Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3235322e302f32332d3233203d3e203238353934.roa
File:                     3230302e3231382e3235322e302f32332d3233203d3e203238353934.roa (raw, json)
Hash identifier:          rs1vCcwpJ2DienroRdE++1nOgdseZ59YjcbjLjSndFg=
Subject key identifier:   F6:65:6F:84:0F:CC:0A:25:BA:DB:2F:9D:DB:ED:3B:52:76:20:85:25
Certificate issuer:       /CN=022A43659AD22D768D09981B94C1A7A7BFC1AF03
Certificate serial:       6CF118A27F5C7AE5CDE238E29AF351C64BFE9C7E
Authority key identifier: 02:2A:43:65:9A:D2:2D:76:8D:09:98:1B:94:C1:A7:A7:BF:C1:AF:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/022A43659AD22D768D09981B94C1A7A7BFC1AF03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3235322e302f32332d3233203d3e203238353934.roa
Signing time:             Mon 03 Jul 2023 10:29:37 +0000
ROA not before:           Mon 03 Jul 2023 10:24:37 +0000
ROA not after:            Mon 01 Jul 2024 10:29:37 +0000
asID:                     28594
IP address blocks:        200.218.252.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:f1:18:a2:7f:5c:7a:e5:cd:e2:38:e2:9a:f3:51:c6:4b:fe:9c:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=022A43659AD22D768D09981B94C1A7A7BFC1AF03
        Validity
            Not Before: Jul  3 10:24:37 2023 GMT
            Not After : Jul  1 10:29:37 2024 GMT
        Subject: CN=F6656F840FCC0A25BADB2F9DDBED3B5276208525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:d4:91:39:69:d3:fa:f9:68:41:b1:00:62:9e:
                    6e:e9:47:b1:16:27:f3:2e:d9:67:38:76:e7:c3:cf:
                    2d:03:b4:5d:da:0e:d4:35:79:29:fa:cc:f4:15:a2:
                    ca:e8:b6:ac:24:fb:e0:e6:e4:3e:ca:a6:92:d1:07:
                    45:b3:73:cf:2a:72:68:12:75:11:92:12:41:44:12:
                    d1:8a:48:cb:60:e7:e4:41:10:4d:e9:fd:c2:bb:4e:
                    e2:2f:69:7d:7c:4a:8d:6e:ee:8c:74:a9:5f:f0:eb:
                    f5:ab:18:ac:e5:db:36:52:cc:8c:91:d3:a5:a2:73:
                    71:6d:b8:6f:26:87:de:d6:b3:25:79:94:25:e3:e6:
                    1a:68:95:89:6d:9f:8c:2f:ff:b9:74:81:de:02:88:
                    7d:4d:2e:17:7b:89:67:93:48:2c:1b:a0:32:db:8d:
                    06:66:7f:75:5a:52:97:44:27:3d:1e:1b:d7:52:73:
                    08:6a:74:0d:a0:12:39:4c:1f:3b:55:3a:2e:b0:e3:
                    33:8c:dc:af:33:bc:03:e6:c7:6e:db:ba:43:1c:08:
                    1b:96:9d:8e:84:83:70:5b:a5:39:bd:de:5e:24:4f:
                    7e:d5:3e:70:96:18:6d:ad:58:0c:b9:20:a3:c2:01:
                    b3:8f:41:b8:81:cd:ed:55:bd:96:f3:da:01:11:17:
                    82:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:65:6F:84:0F:CC:0A:25:BA:DB:2F:9D:DB:ED:3B:52:76:20:85:25
            X509v3 Authority Key Identifier:
                keyid:02:2A:43:65:9A:D2:2D:76:8D:09:98:1B:94:C1:A7:A7:BF:C1:AF:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/022A43659AD22D768D09981B94C1A7A7BFC1AF03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/022A43659AD22D768D09981B94C1A7A7BFC1AF03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/0/3230302e3231382e3235322e302f32332d3233203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:9a:c2:45:77:72:3a:68:b5:a4:68:d3:f9:b4:e1:e3:1b:68:
         ec:b5:b5:01:93:b6:4e:1e:8b:9d:d5:fd:14:69:8d:0e:73:05:
         b1:bf:6c:90:bf:db:25:7a:8f:e5:c3:3e:78:a4:b4:de:ff:de:
         6d:18:86:c6:75:3e:52:58:3b:e0:c7:e2:31:4f:20:4c:dc:b8:
         d9:4d:b7:a5:4c:fa:e1:f8:22:4b:49:28:45:e8:4d:05:0d:f2:
         7e:e9:09:18:8d:39:4a:41:1b:6c:4c:fd:2d:a7:7e:49:03:9e:
         f4:99:6e:97:71:4c:b5:49:20:55:39:f3:09:bf:f0:ed:27:ae:
         df:b4:81:d8:82:af:c8:aa:b0:5b:1b:b5:0e:60:81:c7:9c:e5:
         d3:80:f0:1b:7b:9b:8f:6b:d7:cd:5a:f9:b7:12:81:07:5b:54:
         e0:d3:c2:f4:43:7c:7f:65:99:a8:e5:4b:67:e9:4e:18:2a:2a:
         87:34:ba:20:f7:b2:91:46:74:1b:aa:2b:e8:0b:b4:07:b3:7e:
         b7:ba:10:7c:30:91:10:99:9e:9c:9d:7a:d1:cd:a6:35:f6:6e:
         b6:41:52:70:2b:3d:34:53:2a:a9:01:22:5d:97:1d:64:42:24:
         a2:e5:37:60:59:62:43:15:b2:40:bc:8a:e7:95:36:3b:32:8c:
         ca:dd:a8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org