Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3234382e302f32312d3231203d3e203238353934.roa
File:                     3230302e3231382e3234382e302f32312d3231203d3e203238353934.roa (raw, json)
Hash identifier:          7L3W3L9sH9a8Y5W4oCKagMmtRJRwIbI/g/ogX/TiSGU=
Subject key identifier:   52:D4:B7:64:50:87:45:77:4D:27:D8:A5:7C:F2:BC:EE:DF:E6:70:10
Certificate issuer:       /CN=FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54
Certificate serial:       0A40D72487D301E57174461FE28A5C09DF8E44D9
Authority key identifier: FA:E4:EF:6F:4B:DB:EA:3F:80:BA:4A:0C:9E:E6:C6:D0:EE:C8:EB:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3234382e302f32312d3231203d3e203238353934.roa
Signing time:             Wed 20 Sep 2023 13:22:45 +0000
ROA not before:           Wed 20 Sep 2023 13:17:45 +0000
ROA not after:            Wed 18 Sep 2024 13:22:45 +0000
asID:                     28594
IP address blocks:        200.218.248.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:40:d7:24:87:d3:01:e5:71:74:46:1f:e2:8a:5c:09:df:8e:44:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54
        Validity
            Not Before: Sep 20 13:17:45 2023 GMT
            Not After : Sep 18 13:22:45 2024 GMT
        Subject: CN=52D4B764508745774D27D8A57CF2BCEEDFE67010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a7:10:f6:8d:ec:21:7c:fe:2f:dc:1c:44:95:
                    fd:a4:cd:5f:60:be:72:1a:36:9f:b3:f0:f5:5f:ba:
                    9f:7d:b5:82:80:70:62:8b:2e:a7:e4:e4:b7:1a:dc:
                    8f:fe:e6:54:2f:81:f4:7d:90:b2:d4:03:79:14:41:
                    03:98:43:89:87:c9:f9:28:5b:b3:2c:64:fd:86:16:
                    15:4e:12:f2:7b:f1:7c:6d:6f:3b:a9:ad:6b:34:0d:
                    2c:c4:74:4f:85:d7:65:c8:84:ef:78:f9:2c:75:e8:
                    5a:7f:dd:12:fa:07:15:08:5a:2f:57:91:b1:e3:9d:
                    2d:8f:92:8d:d1:8f:87:02:0e:37:5d:ba:5e:2a:43:
                    13:6d:05:ad:67:76:bb:29:30:c9:02:ca:07:bf:7b:
                    e1:db:0b:93:fb:40:46:5d:27:5c:98:20:46:8e:6e:
                    d2:0c:85:d7:ed:4f:0a:dc:19:d6:5a:72:6b:f9:5e:
                    6a:7e:87:1c:ac:1f:c0:d4:32:6c:b1:c3:6a:08:26:
                    3c:3d:ac:d8:1d:02:79:08:68:b8:c5:a2:25:3d:b5:
                    9d:e3:51:ae:29:83:4b:7b:db:98:55:a1:11:b8:26:
                    5d:dd:da:88:e5:a5:23:49:52:c9:4c:80:8e:af:65:
                    2b:31:17:97:48:8c:3f:32:cf:81:2f:ef:17:f0:4d:
                    a6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D4:B7:64:50:87:45:77:4D:27:D8:A5:7C:F2:BC:EE:DF:E6:70:10
            X509v3 Authority Key Identifier:
                keyid:FA:E4:EF:6F:4B:DB:EA:3F:80:BA:4A:0C:9E:E6:C6:D0:EE:C8:EB:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3234382e302f32312d3231203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         36:70:49:5d:5f:d0:d4:be:7d:c9:0d:3c:d4:9c:4a:4f:a0:a3:
