Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3234342e302f32322d3232203d3e203238353934.roa
File:                     3230302e3231382e3234342e302f32322d3232203d3e203238353934.roa (raw, json)
Hash identifier:          6oU/yydiHwMAJdKBx5HsuVQeWyWk6/Zm70/s0fvxDUQ=
Subject key identifier:   9F:B1:56:40:17:37:31:33:35:3B:32:31:1D:5B:57:01:EF:91:0C:79
Certificate issuer:       /CN=FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54
Certificate serial:       32560EE151084F11ED699C9D67711F080561E80A
Authority key identifier: FA:E4:EF:6F:4B:DB:EA:3F:80:BA:4A:0C:9E:E6:C6:D0:EE:C8:EB:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3234342e302f32322d3232203d3e203238353934.roa
Signing time:             Wed 20 Sep 2023 13:22:45 +0000
ROA not before:           Wed 20 Sep 2023 13:17:45 +0000
ROA not after:            Wed 18 Sep 2024 13:22:45 +0000
asID:                     28594
IP address blocks:        200.218.244.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:56:0e:e1:51:08:4f:11:ed:69:9c:9d:67:71:1f:08:05:61:e8:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54
        Validity
            Not Before: Sep 20 13:17:45 2023 GMT
            Not After : Sep 18 13:22:45 2024 GMT
        Subject: CN=9FB1564017373133353B32311D5B5701EF910C79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7b:18:88:39:46:51:6f:a6:cf:49:8d:c2:ef:
                    0a:8d:ca:ae:4a:96:da:47:2d:12:a8:a5:64:dd:8f:
                    03:1b:a9:24:af:60:fe:86:01:28:0d:a0:1b:75:d9:
                    0c:50:18:11:8c:16:43:1b:29:f4:53:28:94:40:4c:
                    9b:67:26:be:32:ef:63:fe:5f:ed:86:11:bd:04:36:
                    e7:e3:61:9f:88:9c:bd:58:32:6a:dc:72:5c:ff:3a:
                    3f:64:ae:59:2c:ce:be:d0:9e:fa:a1:cd:7e:c3:ab:
                    60:f7:c5:0c:64:45:57:4f:1e:3a:d2:05:cf:dc:00:
                    46:f5:54:20:c8:7f:ed:96:15:b4:d8:21:07:13:f9:
                    d3:39:89:d0:ec:d5:86:7a:d2:0e:21:3c:d9:26:3a:
                    cf:2a:04:02:4e:0e:72:66:49:91:ff:81:8f:37:99:
                    11:8f:6d:11:15:18:e7:0f:c8:b4:3b:8b:0c:75:e3:
                    a2:02:31:33:36:ce:63:b1:1c:09:66:9f:98:ca:b3:
                    b2:98:be:68:8c:e8:51:c8:82:d4:d7:71:55:e9:67:
                    7b:5d:8e:ca:a8:42:22:42:4f:9b:2e:9c:fc:7d:64:
                    e9:6d:f5:f7:04:86:ec:c6:ca:4a:ab:40:bb:04:6f:
                    b8:5b:87:1a:c9:f6:52:68:be:24:01:30:90:20:eb:
                    fa:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B1:56:40:17:37:31:33:35:3B:32:31:1D:5B:57:01:EF:91:0C:79
            X509v3 Authority Key Identifier:
                keyid:FA:E4:EF:6F:4B:DB:EA:3F:80:BA:4A:0C:9E:E6:C6:D0:EE:C8:EB:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3234342e302f32322d3232203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.244.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:dc:9d:69:64:76:8a:dc:24:ec:5b:c4:d9:c8:72:08:81:bb:
         7b:ba:98:74:3e:5f:6f:a3:7c:b1:d9:9c:08:e8:91:aa:56:24:
         dc:c5:a9:9b:c5:9a:53:c6:cb:e8:7e:81:de:ea:06:66:80:46:
         c8:4f:77:db:fe:a2:1c:98:d1:dd:57:4d:64:e5:e9:e1:6e:d0:
         79:9f:62:42:2a:74:61:8e:54:4c:1d:b3:8f:80:92:ba:1f:cb:
         a5:6e:62:b5:51:c9:d3:71:35:a6:02:89:3a:a5:89:16:ad:68:
         ce:49:97:46:ea:a9:7b:a7:5e:88:05:2a:44:15:f6:47:aa:98:
         a2:23:5a:0f:5d:6c:56:bb:cb:e6:2c:3e:02:60:4c:52:52:69:
         94:04:01:ae:93:f1:63:e8:7b:b7:f9:a1:a8:05:dd:67:53:a5:
         bd:64:92:e0:39:cd:94:56:30:d7:6e:29:93:d7:ee:8e:c7:5b:
         d0:48:75:92:38:11:df:a5:d0:d1:14:92:b4:0e:e9:d9:c2:e1:
         1e:ce:91:1a:a5:57:6b:e4:1c:b7:d2:b8:a8:6b:cd:41:de:8a:
         55:19:f3:99:c4:b0:ab:8a:7a:e7:77:0c:61:15:95:14:3e:6f:
         62:3c:c2:ad:69:56:1f:bb:13:17:95:09:87:fc:3e:08:8b:c3:
         54:a2:df:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org