Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3234382e302f32342d3234203d3e203238353934.roa
File:                     3230302e3231382e3234382e302f32342d3234203d3e203238353934.roa (raw, json)
Hash identifier:          FodWXxa6dVwPYjxbOK3i7xwJ1KXje1NwINTtR2zP038=
Subject key identifier:   23:3E:A5:9B:30:32:A7:0E:CC:38:4B:BA:C0:5C:40:01:47:8A:C8:FD
Certificate issuer:       /CN=022A43659AD22D768D09981B94C1A7A7BFC1AF03
Certificate serial:       0B3CDC3C2AD9DD945D9EFF348BB4EE5E0193B9AB
Authority key identifier: 02:2A:43:65:9A:D2:2D:76:8D:09:98:1B:94:C1:A7:A7:BF:C1:AF:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/022A43659AD22D768D09981B94C1A7A7BFC1AF03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3234382e302f32342d3234203d3e203238353934.roa
Signing time:             Mon 03 Jul 2023 10:29:35 +0000
ROA not before:           Mon 03 Jul 2023 10:24:35 +0000
ROA not after:            Mon 01 Jul 2024 10:29:35 +0000
asID:                     28594
IP address blocks:        200.218.248.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:3c:dc:3c:2a:d9:dd:94:5d:9e:ff:34:8b:b4:ee:5e:01:93:b9:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=022A43659AD22D768D09981B94C1A7A7BFC1AF03
        Validity
            Not Before: Jul  3 10:24:35 2023 GMT
            Not After : Jul  1 10:29:35 2024 GMT
        Subject: CN=233EA59B3032A70ECC384BBAC05C4001478AC8FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:99:f4:7a:2f:7e:64:8b:b0:33:9d:f7:82:d2:
                    5d:52:e0:b5:ac:c0:c8:85:7e:dd:55:e1:33:d8:8c:
                    f9:7f:5a:56:dc:d9:35:ae:b3:1c:c2:37:95:c8:a6:
                    0b:32:c0:3c:57:42:86:df:ce:08:1b:79:9b:13:30:
                    0f:e4:fc:d2:61:70:ad:63:45:24:29:d8:05:6d:5c:
                    01:65:13:99:ba:1e:83:d9:26:d0:15:de:ba:b5:ec:
                    7d:eb:d4:ec:f7:9e:3a:72:8e:14:76:fd:84:49:6b:
                    6f:32:c3:94:36:2b:2a:e5:15:49:03:de:80:94:1d:
                    c8:c7:51:6c:fd:4d:60:55:c2:8d:03:c4:19:35:c3:
                    58:24:fc:07:c0:82:b8:9c:93:a6:fa:ad:03:dd:fa:
                    ee:1e:57:3e:7f:d9:e2:b6:25:f7:69:6b:11:23:01:
                    4d:b8:19:0e:58:d1:5b:72:50:b0:7c:2a:9d:81:48:
                    3e:9f:d2:bc:d7:f2:38:c5:ce:01:b7:f3:3d:97:18:
                    65:d1:3d:38:a9:a4:9a:9f:63:3f:3f:a1:04:89:b5:
                    51:ad:ee:6e:f8:10:18:f6:1b:1d:54:53:1c:ce:d6:
                    4d:66:14:9f:a2:9d:d5:3f:19:a4:11:37:3f:2c:6d:
                    56:45:7e:84:16:a6:ce:0d:42:a9:a0:d3:86:0b:24:
                    6e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:3E:A5:9B:30:32:A7:0E:CC:38:4B:BA:C0:5C:40:01:47:8A:C8:FD
            X509v3 Authority Key Identifier:
                keyid:02:2A:43:65:9A:D2:2D:76:8D:09:98:1B:94:C1:A7:A7:BF:C1:AF:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/022A43659AD22D768D09981B94C1A7A7BFC1AF03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/022A43659AD22D768D09981B94C1A7A7BFC1AF03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3234382e302f32342d3234203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         34:95:cb:40:57:cf:c5:61:e1:b1:f9:79:30:63:63:13:66:89:
         75:6e:9f:ca:9b:1b:a4:28:e2:0d:69:86:b4:14:3e:20:ef:68:
         4d:af:a3:97:38:ca:95:95:3c:cb:5f:70:9d:07:0a:98:e3:4a:
         e3:e4:22:ea:6b:33:98:8c:e0:0c:98:d3:ad:52:91:0e:5a:51:
         ec:1c:e3:9b:c5:88:0e:3b:5d:28:81:d4:b5:1b:81:c4:b1:b2:
         eb:00:77:fe:8a:ee:72:66:7b:fd:9e:1f:c3:ee:1e:66:f6:68:
         93:09:89:11:47:37:36:0b:9c:02:50:ac:23:67:85:ae:2e:9d:
         8e:eb:32:b2:ec:cd:14:bb:03:aa:53:3f:f5:e0:1e:65:aa:61:
         67:41:66:1f:46:fb:96:de:93:ca:13:08:e3:d1:49:3d:a4:88:
         a5:93:63:a6:69:52:1c:93:ae:a8:a0:88:13:83:6a:01:1b:8a:
         69:e6:d7:2f:0f:f3:f3:59:57:ea:0f:2c:69:48:9d:69:7c:7c:
         1e:4b:57:69:e5:87:5d:f7:60:57:27:b9:6d:0b:17:02:86:4d:
         40:b4:b3:e3:99:2a:a3:73:7f:05:e8:4d:b8:c5:2a:7e:59:4f:
         1e:36:e7:17:54:79:bd:fa:59:d6:78:ab:f8:97:e0:07:29:11:
         be:dd:92:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org