Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3234332e302f32342d3234203d3e203238353934.roa
File:                     3230302e3231382e3234332e302f32342d3234203d3e203238353934.roa (raw, json)
Hash identifier:          f0FVVa9te2UMpsglCQg88CjZ6hD8Tcd2eufT06r87Aw=
Subject key identifier:   4F:E3:3B:C3:CA:DD:7E:9F:2D:87:E9:BA:0D:6C:01:9E:7E:45:36:59
Certificate issuer:       /CN=FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54
Certificate serial:       0BC0FC8EDC11FF229E654CA38499B4AC40A31897
Authority key identifier: FA:E4:EF:6F:4B:DB:EA:3F:80:BA:4A:0C:9E:E6:C6:D0:EE:C8:EB:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3234332e302f32342d3234203d3e203238353934.roa
Signing time:             Wed 20 Sep 2023 13:22:46 +0000
ROA not before:           Wed 20 Sep 2023 13:17:46 +0000
ROA not after:            Wed 18 Sep 2024 13:22:46 +0000
asID:                     28594
IP address blocks:        200.218.243.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:c0:fc:8e:dc:11:ff:22:9e:65:4c:a3:84:99:b4:ac:40:a3:18:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54
        Validity
            Not Before: Sep 20 13:17:46 2023 GMT
            Not After : Sep 18 13:22:46 2024 GMT
        Subject: CN=4FE33BC3CADD7E9F2D87E9BA0D6C019E7E453659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:85:67:d4:a6:d5:06:13:ca:c4:22:b0:23:f3:
                    7d:ff:96:6c:e0:72:47:0a:83:59:12:b1:66:02:a7:
                    71:20:91:d7:3a:c1:10:e6:c3:be:24:3b:af:87:1c:
                    23:30:dc:cf:d9:b3:1e:6c:cc:6a:25:43:1f:36:be:
                    57:03:a1:30:00:03:e9:6e:de:4b:be:a5:20:ed:a6:
                    1a:03:8f:7e:19:22:db:fb:fc:43:23:d7:a4:bf:f4:
                    71:f3:89:e6:6b:0b:f7:c3:8b:9b:c7:a7:4e:14:ce:
                    84:46:e8:54:7b:0f:cf:c6:8a:0d:82:aa:32:75:46:
                    80:95:83:5d:83:5b:5e:60:ef:d8:e4:f4:26:95:e1:
                    b5:59:0b:1f:9e:22:6a:12:bf:8b:37:5b:51:de:50:
                    ea:31:07:c3:72:3d:0f:15:3b:d0:e5:4f:7b:31:5e:
                    3b:3d:bd:d3:cd:81:c8:1e:aa:54:cf:e4:52:af:6a:
                    d5:a5:18:7c:86:c4:32:6a:85:94:6a:28:62:51:6a:
                    5a:89:57:e2:f7:6d:6d:c1:ea:df:d9:3e:e0:89:3a:
                    ae:95:49:b1:a8:46:3d:a0:3d:ec:d6:ee:b3:fa:3c:
                    e4:bc:69:2a:11:3b:c1:6a:0a:91:b6:0e:02:38:df:
                    31:92:8c:9a:65:4e:d6:4f:58:25:fd:07:f4:07:9b:
                    2b:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E3:3B:C3:CA:DD:7E:9F:2D:87:E9:BA:0D:6C:01:9E:7E:45:36:59
            X509v3 Authority Key Identifier:
                keyid:FA:E4:EF:6F:4B:DB:EA:3F:80:BA:4A:0C:9E:E6:C6:D0:EE:C8:EB:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3234332e302f32342d3234203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:b3:cd:09:e1:9d:b8:e6:43:96:e3:42:d6:a7:68:39:b4:c0:
         93:0d:42:c6:0f:e5:89:fa:d8:c8:5a:fc:23:71:f8:0a:06:56:
         93:78:03:50:b0:83:22:b6:41:3c:b4:eb:dd:40:6b:ce:12:69:
         e1:f7:bc:5b:eb:64:ac:65:23:5a:cb:1e:46:f1:80:89:08:43:
         f6:f7:37:ad:79:57:32:c1:24:0e:b0:4d:44:d2:17:ec:6b:44:
         61:3e:2b:db:4d:61:26:31:fa:a8:1e:d9:27:a0:88:97:eb:b1:
         2a:3b:6a:a6:2a:6a:8c:1e:42:6d:45:4f:44:6e:17:a7:fa:41:
         38:13:5b:16:3b:99:76:a6:b2:73:b8:51:b4:80:e8:4e:59:90:
         d8:c5:4b:41:98:d1:ba:49:ff:5e:07:b7:5b:e2:49:bc:de:55:
         00:c6:44:48:72:75:9b:54:89:2f:cf:f0:23:43:72:25:73:33:
         54:bf:78:38:a7:0f:56:39:eb:76:cb:30:b5:82:64:ba:e8:fe:
         d3:bc:df:3c:b8:41:bc:09:d7:25:c0:e2:c4:35:e4:be:8e:ee:
         e2:f0:7b:6f:07:fb:80:4c:93:b2:5b:b2:78:d1:70:8d:08:06:
         f3:4c:87:d3:91:56:15:c1:19:55:68:54:a3:10:c7:a9:90:30:
         1b:82:ec:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:02 2024 by rpki-client on console-ams.rpki-client.org