Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3234372e302f32342d3234203d3e203238353934.roa
File:                     3230302e3231382e3234372e302f32342d3234203d3e203238353934.roa (raw, json)
Hash identifier:          vkGqbon7NXv/gU41r/ofpNpgR26JSwpepsBVEuB3vqc=
Subject key identifier:   C8:5F:44:2C:39:4E:EE:F1:0A:32:2B:C6:E9:77:98:F3:BD:94:93:93
Certificate issuer:       /CN=022A43659AD22D768D09981B94C1A7A7BFC1AF03
Certificate serial:       1AD0F518ABA80C89B556DC23291419022419C0F4
Authority key identifier: 02:2A:43:65:9A:D2:2D:76:8D:09:98:1B:94:C1:A7:A7:BF:C1:AF:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/022A43659AD22D768D09981B94C1A7A7BFC1AF03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3234372e302f32342d3234203d3e203238353934.roa
Signing time:             Mon 03 Jul 2023 10:29:40 +0000
ROA not before:           Mon 03 Jul 2023 10:24:40 +0000
ROA not after:            Mon 01 Jul 2024 10:29:40 +0000
asID:                     28594
IP address blocks:        200.218.247.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:d0:f5:18:ab:a8:0c:89:b5:56:dc:23:29:14:19:02:24:19:c0:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=022A43659AD22D768D09981B94C1A7A7BFC1AF03
        Validity
            Not Before: Jul  3 10:24:40 2023 GMT
            Not After : Jul  1 10:29:40 2024 GMT
        Subject: CN=C85F442C394EEEF10A322BC6E97798F3BD949393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:28:4e:46:4d:63:15:3a:65:3a:66:86:8d:61:
                    1a:2b:7c:63:f8:49:10:c5:66:f6:6e:c2:b9:53:38:
                    d4:ad:f6:29:b6:79:46:bd:68:4c:8c:64:5a:f0:b4:
                    de:70:92:d3:5b:a2:81:30:3b:cc:de:47:c8:a5:3e:
                    e8:e5:31:2e:da:e7:00:82:b4:98:45:37:28:f1:68:
                    f3:10:a3:a8:cd:f7:73:ba:c9:2d:fe:5d:68:09:4c:
                    cd:39:84:ea:c2:8f:20:7f:a5:7e:56:d4:78:c0:6a:
                    78:de:7f:8e:2b:24:f2:32:a9:15:b1:15:37:e5:16:
                    84:ba:9c:fe:9b:53:d1:c4:33:83:73:8b:82:0b:84:
                    62:a7:ea:cd:e2:eb:82:65:33:3b:18:e0:a6:a8:12:
                    8a:6c:d6:cb:54:e1:9e:7f:c3:d8:44:41:6e:92:4c:
                    1b:4a:12:73:a8:6d:84:db:6c:d4:a1:b0:18:ba:20:
                    4b:3e:95:ea:fd:75:40:03:a3:3a:26:0d:15:6c:ec:
                    2b:92:4e:11:45:99:fe:23:65:56:09:73:04:09:35:
                    5b:9c:0b:ce:25:37:70:7c:4b:eb:0f:dd:f2:5c:9c:
                    5e:6d:98:39:c4:de:b5:f5:7e:70:40:06:29:34:98:
                    ec:c0:c7:e4:1b:bd:62:f7:ce:80:14:7e:a6:c1:bb:
                    af:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:5F:44:2C:39:4E:EE:F1:0A:32:2B:C6:E9:77:98:F3:BD:94:93:93
            X509v3 Authority Key Identifier:
                keyid:02:2A:43:65:9A:D2:2D:76:8D:09:98:1B:94:C1:A7:A7:BF:C1:AF:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/022A43659AD22D768D09981B94C1A7A7BFC1AF03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/022A43659AD22D768D09981B94C1A7A7BFC1AF03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3234372e302f32342d3234203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:d0:83:44:b6:54:e2:6c:a8:ba:a7:ff:84:bf:f8:1f:28:a6:
         79:38:51:df:5b:b8:86:dd:bf:b6:bf:f1:cd:99:19:34:f1:f1:
         83:0e:cc:e2:36:a5:23:34:cd:c4:bd:a3:a1:41:7d:e9:93:bf:
         37:b8:91:9a:e4:e5:83:c4:82:d7:75:18:b3:30:5b:e3:eb:d2:
         3e:af:c2:8f:53:e7:3d:13:a2:04:9c:84:49:14:92:32:c1:b9:
         8b:34:1e:80:dd:85:d3:d1:47:32:59:47:f9:70:22:15:7f:2a:
         61:af:88:a0:c6:21:45:06:31:3f:22:53:1c:5c:33:5b:d9:71:
         d6:1d:de:33:7a:18:92:29:13:2f:41:fe:6a:f1:41:d6:4e:a6:
         e8:7c:e1:f8:d5:84:4e:f9:9d:47:5e:a4:d0:66:b4:42:fe:9c:
         8e:95:f3:d0:e0:cd:18:ad:59:9a:48:f6:c1:b7:f0:50:ca:d2:
         d0:d3:5c:27:5b:5b:70:d1:a4:e4:0b:c5:28:ee:9e:98:5c:60:
         22:45:e0:e9:cc:94:ec:30:e5:82:0c:4a:b2:fc:be:cb:b2:b1:
         39:4d:7a:44:a9:4a:bb:fa:7b:de:96:3e:1d:29:49:7e:43:da:
         fe:6f:e4:2a:eb:a1:33:09:9d:38:2d:e1:a7:19:08:ae:64:01:
         ef:62:c2:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org