Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3234322e302f32332d3233203d3e203238353934.roa
File:                     3230302e3231382e3234322e302f32332d3233203d3e203238353934.roa (raw, json)
Hash identifier:          DqS6JKut1uFIB0CDJgTZqhS1vG07RU9z46L0gDVXdYY=
Subject key identifier:   B5:19:57:7B:92:E5:72:B3:E6:31:4A:9E:B6:71:E8:97:45:B7:AF:AF
Certificate issuer:       /CN=022A43659AD22D768D09981B94C1A7A7BFC1AF03
Certificate serial:       02EF6517229509D3ECFD0942638E8CA0B4C712C2
Authority key identifier: 02:2A:43:65:9A:D2:2D:76:8D:09:98:1B:94:C1:A7:A7:BF:C1:AF:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/022A43659AD22D768D09981B94C1A7A7BFC1AF03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3234322e302f32332d3233203d3e203238353934.roa
Signing time:             Mon 03 Jul 2023 10:29:34 +0000
ROA not before:           Mon 03 Jul 2023 10:24:34 +0000
ROA not after:            Mon 01 Jul 2024 10:29:34 +0000
asID:                     28594
IP address blocks:        200.218.242.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:ef:65:17:22:95:09:d3:ec:fd:09:42:63:8e:8c:a0:b4:c7:12:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=022A43659AD22D768D09981B94C1A7A7BFC1AF03
        Validity
            Not Before: Jul  3 10:24:34 2023 GMT
            Not After : Jul  1 10:29:34 2024 GMT
        Subject: CN=B519577B92E572B3E6314A9EB671E89745B7AFAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ce:ef:90:48:2e:d5:d9:81:41:21:eb:4e:57:
                    16:8a:85:45:f6:03:18:ce:29:72:71:93:e0:d0:22:
                    b7:56:e2:5e:d8:d1:bb:73:94:57:ee:fe:5e:5d:6c:
                    1e:b9:67:2e:99:fb:96:73:83:15:55:9f:92:93:1f:
                    9a:94:3f:5e:7c:10:aa:cb:a8:37:3b:6c:9c:9f:5d:
                    98:5b:39:d3:55:31:f5:69:85:3f:f5:92:92:4c:0d:
                    db:56:37:fb:26:30:9f:d7:6b:1b:4c:26:85:84:88:
                    56:ce:bb:e0:7d:6c:92:11:ca:da:61:96:b1:bf:5e:
                    67:ee:b4:14:b4:63:54:9b:2c:be:9e:85:bc:10:34:
                    b2:a6:77:dd:3f:e3:b9:09:a1:d0:59:1a:73:eb:7b:
                    55:c7:6d:0a:98:77:b2:41:49:ec:5d:84:27:05:c0:
                    a5:cd:0a:d9:1e:ca:1e:4c:e2:b8:45:f7:4c:32:e5:
                    5e:f9:b7:06:f0:74:9a:21:77:69:de:04:a1:cf:97:
                    39:77:68:aa:98:ec:99:ac:c3:5b:80:f6:15:78:9d:
                    74:78:9c:2d:35:e7:ca:39:7b:e9:44:32:e1:52:16:
                    ce:7c:87:ca:7b:aa:3e:67:b1:1b:a5:4a:6f:13:5a:
                    7b:70:aa:91:fe:85:9e:f7:ec:f2:1e:0f:13:a8:47:
                    9e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:19:57:7B:92:E5:72:B3:E6:31:4A:9E:B6:71:E8:97:45:B7:AF:AF
            X509v3 Authority Key Identifier:
                keyid:02:2A:43:65:9A:D2:2D:76:8D:09:98:1B:94:C1:A7:A7:BF:C1:AF:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/022A43659AD22D768D09981B94C1A7A7BFC1AF03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/022A43659AD22D768D09981B94C1A7A7BFC1AF03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3234322e302f32332d3233203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:ae:b2:6e:b1:32:6e:2f:5d:5b:b4:13:7a:a8:26:0c:1b:7a:
         3e:09:27:e8:3a:9e:a2:12:d5:87:a3:47:6f:bd:59:5c:17:64:
         db:f5:ae:66:3d:26:4c:56:42:e8:33:63:ab:0d:be:15:81:03:
         25:2a:b0:75:49:91:5a:df:a4:75:7f:e7:aa:25:32:56:8c:6d:
         16:18:c9:3f:74:a6:78:78:21:53:ed:c2:b5:90:df:0c:10:6b:
         17:4f:24:8c:ad:aa:22:02:b3:ce:96:fe:68:04:8c:40:bf:91:
         0a:07:7e:49:8f:3a:67:50:48:03:6e:1b:39:46:00:97:af:ee:
         df:82:50:e8:44:01:09:7a:14:7a:ac:78:aa:d4:40:ca:7c:03:
         74:be:fd:5e:fb:18:2c:00:a2:da:17:46:0a:e9:2e:5f:61:5e:
         4f:6b:8c:5b:92:16:a3:e2:14:ea:4e:62:84:9f:46:d3:09:dd:
         67:dd:b2:99:b6:8e:5f:fe:95:54:39:66:3d:77:3d:71:e6:cc:
         a3:c5:f7:9b:29:ad:36:d8:36:94:ec:aa:18:7b:75:a0:b8:f2:
         18:6a:45:3c:1a:e5:79:c7:8f:18:14:21:df:26:b7:d4:55:90:
         e0:8b:65:2f:09:bd:44:e8:81:bf:4b:bf:d0:19:d9:c5:0a:98:
         70:da:ff:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org