Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3234332e302f32342d3234203d3e203238353934.roa
File:                     3230302e3231382e3234332e302f32342d3234203d3e203238353934.roa (raw, json)
Hash identifier:          QxNYg8eMghy21DGoULODha9jIyyutMxhIRCoCc+pXeQ=
Subject key identifier:   67:7E:69:54:4B:E1:BA:D3:90:F9:AC:86:B9:72:87:A6:1C:A5:5A:46
Certificate issuer:       /CN=022A43659AD22D768D09981B94C1A7A7BFC1AF03
Certificate serial:       6A87541D63FC7FAF6BE92F4489D4C162C5A4E998
Authority key identifier: 02:2A:43:65:9A:D2:2D:76:8D:09:98:1B:94:C1:A7:A7:BF:C1:AF:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/022A43659AD22D768D09981B94C1A7A7BFC1AF03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3234332e302f32342d3234203d3e203238353934.roa
Signing time:             Mon 03 Jul 2023 10:29:37 +0000
ROA not before:           Mon 03 Jul 2023 10:24:37 +0000
ROA not after:            Mon 01 Jul 2024 10:29:37 +0000
asID:                     28594
IP address blocks:        200.218.243.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:87:54:1d:63:fc:7f:af:6b:e9:2f:44:89:d4:c1:62:c5:a4:e9:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=022A43659AD22D768D09981B94C1A7A7BFC1AF03
        Validity
            Not Before: Jul  3 10:24:37 2023 GMT
            Not After : Jul  1 10:29:37 2024 GMT
        Subject: CN=677E69544BE1BAD390F9AC86B97287A61CA55A46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:bc:56:21:33:ef:db:cb:6d:cb:09:c3:52:9b:
                    98:0e:f3:00:07:ad:7d:fa:8f:25:72:70:81:78:63:
                    16:94:f1:d6:6b:60:22:74:99:6e:3f:cf:83:90:97:
                    67:79:53:be:6f:4e:b2:33:ea:df:af:95:4c:8a:30:
                    db:b7:06:c5:71:9c:94:62:6a:4c:fb:b8:e5:be:45:
                    a0:24:3b:9b:e8:6e:67:58:29:b4:57:87:5c:b2:ac:
                    a5:11:2b:52:b8:07:6d:0d:64:77:d6:e1:50:ac:74:
                    48:dd:e1:8c:c0:fe:44:88:d9:3d:7b:3a:f5:ad:99:
                    22:03:81:af:f5:89:f1:8a:33:80:1a:9c:a2:fa:c5:
                    1f:eb:6e:fd:f3:78:ae:d6:b4:0e:6e:21:ab:3e:7b:
                    f7:92:c6:ef:16:df:89:4f:c1:62:eb:91:96:3d:72:
                    e9:54:3e:d0:16:1e:a6:17:e5:d8:62:1a:83:34:a2:
                    b7:3b:39:89:83:d5:c6:3e:cc:24:86:b8:e4:a6:75:
                    f4:99:16:5b:53:57:ea:b0:99:09:a9:d5:55:a2:83:
                    4a:e0:3d:5d:a2:30:fc:56:53:86:55:10:9f:5b:30:
                    a1:80:89:61:49:9b:6c:0c:6e:96:2e:16:5b:12:bb:
                    02:57:43:0a:93:03:1e:37:a0:95:e3:f0:cb:fb:ad:
                    9d:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:7E:69:54:4B:E1:BA:D3:90:F9:AC:86:B9:72:87:A6:1C:A5:5A:46
            X509v3 Authority Key Identifier:
