Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3234352e302f32342d3234203d3e203238353934.roa
File:                     3230302e3231382e3234352e302f32342d3234203d3e203238353934.roa (raw, json)
Hash identifier:          zoKsgda0r7kZcACKvFC/1mujrEkmY5ptQvz+1bYwQXo=
Subject key identifier:   2C:BC:BC:DA:F8:5A:7C:B7:BA:80:AE:00:53:3F:BE:F8:0F:64:87:7D
Certificate issuer:       /CN=022A43659AD22D768D09981B94C1A7A7BFC1AF03
Certificate serial:       49DA72724536648D4A8BBBFAA95679A04E1FBD77
Authority key identifier: 02:2A:43:65:9A:D2:2D:76:8D:09:98:1B:94:C1:A7:A7:BF:C1:AF:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/022A43659AD22D768D09981B94C1A7A7BFC1AF03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3234352e302f32342d3234203d3e203238353934.roa
Signing time:             Mon 03 Jul 2023 10:29:36 +0000
ROA not before:           Mon 03 Jul 2023 10:24:36 +0000
ROA not after:            Mon 01 Jul 2024 10:29:36 +0000
asID:                     28594
IP address blocks:        200.218.245.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:da:72:72:45:36:64:8d:4a:8b:bb:fa:a9:56:79:a0:4e:1f:bd:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=022A43659AD22D768D09981B94C1A7A7BFC1AF03
        Validity
            Not Before: Jul  3 10:24:36 2023 GMT
            Not After : Jul  1 10:29:36 2024 GMT
        Subject: CN=2CBCBCDAF85A7CB7BA80AE00533FBEF80F64877D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:21:ca:07:0b:c5:eb:ce:09:90:52:7c:6f:70:
                    49:f0:b2:97:ab:31:fb:9e:07:06:06:e0:62:9c:0c:
                    6f:38:ff:2d:60:53:33:b7:d4:cc:15:81:42:f7:0a:
                    68:a5:6c:eb:ef:24:a1:ff:d1:a9:07:4d:62:05:c0:
                    6a:65:63:30:6e:49:e0:31:69:b6:db:0b:3a:88:79:
                    c4:43:a6:4b:9f:a2:0e:5d:01:c9:bb:41:84:85:c2:
                    62:41:40:da:95:da:1b:11:68:9d:12:c9:bd:65:dc:
                    c1:05:b1:26:cc:39:8d:c1:40:b0:c8:66:47:24:22:
                    8a:0b:16:6c:8d:21:b5:e9:68:ac:22:2c:94:b1:7a:
                    35:2b:68:cb:1c:be:b6:83:1a:0e:c7:8a:64:1d:5e:
                    5f:44:86:46:e9:e3:ba:52:d8:50:c2:6a:4b:9d:54:
                    f1:73:d8:b5:78:ec:4f:50:52:81:a0:aa:19:bc:86:
                    77:4c:46:91:4a:91:2a:c8:cc:18:bd:f2:7d:dd:1e:
                    58:10:60:d9:09:af:42:46:52:73:cc:5c:18:db:2a:
                    e5:53:53:51:85:8e:59:37:fd:b7:3d:10:09:95:93:
                    00:5c:67:77:c1:2b:ae:c6:97:80:2c:3b:ca:cf:9c:
                    a2:0b:b1:af:48:7e:41:db:6f:50:8c:98:14:1a:16:
                    69:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:BC:BC:DA:F8:5A:7C:B7:BA:80:AE:00:53:3F:BE:F8:0F:64:87:7D
            X509v3 Authority Key Identifier:
                keyid:02:2A:43:65:9A:D2:2D:76:8D:09:98:1B:94:C1:A7:A7:BF:C1:AF:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/022A43659AD22D768D09981B94C1A7A7BFC1AF03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/022A43659AD22D768D09981B94C1A7A7BFC1AF03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3234352e302f32342d3234203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.245.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:1c:e5:88:b3:d4:22:d8:24:5a:28:2d:a4:84:71:08:e2:bd:
         ad:c4:ea:1f:5f:d6:b4:2a:ff:6a:6e:d1:9a:96:76:87:11:d1:
         2f:31:8b:3b:93:d3:3e:9f:47:41:b6:00:59:5c:b1:dc:a3:1e:
         30:d6:ad:51:26:a2:89:91:3a:5a:33:5c:68:15:8b:03:77:01:
         0b:6b:a5:59:38:f1:b7:13:5b:9e:b8:6a:9b:c2:2e:f9:67:f2:
         4a:08:3f:d2:40:fc:cb:77:5b:20:6c:ae:df:20:9b:fa:a2:b1:
         86:ee:45:95:3e:55:e6:be:7e:c6:b5:44:bd:47:e0:7d:44:a8:
         39:a3:85:1c:62:73:b8:a9:95:f6:99:31:44:43:04:0e:6e:41:
         ec:4d:9b:99:50:b7:be:5c:df:30:03:1b:ea:75:c4:6e:21:60:
         8e:d4:67:94:de:b0:b0:a2:80:64:8b:6d:38:20:ff:dd:b3:c9:
         00:95:7e:57:d7:5b:02:b1:e6:6d:0d:a3:8e:4b:b2:90:81:c0:
         e1:a0:b6:a4:8f:2c:81:ca:e8:07:02:15:13:56:41:6e:4a:b7:
         8f:1c:92:bd:b1:6c:dc:59:a4:a3:1a:1a:5f:0c:29:87:a1:b7:
         b0:43:66:6c:e2:39:52:05:b1:4c:54:58:42:59:e6:22:02:8a:
         6c:de:3a:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org