Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3234382e302f32322d3232203d3e203238353934.roa
File:                     3230302e3231382e3234382e302f32322d3232203d3e203238353934.roa (raw, json)
Hash identifier:          drxHfVed3l7CRHzNF11s9kfvG8nEJ7eT+Eld4q/cQ68=
Subject key identifier:   14:9D:B2:F6:5D:3C:ED:F0:5F:79:1B:48:A6:A6:22:9A:89:A3:B7:02
Certificate issuer:       /CN=FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54
Certificate serial:       2B9065453090747AF914CE4ADD0EC15D6B088045
Authority key identifier: FA:E4:EF:6F:4B:DB:EA:3F:80:BA:4A:0C:9E:E6:C6:D0:EE:C8:EB:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3234382e302f32322d3232203d3e203238353934.roa
Signing time:             Wed 20 Sep 2023 13:22:45 +0000
ROA not before:           Wed 20 Sep 2023 13:17:45 +0000
ROA not after:            Wed 18 Sep 2024 13:22:45 +0000
asID:                     28594
IP address blocks:        200.218.248.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:90:65:45:30:90:74:7a:f9:14:ce:4a:dd:0e:c1:5d:6b:08:80:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54
        Validity
            Not Before: Sep 20 13:17:45 2023 GMT
            Not After : Sep 18 13:22:45 2024 GMT
        Subject: CN=149DB2F65D3CEDF05F791B48A6A6229A89A3B702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:67:cd:3d:83:70:5a:62:32:de:55:2a:03:26:
                    d4:1a:a3:14:cb:9b:e7:cf:77:60:c0:52:61:44:4f:
                    8b:5b:11:ee:f7:c4:33:e0:82:2c:2f:ce:fe:bc:c4:
                    9e:bf:e0:fe:49:1e:4a:75:30:8b:a2:77:42:bb:f9:
                    f0:d9:38:5e:9e:01:71:e3:90:f1:10:d3:fa:ed:a0:
                    0b:d9:ae:28:56:a4:44:da:75:bf:f7:7b:68:68:fe:
                    81:f5:12:42:05:e6:23:8c:67:1f:30:60:7e:ab:05:
                    14:3d:10:92:2a:3a:8c:1f:fd:fb:9d:da:06:ac:df:
                    76:29:c5:6e:60:4f:12:a4:3a:e4:82:ab:7d:7f:5d:
                    78:38:15:5d:b5:3e:ac:5d:d2:f7:64:06:39:8c:9e:
                    19:fd:b8:97:4f:37:46:08:e9:bc:28:7a:fb:7f:78:
                    e7:8b:12:9e:48:7f:e9:00:36:2c:e7:a3:47:0a:21:
                    98:69:48:b8:4c:47:13:01:94:62:50:2e:eb:4a:4e:
                    9b:6b:3a:3a:d8:14:6b:77:69:4f:5c:d2:18:64:55:
                    2a:4b:03:e1:a3:7c:47:2a:fc:bb:d8:70:6b:da:8a:
                    5a:1c:2f:b3:eb:2a:ad:17:f9:9f:cc:57:c1:27:ac:
                    05:cf:d3:2c:ad:c4:01:7d:75:08:1a:1e:34:24:34:
                    96:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:9D:B2:F6:5D:3C:ED:F0:5F:79:1B:48:A6:A6:22:9A:89:A3:B7:02
            X509v3 Authority Key Identifier:
                keyid:FA:E4:EF:6F:4B:DB:EA:3F:80:BA:4A:0C:9E:E6:C6:D0:EE:C8:EB:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3234382e302f32322d3232203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4c:cf:c7:fa:12:7d:3f:46:99:81:03:b5:25:51:b0:6e:6d:26:
         9b:c8:90:82:83:c8:bc:1f:5a:03:22:cf:ed:aa:94:5f:0a:62:
         22:3a:c0:99:4e:3f:65:e4:1f:e6:99:a6:d6:a3:c7:49:50:6c:
         61:8c:76:d6:e0:2b:31:37:35:0e:97:e0:48:6c:20:99:56:07:
         85:35:f7:f7:68:60:c5:6b:f7:4c:7b:9a:0c:39:04:b9:45:a0:
         77:d9:fb:98:bf:45:f6:95:c9:88:33:87:a1:7a:13:b6:3a:2c:
         4e:ae:7f:21:da:3d:aa:f8:ab:42:08:e0:55:a5:ba:b0:b2:e3:
         17:55:fb:04:4a:4e:ca:97:76:5c:06:8d:8d:b0:af:76:fe:a2:
         3e:2b:d9:d6:7c:36:fd:3c:88:f7:56:2d:6c:8c:6d:a0:aa:c2:
         9b:5a:17:87:38:4c:3d:e3:a8:1a:0a:dc:3d:1c:6a:ca:34:8f:
         9d:2e:a9:ec:c0:a1:a1:3c:cc:7d:b0:c4:65:db:fa:32:c1:93:
         dc:47:28:23:2d:ba:13:5a:ea:42:1a:00:11:48:18:10:8c:8b:
         25:60:b2:c4:9d:b2:4a:00:fb:4f:cf:50:59:a9:33:f6:f8:90:
         6f:a7:69:3d:07:ff:de:8d:02:ed:81:fe:69:de:e2:f0:f2:8f:
         52:c8:1a:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:44 2024 by rpki-client on console-fra.rpki-client.org