Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3234382e302f32312d3231203d3e203238353934.roa
File:                     3230302e3231382e3234382e302f32312d3231203d3e203238353934.roa (raw, json)
Hash identifier:          +sXl2e2pWVmmbYQhMg1SDMOE19gV3ArvourkOVSvwNQ=
Subject key identifier:   EA:F2:15:60:35:F3:C9:9B:83:EA:59:08:39:E5:10:AE:EE:F7:93:81
Certificate issuer:       /CN=022A43659AD22D768D09981B94C1A7A7BFC1AF03
Certificate serial:       3151332AB43E8DB725207A081CA7D18FFCAEEC1C
Authority key identifier: 02:2A:43:65:9A:D2:2D:76:8D:09:98:1B:94:C1:A7:A7:BF:C1:AF:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/022A43659AD22D768D09981B94C1A7A7BFC1AF03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3234382e302f32312d3231203d3e203238353934.roa
Signing time:             Mon 03 Jul 2023 10:29:35 +0000
ROA not before:           Mon 03 Jul 2023 10:24:35 +0000
ROA not after:            Mon 01 Jul 2024 10:29:35 +0000
asID:                     28594
IP address blocks:        200.218.248.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:51:33:2a:b4:3e:8d:b7:25:20:7a:08:1c:a7:d1:8f:fc:ae:ec:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=022A43659AD22D768D09981B94C1A7A7BFC1AF03
        Validity
            Not Before: Jul  3 10:24:35 2023 GMT
            Not After : Jul  1 10:29:35 2024 GMT
        Subject: CN=EAF2156035F3C99B83EA590839E510AEEEF79381
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ad:da:f4:ad:e8:cf:1e:66:0e:3b:15:6f:49:
                    ee:7a:9b:6e:90:ec:97:0f:46:3b:06:fd:57:59:23:
                    2d:29:ee:c5:f8:4e:de:49:99:f9:ed:bf:63:e6:20:
                    bf:ee:87:8e:22:e1:53:73:ed:11:57:15:eb:18:4c:
                    19:f3:1f:39:78:b9:c9:18:15:e2:39:c9:bb:52:0d:
                    4f:ac:ce:7a:27:07:36:4e:f4:1b:20:73:fd:87:81:
                    8a:61:3a:15:bd:82:98:df:0a:f6:86:63:26:48:08:
                    f9:83:dd:66:22:e8:f6:09:2f:fe:6c:7a:4b:b3:15:
                    76:48:7d:51:72:57:6b:8c:cf:07:e3:3c:61:0b:a4:
                    b5:15:83:52:07:e7:f3:eb:c2:db:ca:aa:75:31:22:
                    00:2f:bc:d6:36:38:8b:32:83:72:2b:35:cb:ad:13:
                    f8:56:e6:b4:c1:07:95:49:d0:48:6b:20:e8:69:3d:
                    01:07:cf:ed:72:18:85:93:c7:73:94:2c:fd:cd:b9:
                    84:03:c7:6f:0b:35:e9:ce:09:61:d7:85:66:e9:51:
                    09:8d:21:48:41:3f:47:44:73:eb:c5:d9:77:21:c1:
                    11:ae:ed:45:67:94:55:ec:8d:8f:0b:f8:5d:09:5a:
                    f2:64:cd:ad:9f:36:3e:66:42:61:ee:aa:af:12:4b:
                    c8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F2:15:60:35:F3:C9:9B:83:EA:59:08:39:E5:10:AE:EE:F7:93:81
            X509v3 Authority Key Identifier:
                keyid:02:2A:43:65:9A:D2:2D:76:8D:09:98:1B:94:C1:A7:A7:BF:C1:AF:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/022A43659AD22D768D09981B94C1A7A7BFC1AF03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/022A43659AD22D768D09981B94C1A7A7BFC1AF03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3234382e302f32312d3231203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         03:23:b0:bc:85:7f:48:c1:f0:67:c0:ce:85:9b:b4:59:c0:c3:
         6e:ce:b9:da:bd:09:26:0e:7d:22:3d:f1:c7:9f:79:ba:ab:7c:
         72:c8:14:e8:35:74:2d:e2:eb:76:a5:15:9b:1f:01:3d:a2:14:
         a0:36:65:c4:75:df:a1:22:86:9f:b0:b8:be:9b:5a:ce:e1:dc:
         1b:91:17:0d:5c:1d:7b:77:3f:67:ee:7f:dd:6f:60:22:08:72:
         75:aa:89:a0:40:6f:0b:c0:a5:77:c3:35:1c:52:9d:8a:e0:68:
         45:ca:f8:30:46:3e:f5:79:2c:c0:91:7d:63:b3:32:22:90:ea:
         e6:49:e7:11:c7:52:47:2e:65:d6:42:f4:f1:88:d6:48:b5:e7:
         dc:74:46:63:fc:95:f6:a9:f1:a4:a9:9f:73:a7:16:09:3b:97:
         6e:74:9f:b3:eb:bd:8b:ea:09:45:df:6f:1c:bb:08:ea:b3:c5:
         61:5b:84:4c:77:89:7c:72:10:f7:2b:51:0f:65:59:dc:6a:ba:
         a3:ca:47:b8:f2:40:f0:a2:7e:4a:f9:75:62:69:ca:6d:f1:e6:
         cd:7a:c8:fe:14:ce:60:88:f9:13:98:32:3b:f1:8b:8b:b0:aa:
         4f:94:67:50:4c:40:26:23:30:a0:0d:27:ee:3c:de:ce:76:be:
         49:57:93:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org