8a:59:a2:a1:b8:49:f4:f0:
                    b5:f7:1a:6b:9e:24:86:97:68:68:ff:11:2f:46:b0:
                    c5:54:62:e6:3b:15:d7:17:9f:19:2a:56:ba:c2:e2:
                    07:b2:b9:81:61:85:fa:cb:2e:63:bf:48:9a:67:73:
                    71:e4:39:0b:0f:06:b6:6f:d7:4e:d4:b5:16:0b:5f:
                    2c:90:17:94:91:ef:a0:4f:7b:b8:c5:e8:54:aa:84:
                    7c:24:ce:bd:a6:73:f9:2b:3c:3f:8c:d3:4c:60:a5:
                    43:08:ed:99:05:a3:0a:33:22:25:30:ad:ba:54:08:
                    61:8e:1d:3f:cd:92:4e:e2:9f:e3:da:6f:ec:67:0b:
                    d0:2b:72:da:38:73:93:11:16:12:b7:93:f7:c3:ac:
                    d7:f0:78:af:e5:51:eb:42:a6:8b:42:8e:6c:e7:1a:
                    25:f0:ed:11:7e:87:e6:cd:3e:c6:53:3c:02:fd:1c:
                    db:18:97:35:36:1e:ed:4b:86:9f:87:94:28:74:60:
                    86:52:b1:f7:6d:b8:be:d0:c1:9b:f8:7e:14:fa:5a:
                    aa:40:9a:72:c6:ad:03:51:32:74:56:6b:74:17:b4:
                    51:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:55:7C:88:5F:80:A2:C6:8E:FC:E7:77:B7:29:77:F7:C2:7F:F9:AF
            X509v3 Authority Key Identifier:
                keyid:02:2A:43:65:9A:D2:2D:76:8D:09:98:1B:94:C1:A7:A7:BF:C1:AF:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/022A43659AD22D768D09981B94C1A7A7BFC1AF03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/022A43659AD22D768D09981B94C1A7A7BFC1AF03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3234302e302f32342d3234203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:0f:f8:86:f8:c9:91:48:fa:d9:19:30:a1:85:45:3a:56:fe:
         ba:7e:78:c2:b9:e1:59:b6:eb:c9:b2:5d:e4:3b:39:21:11:7e:
         7c:bd:00:c8:8c:2e:0a:87:7f:c8:19:4c:78:05:db:79:16:36:
         2a:33:f9:a4:c0:87:18:b8:f5:59:d5:c5:01:1d:4f:2c:80:78:
         3c:78:3d:0e:0c:ee:13:27:a1:17:75:b4:2a:50:50:37:62:2f:
         86:1b:34:3b:e5:a8:df:44:af:fd:8d:a4:60:1f:ce:bc:92:c8:
         7b:da:49:3e:b6:93:51:20:94:ec:09:51:78:e6:f1:5c:d5:42:
         75:d8:5a:90:eb:fc:0b:75:b2:50:aa:0d:05:56:c7:fc:8e:61:
         36:83:26:e6:fc:26:ca:ce:8c:d8:11:88:b8:6a:52:1e:42:7f:
         a4:3d:03:87:0a:91:5b:4a:56:f3:2a:89:52:04:7e:40:e5:2b:
         55:95:99:86:4d:a1:c7:e7:f6:9e:fd:c9:46:3e:59:93:b3:f2:
         36:21:c1:30:44:fe:d9:6e:8d:96:cb:ad:25:35:4a:ba:c1:f4:
         e3:d9:8a:21:78:18:23:c7:30:89:ec:4a:74:66:94:1b:ac:39:
         e4:57:16:1c:14:42:8e:55:51:69:79:ec:4c:5a:07:7e:5f:86:
         0b:52:96:1a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUTXsdlPPZ1CQyf9v18/NxaNa5zKAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDIyQTQzNjU5QUQyMkQ3NjhEMDk5ODFCOTRDMUE3QTdC
RkMxQUYwMzAeFw0yMzA3MDMxMDI0MzlaFw0yNDA3MDExMDI5MzlaMDMxMTAvBgNV
BAMTKEU5NTU3Qzg4NUY4MEEyQzY4RUZDRTc3N0I3Mjk3N0Y3QzI3RkY5QUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjy7a12sQIzCBD2ypiA6VjEsPS
UUj9oNSdQdAFXMUUjfyBTi6KWaKhuEn08LX3GmueJIaXaGj/ES9GsMVUYuY7FdcX
nxkqVrrC4geyuYFhhfrLLmO/SJpnc3HkOQsPBrZv107UtRYLXyyQF5SR76BPe7jF
6FSqhHwkzr2mc/krPD+M00xgpUMI7ZkFowozIiUwrbpUCGGOHT/Nkk7in+Pab+xn
C9Arcto4c5MRFhK3k/fDrNfweK/lUetCpotCjmznGiXw7RF+h+bNPsZTPAL9HNsY
lzU2Hu1Lhp+HlCh0YIZSsfdtuL7QwZv4fhT6WqpAmnLGrQNRMnRWa3QXtFH3AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQU6VV8iF+AosaO/Od3tyl398J/+a8wHwYDVR0j
BBgwFoAUAipDZZrSLXaNCZgblMGnp7/BrwMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTNqampURGZVQWVSQ3FSd1lKNkZNcjlCb3l5dWNVOGNpd25QSzRNaEx5
d3ovMC8wMjJBNDM2NTlBRDIyRDc2OEQwOTk4MUI5NEMxQTdBN0JGQzFBRjAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzAyMkE0MzY1OUFEMjJENzY4
RDA5OTgxQjk0QzFBN0E3QkZDMUFGMDMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzUzampqVERmVUFlUkNxUndZSjZGTXI5Qm95eXVjVThjaXduUEs0TWhMeXd6LzAv
MzIzMDMwMmUzMjMxMzgyZTMyMzQzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzNTM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADI2vAwDQYJKoZIhvcNAQELBQADggEBAJYP+Ib4
yZFI+tkZMKGFRTpW/rp+eMK54Vm268myXeQ7OSERfny9AMiMLgqHf8gZTHgF23kW
Nioz+aTAhxi49VnVxQEdTyyAeDx4PQ4M7hMnoRd1tCpQUDdiL4YbNDvlqN9Er/2N
pGAfzrySyHvaST62k1EglOwJUXjm8VzVQnXYWpDr/At1slCqDQVWx/yOYTaDJub8
JsrOjNgRiLhqUh5Cf6Q9A4cKkVtKVvMqiVIEfkDlK1WVmYZNocfn9p79yUY+WZOz
8jYhwTBE/tlujZbLrSU1SrrB9OPZiiF4GCPHMInsSnRmlBusOeRXFhwUQo5VUWl5
7ExaB35fhgtSlho=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org