Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3234322e302f32332d3233203d3e203238353934.roa
File:                     3230302e3231382e3234322e302f32332d3233203d3e203238353934.roa (raw, json)
Hash identifier:          cwts2KKCpzN+hQnQ0nfqVHvBIrTEsufQ0L/gYO2GXgo=
Subject key identifier:   26:40:9F:10:30:8E:CE:FC:2A:07:8A:51:A6:B0:9D:2D:16:08:9B:2A
Certificate issuer:       /CN=FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54
Certificate serial:       490DBAD9B2F567D3A471B9A5D95599A8945E0A17
Authority key identifier: FA:E4:EF:6F:4B:DB:EA:3F:80:BA:4A:0C:9E:E6:C6:D0:EE:C8:EB:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3234322e302f32332d3233203d3e203238353934.roa
Signing time:             Wed 20 Sep 2023 13:22:44 +0000
ROA not before:           Wed 20 Sep 2023 13:17:44 +0000
ROA not after:            Wed 18 Sep 2024 13:22:44 +0000
asID:                     28594
IP address blocks:        200.218.242.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:0d:ba:d9:b2:f5:67:d3:a4:71:b9:a5:d9:55:99:a8:94:5e:0a:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54
        Validity
            Not Before: Sep 20 13:17:44 2023 GMT
            Not After : Sep 18 13:22:44 2024 GMT
        Subject: CN=26409F10308ECEFC2A078A51A6B09D2D16089B2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:59:c1:9c:34:73:dc:36:da:f0:cb:ff:7e:7d:
                    70:98:3b:5f:95:e4:e1:9c:91:9a:bd:ee:61:0c:90:
                    da:39:f9:54:e5:19:81:e7:d0:0f:39:25:11:ef:34:
                    81:32:03:f4:f0:8a:81:83:4f:07:c0:03:23:1f:a2:
                    66:12:27:99:f7:58:a6:3d:41:aa:e8:26:01:bc:5a:
                    a9:d3:de:f3:b6:81:e1:6a:79:13:55:90:74:33:00:
                    d0:02:b5:97:32:bb:0b:5f:af:be:ec:65:59:03:96:
                    73:00:98:ad:ab:e8:27:ac:5d:7b:d6:41:47:5c:b7:
                    4a:28:22:e1:25:a0:f7:c0:98:24:33:10:e0:83:7b:
                    b9:3b:41:a2:8e:bd:b4:43:eb:67:02:24:d9:7f:66:
                    79:42:34:a1:49:41:1a:e2:fb:5e:cd:0f:31:3e:db:
                    65:7a:35:f1:b8:98:34:0c:e8:75:0f:6e:2e:f9:f9:
                    b2:70:2d:bd:65:af:3e:a6:59:9b:28:f0:32:95:48:
                    88:26:da:f1:29:98:e0:3f:b8:4b:d6:6b:cc:ef:72:
                    19:fc:8c:d3:3a:81:c2:5d:b9:5a:46:9b:9c:81:36:
                    f3:a1:10:d7:94:ac:01:cf:59:3b:a8:39:67:17:ca:
                    15:4e:f8:4f:f3:61:04:a0:25:35:4a:e7:b8:8e:29:
                    71:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:40:9F:10:30:8E:CE:FC:2A:07:8A:51:A6:B0:9D:2D:16:08:9B:2A
            X509v3 Authority Key Identifier:
                keyid:FA:E4:EF:6F:4B:DB:EA:3F:80:BA:4A:0C:9E:E6:C6:D0:EE:C8:EB:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3234322e302f32332d3233203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.242.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:f9:ae:e1:a9:0d:73:6f:de:08:b4:af:e7:9c:4b:52:32:3b:
         ec:13:f4:7c:78:73:e1:9a:de:82:a4:99:6a:58:64:46:64:d9:
         e1:a2:43:01:56:8c:65:93:28:a6:df:63:be:37:81:7d:c2:10:
         07:f9:a0:dd:54:d3:11:44:38:2d:9e:eb:e0:5e:54:b8:c2:49:
         41:e8:6e:02:d0:38:0c:56:5d:c6:52:6f:41:dc:2e:26:ae:bf:
         b2:bb:31:7f:63:43:f1:c9:dd:f0:ab:d7:10:05:e8:5a:51:76:
         5c:0f:0c:6b:7f:e6:cb:21:47:78:ee:c2:46:92:a0:c1:8a:12:
         64:93:f5:b6:97:57:29:10:5f:23:0a:f3:53:57:61:13:7f:9c:
         ea:6d:84:d6:a6:5e:92:03:34:c9:8e:27:cc:8f:07:b5:52:dc:
         49:6e:c6:0c:fd:9b:65:c3:46:81:04:6e:46:60:c0:3f:4e:5a:
         74:c2:cb:59:f1:42:b6:a0:21:c3:a7:60:f2:d6:67:ed:c7:74:
         bc:3f:2d:56:31:63:68:24:d6:bc:22:8a:0e:d9:a3:11:57:04:
         44:85:b6:36:5b:bf:0f:22:a7:10:f1:2c:5f:19:a7:36:a4:0d:
         53:ea:52:de:2b:da:97:00:1c:52:c9:06:fb:ab:9b:f2:0f:4c:
         da:88:a0:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org