Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3235302e302f32342d3234203d3e203238353934.roa
File:                     3230302e3231382e3235302e302f32342d3234203d3e203238353934.roa (raw, json)
Hash identifier:          IuxYw/0dKMdGUS1nsN7bQNttG8Odf1ZiRv+Yyn2xgSg=
Subject key identifier:   87:53:14:11:0D:66:C5:59:E9:39:63:14:B2:7B:36:E7:E5:FD:8D:86
Certificate issuer:       /CN=FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54
Certificate serial:       0B423F4A3F608484969056996D8F007125BC8F1C
Authority key identifier: FA:E4:EF:6F:4B:DB:EA:3F:80:BA:4A:0C:9E:E6:C6:D0:EE:C8:EB:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3235302e302f32342d3234203d3e203238353934.roa
Signing time:             Wed 20 Sep 2023 13:22:45 +0000
ROA not before:           Wed 20 Sep 2023 13:17:45 +0000
ROA not after:            Wed 18 Sep 2024 13:22:45 +0000
asID:                     28594
IP address blocks:        200.218.250.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:42:3f:4a:3f:60:84:84:96:90:56:99:6d:8f:00:71:25:bc:8f:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54
        Validity
            Not Before: Sep 20 13:17:45 2023 GMT
            Not After : Sep 18 13:22:45 2024 GMT
        Subject: CN=875314110D66C559E9396314B27B36E7E5FD8D86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f3:62:76:61:29:f0:92:ae:3b:1e:01:a3:0f:
                    cf:26:ec:1f:51:71:de:4c:d2:16:7a:b5:c6:df:1d:
                    e1:ee:cc:ce:6b:9a:fb:6e:3e:4c:df:94:4e:e7:1e:
                    a4:bd:04:a7:98:ed:e2:b9:51:11:78:4b:6e:3d:07:
                    49:1e:20:7e:e2:75:bc:03:37:e2:78:97:13:89:9a:
                    cf:85:36:63:78:83:1d:46:e8:f0:0b:0f:02:5a:25:
                    cf:ab:c4:c6:5d:91:fd:e1:2f:e8:a9:35:67:d1:d0:
                    a0:bd:e1:c3:f9:80:6d:ee:4f:c2:86:ac:75:e5:93:
                    82:d7:ac:4d:81:c5:16:a6:8d:3a:c1:c8:bf:c7:65:
                    4d:64:99:1f:1b:87:b0:15:87:d2:86:5e:f7:6f:4c:
                    87:b2:f6:d3:55:6e:c6:48:45:58:80:d3:55:9e:cd:
                    50:2b:81:bf:a6:04:dd:a4:69:f1:a4:5b:4d:2f:65:
                    e7:6b:50:9d:16:bc:03:da:e2:9b:a1:fa:9b:51:30:
                    5f:27:db:25:33:42:10:06:5e:73:11:2a:43:08:9f:
                    87:71:13:26:8f:01:c6:df:81:a9:46:dc:ef:25:6e:
                    86:07:63:57:45:b6:71:eb:16:56:7b:7d:d3:6a:87:
                    54:75:8c:b2:4d:80:45:db:a0:6c:ac:11:e6:4a:26:
                    b7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:53:14:11:0D:66:C5:59:E9:39:63:14:B2:7B:36:E7:E5:FD:8D:86
            X509v3 Authority Key Identifier:
                keyid:FA:E4:EF:6F:4B:DB:EA:3F:80:BA:4A:0C:9E:E6:C6:D0:EE:C8:EB:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3235302e302f32342d3234203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:a1:df:a8:69:c7:ac:09:6a:cf:03:5c:bb:01:a2:7d:32:60:
         d7:c0:a0:31:ec:78:c4:16:2f:9f:e6:e2:14:e5:bf:cc:90:57:
         a8:34:67:51:8b:2e:57:27:ac:be:b6:e0:cb:eb:82:5d:4c:ac:
         d0:cc:ed:fe:4c:99:f6:5f:40:56:e1:60:80:ba:4c:3f:0d:98:
         ce:9a:63:42:dc:c9:c9:eb:15:bc:4d:8f:66:e0:f5:4d:3c:7b:
         5f:e2:12:43:97:51:33:92:c3:d9:bb:00:a1:54:e5:b5:ca:f2:
         91:87:45:75:a7:22:b9:2a:ef:0c:ae:15:6f:82:b3:d3:26:4d:
         40:51:d7:76:cd:9d:39:fb:05:88:6c:76:a4:96:8c:25:8b:62:
         75:ec:34:36:cd:ac:68:c9:d5:9c:22:77:07:db:15:91:b6:3d:
         dc:59:58:e0:d8:31:a7:c3:d4:eb:dd:af:f3:67:3b:5e:de:b9:
         fa:67:30:a0:6d:93:79:18:85:00:9b:5c:17:cf:08:90:4e:2c:
         56:34:d5:51:8c:f1:c9:55:27:fe:9b:80:48:3b:32:02:40:ce:
         52:c7:5c:6d:fc:b9:72:81:05:87:c5:35:9d:cb:52:2c:7a:b7:
         19:de:d9:5a:13:e8:78:64:64:0c:97:42:d0:53:1a:54:a7:20:
         03:08:b5:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org