Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3235322e302f32322d3232203d3e203238353934.roa
File:                     3230302e3231382e3235322e302f32322d3232203d3e203238353934.roa (raw, json)
Hash identifier:          3GH5QbZRj1V5hpK/kGQSdBoBftClSzcmeA31YlJA100=
Subject key identifier:   E0:9D:BC:88:07:B1:EA:74:1B:A9:B1:53:79:36:F6:FE:E4:C3:8C:C4
Certificate issuer:       /CN=FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54
Certificate serial:       3EBE8E356A0127F8A0BEF0EEB0643F1346C6B8AB
Authority key identifier: FA:E4:EF:6F:4B:DB:EA:3F:80:BA:4A:0C:9E:E6:C6:D0:EE:C8:EB:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3235322e302f32322d3232203d3e203238353934.roa
Signing time:             Wed 20 Sep 2023 13:22:47 +0000
ROA not before:           Wed 20 Sep 2023 13:17:47 +0000
ROA not after:            Wed 18 Sep 2024 13:22:47 +0000
asID:                     28594
IP address blocks:        200.218.252.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:be:8e:35:6a:01:27:f8:a0:be:f0:ee:b0:64:3f:13:46:c6:b8:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54
        Validity
            Not Before: Sep 20 13:17:47 2023 GMT
            Not After : Sep 18 13:22:47 2024 GMT
        Subject: CN=E09DBC8807B1EA741BA9B1537936F6FEE4C38CC4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:30:3a:fd:ec:9f:a8:39:b7:0d:8b:43:72:e0:
                    4c:c8:d8:cc:c0:93:fc:53:d1:a2:b5:99:7c:36:d2:
                    79:42:cc:9f:37:ea:a9:a9:c2:f7:2b:ff:ac:0b:46:
                    5e:ab:7c:ea:02:9e:9c:f5:f1:bd:f4:b3:24:4b:d3:
                    9b:86:f3:0f:16:55:82:65:dd:bc:e4:47:e9:2f:2c:
                    f2:66:95:c3:ec:db:34:dc:e1:a3:a2:f7:28:2e:ba:
                    c5:39:47:16:24:bc:03:e4:bc:8c:6e:e5:a0:b7:e0:
                    0f:e5:d3:02:52:e6:9b:ee:10:70:b5:47:e1:31:42:
                    7f:23:e4:4a:96:67:4f:ee:75:a0:03:37:09:94:b2:
                    16:22:2c:b7:da:8a:9d:86:04:84:47:57:54:a6:37:
                    5e:fa:a9:b8:ee:70:ed:5f:b7:3c:19:2f:a4:af:00:
                    36:f7:e2:aa:1e:9c:26:3c:6c:09:58:59:12:cc:d5:
                    2a:9d:b8:e1:47:eb:ae:9f:83:e8:bc:44:32:44:b0:
                    a2:85:f6:8b:eb:6b:08:44:58:b0:b9:0b:18:7d:1d:
                    fc:c4:df:a2:de:d8:e4:48:c5:a3:57:ab:c6:ec:b9:
                    37:8c:e2:3b:5b:76:22:c7:8e:29:35:b0:c5:14:a1:
                    10:f1:ae:3e:90:e2:6f:74:80:84:d9:91:fe:41:23:
                    7a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:9D:BC:88:07:B1:EA:74:1B:A9:B1:53:79:36:F6:FE:E4:C3:8C:C4
            X509v3 Authority Key Identifier:
                keyid:FA:E4:EF:6F:4B:DB:EA:3F:80:BA:4A:0C:9E:E6:C6:D0:EE:C8:EB:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3235322e302f32322d3232203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6f:75:76:2c:c6:80:48:c3:8f:11:f4:12:97:36:64:e8:b0:d5:
         6f:e6:63:c1:ce:2d:85:6d:9f:48:0b:eb:0a:c1:5b:3f:13:4f:
         61:13:aa:0d:25:2f:f9:dc:94:ae:66:81:0e:38:98:89:0c:12:
         eb:32:4c:75:92:4a:ee:c4:5e:db:65:68:93:72:ff:b5:7c:62:
         ca:b0:61:98:ab:02:17:72:c0:49:5c:71:04:e8:bc:00:c7:71:
         d4:b7:04:02:e7:15:c8:db:ec:56:90:5c:dd:2b:64:0e:fa:d7:
         83:6d:a9:32:f0:36:a9:0b:54:25:1d:a5:de:23:2d:48:8e:13:
         72:a9:d3:de:fc:5c:e5:53:27:a8:8c:34:92:a2:70:eb:80:43:
         8a:ad:52:dd:0b:a2:03:10:9e:f4:50:3d:54:00:84:cd:53:44:
         12:b9:2f:8a:a5:64:d5:41:1c:3e:ef:a5:8c:e5:90:28:8b:57:
         35:c2:4b:b5:87:9e:58:50:ac:c7:37:31:e6:c9:c1:8b:50:d1:
         7e:27:9c:b4:26:41:28:60:48:ff:aa:11:ae:fd:e6:23:14:4a:
         cb:1c:f9:95:df:5a:d3:4c:70:88:14:0b:91:28:f3:12:57:e9:
         83:33:bf:72:60:e9:d7:8f:66:f8:01:02:76:76:2b:f6:b6:27:
         b2:2a:36:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:02 2024 by rpki-client on console-ams.rpki-client.org