Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3234302e302f32302d3230203d3e203238353934.roa
File:                     3230302e3231382e3234302e302f32302d3230203d3e203238353934.roa (raw, json)
Hash identifier:          KiD/CSHRwqVnTMRCYn49V1KRIFO0Gy/kxSZ51dy8w6k=
Subject key identifier:   EE:09:FC:8E:5F:BB:F0:FD:54:CF:6D:3C:C7:FC:BD:E7:76:43:5C:43
Certificate issuer:       /CN=FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54
Certificate serial:       0B9BED48D2B82460656646B3EBBC3F527CDB7D05
Authority key identifier: FA:E4:EF:6F:4B:DB:EA:3F:80:BA:4A:0C:9E:E6:C6:D0:EE:C8:EB:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3234302e302f32302d3230203d3e203238353934.roa
Signing time:             Wed 20 Sep 2023 13:22:46 +0000
ROA not before:           Wed 20 Sep 2023 13:17:46 +0000
ROA not after:            Wed 18 Sep 2024 13:22:46 +0000
asID:                     28594
IP address blocks:        200.218.240.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:9b:ed:48:d2:b8:24:60:65:66:46:b3:eb:bc:3f:52:7c:db:7d:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54
        Validity
            Not Before: Sep 20 13:17:46 2023 GMT
            Not After : Sep 18 13:22:46 2024 GMT
        Subject: CN=EE09FC8E5FBBF0FD54CF6D3CC7FCBDE776435C43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5c:52:e1:a3:41:1a:81:09:9a:92:74:a5:5f:
                    38:a3:1a:d4:b6:81:1f:1a:32:bb:3b:f6:28:e3:42:
                    59:8b:f8:11:cf:6c:e1:de:43:44:3a:43:70:66:26:
                    77:f1:6c:61:89:24:34:ac:dc:3e:29:d4:da:dd:05:
                    0b:6a:38:57:4c:6a:e8:62:35:41:5b:c9:99:05:10:
                    84:38:63:9d:6b:37:93:7a:63:e0:33:db:47:06:24:
                    b6:48:cb:17:48:1c:92:90:47:ba:b2:e1:3d:7a:ff:
                    23:a9:36:56:ca:b8:ac:1f:48:cd:75:f2:d5:1f:ec:
                    ea:2c:9a:34:6c:3b:fc:7b:db:51:22:67:c3:47:10:
                    04:62:28:23:47:be:c3:d0:07:2d:2a:79:6e:5d:4c:
                    65:11:5c:2a:75:45:be:c7:4b:13:83:49:f3:06:44:
                    83:47:c2:f2:f7:9c:b2:59:eb:8c:e8:e9:dd:02:13:
                    a2:7c:fc:6e:9e:19:9b:ee:a1:b4:55:ab:0f:11:73:
                    81:7f:80:d6:80:03:ec:4d:f2:22:54:90:11:25:56:
                    a2:d8:52:95:b4:7f:72:99:0f:99:8d:24:51:9e:1a:
                    91:47:d5:11:2d:27:5a:72:24:e3:7e:dc:1b:99:9e:
                    6c:5c:a9:35:cd:58:66:64:67:96:21:e1:8b:a8:6d:
                    50:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:09:FC:8E:5F:BB:F0:FD:54:CF:6D:3C:C7:FC:BD:E7:76:43:5C:43
            X509v3 Authority Key Identifier:
                keyid:FA:E4:EF:6F:4B:DB:EA:3F:80:BA:4A:0C:9E:E6:C6:D0:EE:C8:EB:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3234302e302f32302d3230203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         64:ee:6a:41:ba:8d:23:b4:97:a6:74:9c:1e:2d:4b:3d:be:96:
         d5:56:e1:60:20:3b:0a:26:fc:4a:1d:60:68:a2:86:1c:ba:38:
         f2:96:3f:93:81:98:80:85:d9:c0:e7:0f:99:49:e3:1f:87:a5:
         7d:58:bc:f1:eb:06:87:43:f0:44:f7:51:c0:d1:90:2d:7e:3a:
         2a:f8:a1:23:70:ff:ce:2a:fa:cc:05:a5:dc:6e:52:aa:cc:c4:
         b6:83:27:f5:7e:65:6e:97:d6:a4:19:2f:f4:ae:b9:a2:50:b2:
         b9:64:8f:92:e7:50:6b:2d:84:8d:ba:ee:2b:a0:8c:29:ba:34:
         85:21:10:ea:d2:46:a7:62:5b:83:c6:12:e5:b3:14:94:f5:1d:
         fe:50:b2:e9:08:e3:2a:1f:cf:8f:12:40:5a:6f:85:14:fc:ab:
         69:77:af:73:cf:13:b0:de:13:b4:4c:52:3c:48:10:bf:63:42:
         25:bd:25:ff:67:b4:6c:ff:c9:19:fd:44:24:79:11:eb:0e:98:
         3b:0b:7d:94:c3:24:72:0b:7f:2e:3c:4d:d1:52:f8:56:fb:7b:
         b2:9a:fd:5a:51:56:70:d8:2d:fd:8d:1b:5f:99:ee:4d:83:5d:
         50:c9:7f:96:a2:29:a1:62:52:79:c4:5e:55:ec:48:ba:fe:a3:
         51:c7:8d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org