Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3235302e302f32342d3234203d3e203238353934.roa
File:                     3230302e3231382e3235302e302f32342d3234203d3e203238353934.roa (raw, json)
Hash identifier:          LwfiPoJvL4InpvJ9oHKs2aOkeVBec+kJSlGO0O7BBFk=
Subject key identifier:   B4:A8:28:1C:B4:3D:A1:D1:87:EC:65:3E:45:F6:22:26:6C:BC:7A:F9
Certificate issuer:       /CN=022A43659AD22D768D09981B94C1A7A7BFC1AF03
Certificate serial:       5533B013E5DC568E1F7394CCC0E939B3C0949383
Authority key identifier: 02:2A:43:65:9A:D2:2D:76:8D:09:98:1B:94:C1:A7:A7:BF:C1:AF:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/022A43659AD22D768D09981B94C1A7A7BFC1AF03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3235302e302f32342d3234203d3e203238353934.roa
Signing time:             Mon 03 Jul 2023 10:29:37 +0000
ROA not before:           Mon 03 Jul 2023 10:24:37 +0000
ROA not after:            Mon 01 Jul 2024 10:29:37 +0000
asID:                     28594
IP address blocks:        200.218.250.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:33:b0:13:e5:dc:56:8e:1f:73:94:cc:c0:e9:39:b3:c0:94:93:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=022A43659AD22D768D09981B94C1A7A7BFC1AF03
        Validity
            Not Before: Jul  3 10:24:37 2023 GMT
            Not After : Jul  1 10:29:37 2024 GMT
        Subject: CN=B4A8281CB43DA1D187EC653E45F622266CBC7AF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:91:29:61:5b:62:22:2a:bb:29:2c:3f:3a:bd:
                    5e:aa:bc:93:04:78:f3:03:1d:8c:4f:bf:9f:ca:65:
                    66:4f:ad:9a:1f:0e:cd:f5:00:5c:81:1d:33:95:6a:
                    f7:77:a2:a4:44:27:bc:2b:30:13:39:46:77:f7:2c:
                    ba:df:09:b2:73:42:0a:c3:a7:ee:f6:5b:ed:41:c3:
                    a8:68:3e:d0:9a:5d:95:99:66:ca:cc:59:20:98:1e:
                    8a:20:30:1a:3e:8b:1e:d9:52:a2:5c:b1:00:43:ac:
                    38:ca:77:05:52:83:71:12:e7:89:19:db:51:5c:a0:
                    fa:51:6a:88:6d:c4:76:12:78:b6:6a:08:cb:32:df:
                    e4:e4:b6:3d:5c:6e:56:85:35:99:ed:16:d4:7d:3a:
                    e7:cd:6f:8b:d6:b4:d6:05:39:0f:57:a4:2b:8d:73:
                    df:87:81:b3:f5:2d:5c:ce:34:51:a2:45:fc:f4:2b:
                    54:8f:9c:67:d8:5d:f0:03:e2:85:7f:fa:92:c9:26:
                    6e:42:a2:bb:ea:58:bf:c5:5c:1e:0c:fc:7f:aa:1c:
                    69:ce:78:15:c6:cc:4c:6b:82:19:ff:0f:98:d4:b1:
                    a7:9a:2f:fc:44:ab:e0:73:a7:6d:b9:c1:dc:36:46:
                    19:9a:b3:88:80:d2:6e:b1:a6:6a:e0:db:e1:9d:de:
                    df:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:A8:28:1C:B4:3D:A1:D1:87:EC:65:3E:45:F6:22:26:6C:BC:7A:F9
            X509v3 Authority Key Identifier:
                keyid:02:2A:43:65:9A:D2:2D:76:8D:09:98:1B:94:C1:A7:A7:BF:C1:AF:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/022A43659AD22D768D09981B94C1A7A7BFC1AF03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/022A43659AD22D768D09981B94C1A7A7BFC1AF03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3235302e302f32342d3234203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:3d:c7:06:de:0b:36:d3:25:2d:81:ca:95:f7:05:70:97:79:
         97:dc:ab:29:d0:4b:03:76:be:9d:f1:9f:d8:ed:3c:93:91:aa:
         5c:86:a4:ac:17:60:ad:4d:9c:67:29:25:62:b0:5c:f8:c6:30:
         68:70:b2:3f:db:b1:56:6b:f3:cb:79:2b:81:7b:ec:d9:50:42:
         e5:64:2a:e7:45:2a:26:e8:b8:e5:89:0d:e2:04:e4:93:fb:63:
         3a:67:9b:32:09:91:bc:d9:bc:3b:bd:15:0a:1b:e9:c9:bb:23:
         4e:46:82:ca:f3:a3:e5:9e:95:85:b3:ec:92:f3:d8:10:57:53:
         78:d4:e1:70:74:1a:50:4f:c3:3b:9d:bf:8a:13:b1:e6:5b:0a:
         9a:45:f3:7b:a5:4c:9f:01:b9:7f:47:a2:19:79:bf:03:4c:37:
         5b:b6:30:05:89:84:c0:3f:ec:7e:86:9b:a4:b7:7d:fd:ad:5e:
         c2:19:7c:63:5c:9b:b9:37:50:eb:ee:88:af:5b:4b:24:a5:05:
         ab:97:7d:61:ff:2d:8a:bc:3a:82:9b:bf:c4:db:cf:05:65:3f:
         af:ec:27:67:15:1d:df:e5:53:25:4d:e0:f8:43:84:b8:44:78:
         7d:05:b2:99:1a:12:81:d4:9c:fe:33:f5:da:7b:09:9d:7d:db:
         aa:84:10:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org