Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3234312e302f32342d3234203d3e203238353934.roa
File:                     3230302e3231382e3234312e302f32342d3234203d3e203238353934.roa (raw, json)
Hash identifier:          JRZIKRr72KQEEXrXrnv0Na3tP9DCQx5IYLHwQTqJB6Y=
Subject key identifier:   8F:86:56:13:0C:C1:47:56:72:18:7C:8D:B4:7D:A9:2F:CE:B2:10:C9
Certificate issuer:       /CN=022A43659AD22D768D09981B94C1A7A7BFC1AF03
Certificate serial:       247966B06EC06272BA33BACC67C1FB755E0C9005
Authority key identifier: 02:2A:43:65:9A:D2:2D:76:8D:09:98:1B:94:C1:A7:A7:BF:C1:AF:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/022A43659AD22D768D09981B94C1A7A7BFC1AF03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3234312e302f32342d3234203d3e203238353934.roa
Signing time:             Mon 03 Jul 2023 10:29:39 +0000
ROA not before:           Mon 03 Jul 2023 10:24:39 +0000
ROA not after:            Mon 01 Jul 2024 10:29:39 +0000
asID:                     28594
IP address blocks:        200.218.241.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:79:66:b0:6e:c0:62:72:ba:33:ba:cc:67:c1:fb:75:5e:0c:90:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=022A43659AD22D768D09981B94C1A7A7BFC1AF03
        Validity
            Not Before: Jul  3 10:24:39 2023 GMT
            Not After : Jul  1 10:29:39 2024 GMT
        Subject: CN=8F8656130CC1475672187C8DB47DA92FCEB210C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f5:b3:ec:4f:74:65:f9:59:c9:28:af:01:4a:
                    ed:84:ae:b9:89:c2:06:6f:ba:d8:62:d7:21:e2:8b:
                    ae:d8:e3:a1:6d:4c:33:80:1e:71:77:2d:f0:88:93:
                    61:62:b1:d7:d2:91:e7:65:f4:1d:d8:13:4e:db:25:
                    b2:00:3a:1b:df:73:e5:8d:06:fe:92:4a:9c:ef:6b:
                    6f:e3:30:f9:b0:6f:1e:2d:a5:aa:a9:5d:3c:77:5b:
                    38:84:2a:b3:cc:e5:e3:20:24:aa:2f:46:f5:87:a5:
                    ba:03:ee:57:15:7a:65:2d:1c:f1:72:27:ae:17:70:
                    c9:1b:62:2a:9c:a3:9f:4f:d9:c7:1f:26:23:f8:d0:
                    db:f6:62:d9:5b:f6:af:7b:e6:30:43:f3:bc:49:d5:
                    41:79:14:a4:44:31:cf:ce:e8:e2:e5:77:87:54:36:
                    ee:51:36:4b:c1:30:8e:96:db:4c:8a:3e:42:f2:a6:
                    93:99:2f:d4:93:50:8e:73:da:1d:9f:41:1c:32:12:
                    1d:72:d2:d1:60:98:80:60:14:4c:41:b2:a2:cd:08:
                    7f:0f:b4:70:a7:ff:e2:91:8a:6b:1c:90:c8:9c:20:
                    93:c9:6d:38:30:7e:05:25:9e:f9:48:50:9d:78:c4:
                    c3:82:4d:4b:2e:85:e1:66:91:ef:4c:c2:45:64:c6:
                    2f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:86:56:13:0C:C1:47:56:72:18:7C:8D:B4:7D:A9:2F:CE:B2:10:C9
            X509v3 Authority Key Identifier:
                keyid:02:2A:43:65:9A:D2:2D:76:8D:09:98:1B:94:C1:A7:A7:BF:C1:AF:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/022A43659AD22D768D09981B94C1A7A7BFC1AF03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/022A43659AD22D768D09981B94C1A7A7BFC1AF03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3234312e302f32342d3234203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:9e:b0:39:eb:19:83:16:9a:22:31:07:7d:36:a3:c4:14:81:
         b0:ed:15:8d:cc:10:b1:8f:83:89:53:ab:e6:13:10:5a:2c:c0:
         bd:e6:54:50:52:72:be:6b:bf:b9:b0:0f:67:34:db:6c:f2:7f:
         50:ba:b1:a5:08:7b:97:2a:9d:66:3f:45:cc:c7:08:1d:18:8f:
         d9:0a:ad:27:c8:6a:05:4e:f7:cf:62:4c:37:b1:aa:20:78:b7:
         66:b2:34:74:bc:4b:41:74:b0:04:78:35:11:b4:77:7f:5e:b3:
         42:eb:a9:6b:f9:d5:b3:57:ec:63:0d:39:5f:96:82:9d:ab:57:
         1e:8e:51:2d:3d:24:de:7c:ae:69:f3:95:65:49:40:7b:5e:3f:
         d9:9a:e1:f8:ea:17:81:35:28:08:d6:70:04:8a:6d:c1:69:6e:
         e3:7d:91:d0:ec:ac:fc:c2:56:57:5a:09:38:41:e6:ce:98:ae:
         d6:e6:55:6e:0f:5c:dd:21:ba:30:2e:de:e0:b1:1b:c4:bd:dd:
         21:5a:e4:ef:b3:8a:a7:29:58:36:2b:a4:46:69:de:57:7c:81:
         25:32:25:d8:d1:b9:61:6c:22:00:1c:c5:49:ec:3d:10:1a:26:
         8b:97:95:fd:bf:4d:5e:f3:b8:ca:55:2d:d9:78:a7:fa:38:f6:
         db:09:fa:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org