                keyid:02:2A:43:65:9A:D2:2D:76:8D:09:98:1B:94:C1:A7:A7:BF:C1:AF:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/022A43659AD22D768D09981B94C1A7A7BFC1AF03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/022A43659AD22D768D09981B94C1A7A7BFC1AF03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3234332e302f32342d3234203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:22:39:7c:bb:27:10:cd:0c:e3:8a:5b:0e:7c:0c:5e:55:8a:
         58:cc:a8:ac:94:df:3f:ba:dc:36:0d:e4:fa:36:c7:54:0c:cb:
         d2:59:46:8e:7d:e6:48:40:dd:81:c1:e1:a6:41:d4:b3:35:b8:
         ec:c0:f1:dd:7a:87:8b:73:58:93:d4:ff:90:1d:be:a6:bd:85:
         ed:b8:3c:9a:24:4f:eb:8b:17:23:d1:17:e7:29:e7:c3:dd:84:
         93:cc:36:d1:bd:84:74:ed:00:0b:fd:a2:e8:be:e3:8a:ac:62:
         68:5c:2a:a4:cd:9e:dc:a3:40:26:cc:6a:cd:3d:98:94:dc:c1:
         d9:80:41:b1:93:13:83:13:02:f8:3b:b9:7c:b1:ec:cd:10:42:
         e1:43:f9:2a:f5:38:58:3b:c5:4b:a7:ac:b9:50:dd:f3:fb:15:
         9d:fd:f5:e9:2a:63:ca:bb:7d:e6:cd:3a:4c:e6:45:49:73:5a:
         c9:77:35:52:37:d9:39:02:70:11:cf:84:f6:d9:21:9a:22:80:
         3b:b4:2b:ce:bf:4a:c7:9a:e9:3b:22:02:81:ca:62:4c:24:a8:
         b5:ed:bc:da:68:76:45:54:5c:ff:59:bd:49:e4:68:6d:31:0f:
         ba:db:1c:e8:79:6f:c4:11:fb:e6:b3:b8:f5:60:1c:0d:e0:56:
         68:10:c8:c7
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUaodUHWP8f69r6S9EidTBYsWk6ZgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDIyQTQzNjU5QUQyMkQ3NjhEMDk5ODFCOTRDMUE3QTdC
RkMxQUYwMzAeFw0yMzA3MDMxMDI0MzdaFw0yNDA3MDExMDI5MzdaMDMxMTAvBgNV
BAMTKDY3N0U2OTU0NEJFMUJBRDM5MEY5QUM4NkI5NzI4N0E2MUNBNTVBNDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrvFYhM+/by23LCcNSm5gO8wAH
rX36jyVycIF4YxaU8dZrYCJ0mW4/z4OQl2d5U75vTrIz6t+vlUyKMNu3BsVxnJRi
akz7uOW+RaAkO5vobmdYKbRXh1yyrKURK1K4B20NZHfW4VCsdEjd4YzA/kSI2T17
OvWtmSIDga/1ifGKM4AanKL6xR/rbv3zeK7WtA5uIas+e/eSxu8W34lPwWLrkZY9
culUPtAWHqYX5dhiGoM0orc7OYmD1cY+zCSGuOSmdfSZFltTV+qwmQmp1VWig0rg
PV2iMPxWU4ZVEJ9bMKGAiWFJm2wMbpYuFlsSuwJXQwqTAx43oJXj8Mv7rZ0vAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUZ35pVEvhutOQ+ayGuXKHphylWkYwHwYDVR0j
BBgwFoAUAipDZZrSLXaNCZgblMGnp7/BrwMwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTNqampURGZVQWVSQ3FSd1lKNkZNcjlCb3l5dWNVOGNpd25QSzRNaEx5
d3ovMC8wMjJBNDM2NTlBRDIyRDc2OEQwOTk4MUI5NEMxQTdBN0JGQzFBRjAzLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzAyMkE0MzY1OUFEMjJENzY4
RDA5OTgxQjk0QzFBN0E3QkZDMUFGMDMuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzUzampqVERmVUFlUkNxUndZSjZGTXI5Qm95eXVjVThjaXduUEs0TWhMeXd6LzAv
MzIzMDMwMmUzMjMxMzgyZTMyMzQzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzNTM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADI2vMwDQYJKoZIhvcNAQELBQADggEBAIYiOXy7
JxDNDOOKWw58DF5ViljMqKyU3z+63DYN5Po2x1QMy9JZRo595khA3YHB4aZB1LM1
uOzA8d16h4tzWJPU/5Advqa9he24PJokT+uLFyPRF+cp58PdhJPMNtG9hHTtAAv9
oui+44qsYmhcKqTNntyjQCbMas09mJTcwdmAQbGTE4MTAvg7uXyx7M0QQuFD+Sr1
OFg7xUunrLlQ3fP7FZ399ekqY8q7febNOkzmRUlzWsl3NVI32TkCcBHPhPbZIZoi
gDu0K86/Ssea6TsiAoHKYkwkqLXtvNpodkVUXP9ZvUnkaG0xD7rbHOh5b8QR++az
uPVgHA3gVmgQyMc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org