Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3235312e302f32342d3234203d3e203238353934.roa
File:                     3230302e3231382e3235312e302f32342d3234203d3e203238353934.roa (raw, json)
Hash identifier:          UAZXuWiv0xDPQrKkhbmr2/O+EHwVcSLRWHRAq0zGmg0=
Subject key identifier:   D8:8A:9C:3F:13:21:12:9F:B8:A3:1D:0A:47:62:6C:FD:B5:E5:95:A1
Certificate issuer:       /CN=FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54
Certificate serial:       221BD8FFD0F01327C0A671CADC16D45EA81D420F
Authority key identifier: FA:E4:EF:6F:4B:DB:EA:3F:80:BA:4A:0C:9E:E6:C6:D0:EE:C8:EB:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3235312e302f32342d3234203d3e203238353934.roa
Signing time:             Wed 20 Sep 2023 13:22:46 +0000
ROA not before:           Wed 20 Sep 2023 13:17:46 +0000
ROA not after:            Wed 18 Sep 2024 13:22:46 +0000
asID:                     28594
IP address blocks:        200.218.251.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:1b:d8:ff:d0:f0:13:27:c0:a6:71:ca:dc:16:d4:5e:a8:1d:42:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54
        Validity
            Not Before: Sep 20 13:17:46 2023 GMT
            Not After : Sep 18 13:22:46 2024 GMT
        Subject: CN=D88A9C3F1321129FB8A31D0A47626CFDB5E595A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9c:34:3a:77:ff:ab:0d:2d:b5:12:62:db:0d:
                    2f:da:d7:6c:3b:65:ba:16:93:b2:2b:da:86:f4:6a:
                    4b:e0:2b:da:01:52:2c:de:76:3a:15:e7:ad:d4:52:
                    4b:9f:c7:48:a9:03:7b:52:b1:2a:f8:59:a6:29:a8:
                    ac:c2:97:5a:cf:eb:f0:29:e9:15:27:32:85:0e:a2:
                    f0:b2:4b:42:b5:c5:7f:71:67:3d:f5:49:10:0e:81:
                    b8:25:1c:22:bf:24:a2:7a:38:21:a8:0b:08:2e:87:
                    cc:27:30:e6:9f:d9:df:d8:34:e6:5d:9e:ee:00:63:
                    66:b4:76:0d:6e:fa:14:39:b8:4a:32:41:29:ae:b3:
                    be:d3:de:52:d8:d0:dc:3c:c4:70:24:ee:97:fb:20:
                    c2:72:8e:ca:5f:54:4d:e1:f1:12:2b:38:05:a8:74:
                    50:1d:81:42:66:ff:1f:d9:ef:53:de:27:a8:e4:75:
                    73:dd:b0:69:66:cd:85:d1:bb:9c:c5:f1:49:46:8d:
                    a8:70:fc:6f:79:42:83:de:c7:38:da:09:d5:18:04:
                    ea:ee:d7:60:b1:dd:e5:51:ad:1f:df:21:dd:af:c3:
                    79:bd:20:ce:f6:9c:1f:7f:58:2c:77:e6:58:e2:39:
                    73:52:9f:dc:f7:0f:da:36:44:d0:4f:be:3e:39:b5:
                    43:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:8A:9C:3F:13:21:12:9F:B8:A3:1D:0A:47:62:6C:FD:B5:E5:95:A1
            X509v3 Authority Key Identifier:
                keyid:FA:E4:EF:6F:4B:DB:EA:3F:80:BA:4A:0C:9E:E6:C6:D0:EE:C8:EB:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3235312e302f32342d3234203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:e6:d1:80:e2:80:37:e9:99:fa:4e:42:c3:ae:ae:07:89:6f:
         c1:3a:ef:f5:45:7d:df:7d:5e:38:be:8d:ec:7a:4d:47:0b:59:
         d8:66:d1:ba:7c:53:92:73:81:ad:75:19:ab:d4:82:8b:01:37:
         7a:91:21:af:d9:e7:d2:13:d7:91:82:74:f5:e5:9b:21:2e:e2:
         c0:0d:34:eb:5f:8e:f9:e8:12:8b:d8:14:09:73:3a:ff:82:86:
         ef:3a:aa:0e:69:20:cf:14:63:7d:e6:40:a1:a3:fb:37:75:d7:
         55:f9:bd:8a:83:99:31:90:40:fc:e4:ac:ed:84:33:aa:82:0b:
         bd:39:c2:d9:08:47:67:e9:5f:9e:2d:2e:3c:fd:63:1f:23:54:
         2f:67:70:60:78:b7:91:6d:2d:a1:df:8d:e6:45:d8:19:47:2f:
         68:c0:c6:6c:71:90:84:61:74:45:97:ce:23:3b:bd:50:1f:cd:
         b8:4c:db:dd:00:1f:5a:1b:ee:e4:ea:35:0e:50:68:81:1b:03:
         98:ca:1b:10:d0:13:d9:da:5a:37:90:17:92:1c:01:12:b5:30:
         b9:45:08:19:9c:6a:99:db:75:e6:71:a6:c8:a5:80:40:5a:b8:
         32:b6:2f:cd:f9:dd:de:8c:8f:a6:c1:82:e1:5b:8f:7e:33:8a:
         90:da:f8:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org