Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3234302e302f32342d3234203d3e203238353934.roa
File:                     3230302e3231382e3234302e302f32342d3234203d3e203238353934.roa (raw, json)
Hash identifier:          fL8xf/nVZkhZwI44cUUO4QHEExnmEsl3wZtHgDW/AX4=
Subject key identifier:   E5:7C:0C:04:AE:AF:08:EE:D4:F3:D2:7C:D1:98:19:5A:6D:B3:D8:80
Certificate issuer:       /CN=FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54
Certificate serial:       4DDB72845EC8A5322EBBBE549E970B9A79BAB759
Authority key identifier: FA:E4:EF:6F:4B:DB:EA:3F:80:BA:4A:0C:9E:E6:C6:D0:EE:C8:EB:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3234302e302f32342d3234203d3e203238353934.roa
Signing time:             Wed 20 Sep 2023 13:22:45 +0000
ROA not before:           Wed 20 Sep 2023 13:17:45 +0000
ROA not after:            Wed 18 Sep 2024 13:22:45 +0000
asID:                     28594
IP address blocks:        200.218.240.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:db:72:84:5e:c8:a5:32:2e:bb:be:54:9e:97:0b:9a:79:ba:b7:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54
        Validity
            Not Before: Sep 20 13:17:45 2023 GMT
            Not After : Sep 18 13:22:45 2024 GMT
        Subject: CN=E57C0C04AEAF08EED4F3D27CD198195A6DB3D880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b1:d7:01:5a:90:d3:05:dc:5b:c3:57:d5:46:
                    1e:92:d7:99:d4:f0:63:32:de:9e:1f:10:aa:c6:e2:
                    1f:86:3d:c4:b5:36:af:64:1e:d6:47:27:29:36:3b:
                    41:60:e6:2e:17:db:24:4e:87:bd:a7:45:cc:1a:12:
                    63:9c:d4:3b:2d:7e:32:1b:07:a5:e7:9e:4e:59:0a:
                    2b:e1:fe:b3:11:33:c2:44:f0:50:11:39:f3:1d:7e:
                    c5:74:e5:73:a7:78:37:69:b7:f4:12:69:ce:b8:15:
                    77:6c:39:00:43:3d:98:de:ca:14:14:f2:29:e5:db:
                    75:20:c5:3b:0b:6d:7a:28:f8:d8:58:f4:de:44:4e:
                    2f:0d:e9:11:4c:6d:55:f3:07:ae:8e:5a:48:ad:ad:
                    da:2b:d7:56:24:ef:8f:92:ae:e7:fc:1e:34:bb:90:
                    0b:52:14:10:fc:ea:9e:39:f0:83:82:d6:6c:58:46:
                    96:40:32:25:35:a0:79:99:41:60:a7:b9:f6:a3:39:
                    f0:09:55:64:b6:74:0f:23:27:11:d4:f3:f9:ab:4f:
                    29:af:22:dc:76:78:32:da:3d:62:73:c1:2f:80:a1:
                    c0:b8:95:25:57:3d:a8:e6:25:0b:1f:88:bd:46:58:
                    cf:96:35:d4:4b:de:1d:9e:42:f0:42:42:6e:da:3e:
                    eb:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:7C:0C:04:AE:AF:08:EE:D4:F3:D2:7C:D1:98:19:5A:6D:B3:D8:80
            X509v3 Authority Key Identifier:
                keyid:FA:E4:EF:6F:4B:DB:EA:3F:80:BA:4A:0C:9E:E6:C6:D0:EE:C8:EB:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3234302e302f32342d3234203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:bd:e2:03:99:54:c5:c4:5b:fc:2e:31:f5:01:7f:29:bf:7f:
         66:fc:7c:44:5d:e3:c3:7c:87:cd:bb:5a:50:a6:c2:66:d1:5b:
         01:83:56:90:61:39:58:1a:8f:85:56:21:dd:0c:53:3f:da:07:
         e1:0c:84:fb:0d:0f:1c:e8:06:d1:5e:0e:a5:fa:87:13:44:f3:
         bc:2c:7b:e8:94:61:f7:c8:a0:d1:e7:6a:67:f5:f6:42:55:42:
         1c:8d:35:57:be:a6:99:5b:97:c4:db:5c:90:8d:84:bc:fb:07:
         ab:ba:b0:fe:b5:d9:43:9f:72:b6:5f:f5:47:55:10:16:4e:32:
         5c:a0:e2:60:8e:c7:c2:9b:d7:9d:2d:7c:c3:06:c2:90:91:bc:
         c4:fb:3a:71:e7:db:fa:40:1d:71:ca:2a:00:c9:12:25:1b:fa:
         d2:9c:9f:1b:6e:87:49:ae:43:e8:0a:71:84:b5:27:7a:1c:f1:
         0b:45:33:f9:0e:8d:d4:4b:b3:6a:6d:64:6d:66:ec:92:11:f0:
         cb:e8:b8:42:11:88:b3:31:86:86:fd:bb:02:c9:c9:c7:1b:d0:
         7e:0d:0e:c0:50:cf:05:d6:0b:e3:38:6f:7a:46:1d:78:30:86:
         73:a3:fe:bf:71:ed:b1:a3:8d:86:ce:ab:32:4a:7e:1a:58:9b:
         87:e2:15:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org