         6a:f6:14:fc:21:e7:02:f4:8d:12:fe:97:df:5c:22:2f:e6:2d:
         a4:92:89:b9:76:b1:d8:90:d6:dc:4b:8f:33:06:81:1a:df:a5:
         9b:cb:ed:83:3d:dc:31:e9:d0:9e:73:7c:ed:b1:aa:74:e4:ef:
         8b:61:6d:1e:4c:44:b8:e3:d0:c2:22:63:b1:f9:90:2d:38:95:
         b0:6b:8d:37:e5:70:72:7b:ac:56:26:12:f0:37:48:ca:88:b4:
         0e:1b:ee:ed:99:6c:0b:11:4f:53:38:e5:4b:a7:af:10:ba:63:
         f0:7f:fb:01:4b:f2:ac:88:35:b0:c9:f2:11:17:f3:d8:ee:9c:
         3d:30:09:b2:78:24:af:5a:3f:68:1c:38:a8:a7:8c:02:df:ee:
         85:57:b2:ee:c8:f6:8d:4d:96:af:66:94:67:1c:bc:df:73:11:
         71:50:e1:b2:3a:cb:ae:5e:b5:b2:5b:bb:40:c8:44:87:6f:6c:
         99:17:e0:b1:0e:3c:cf:48:2f:4a:99:e4:d2:bd:40:bc:85:04:
         5b:85:06:24:8b:e6:d6:45:ae:a0:e1:fb:b5:6f:b3:c7:c4:38:
         e9:d2:35:dd:e5:97:2e:d7:5a:2a:cc:7c:85:eb:f5:99:af:84:
         ce:96:dc:4e
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCkDXJIfTAeVxdEYf4opcCd+ORNkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkFFNEVGNkY0QkRCRUEzRjgwQkE0QTBDOUVFNkM2RDBF
RUM4RUI1NDAeFw0yMzA5MjAxMzE3NDVaFw0yNDA5MTgxMzIyNDVaMDMxMTAvBgNV
BAMTKDUyRDRCNzY0NTA4NzQ1Nzc0RDI3RDhBNTdDRjJCQ0VFREZFNjcwMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2pxD2jewhfP4v3BxElf2kzV9g
vnIaNp+z8PVfup99tYKAcGKLLqfk5Lca3I/+5lQvgfR9kLLUA3kUQQOYQ4mHyfko
W7MsZP2GFhVOEvJ78XxtbzuprWs0DSzEdE+F12XIhO94+Sx16Fp/3RL6BxUIWi9X
kbHjnS2Pko3Rj4cCDjddul4qQxNtBa1ndrspMMkCyge/e+HbC5P7QEZdJ1yYIEaO
btIMhdftTwrcGdZacmv5Xmp+hxysH8DUMmyxw2oIJjw9rNgdAnkIaLjFoiU9tZ3j
Ua4pg0t725hVoRG4Jl3d2ojlpSNJUslMgI6vZSsxF5dIjD8yz4Ev7xfwTaYlAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUUtS3ZFCHRXdNJ9ilfPK87t/mcBAwHwYDVR0j
BBgwFoAU+uTvb0vb6j+AukoMnubG0O7I61QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTNqampURGZVQWVSQ3FSd1lKNkZNcjlCb3l5dWNVOGNpd25QSzRNaEx5
d3ovMS9GQUU0RUY2RjRCREJFQTNGODBCQTRBMEM5RUU2QzZEMEVFQzhFQjU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZBRTRFRjZGNEJEQkVBM0Y4
MEJBNEEwQzlFRTZDNkQwRUVDOEVCNTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzUzampqVERmVUFlUkNxUndZSjZGTXI5Qm95eXVjVThjaXduUEs0TWhMeXd6LzEv
MzIzMDMwMmUzMjMxMzgyZTMyMzQzODJlMzAyZjMyMzEyZDMyMzEyMDNkM2UyMDMy
MzgzNTM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAPI2vgwDQYJKoZIhvcNAQELBQADggEBADZwSV1f
0NS+fckNPNScSk+go2r2FPwh5wL0jRL+l99cIi/mLaSSibl2sdiQ1txLjzMGgRrf
pZvL7YM93DHp0J5zfO2xqnTk74thbR5MRLjj0MIiY7H5kC04lbBrjTflcHJ7rFYm
EvA3SMqItA4b7u2ZbAsRT1M45UunrxC6Y/B/+wFL8qyINbDJ8hEX89junD0wCbJ4
JK9aP2gcOKinjALf7oVXsu7I9o1Nlq9mlGccvN9zEXFQ4bI6y65etbJbu0DIRIdv
bJkX4LEOPM9IL0qZ5NK9QLyFBFuFBiSL5tZFrqDh+7Vvs8fEOOnSNd3lly7XWirM
fIXr9ZmvhM6W3E4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org