Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3235322e302f32332d3233203d3e203238353934.roa
File:                     3230302e3231382e3235322e302f32332d3233203d3e203238353934.roa (raw, json)
Hash identifier:          qCoB5gzRFlcMzMkUwxQD4TXvVSiGIaTFUOoZmRLDrJY=
Subject key identifier:   9E:29:A1:52:92:B6:51:38:D2:E6:4A:CD:C5:22:10:71:B0:D2:EB:42
Certificate issuer:       /CN=FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54
Certificate serial:       44743F1FF26BFC30BF09827F3108AC96EB7F3E70
Authority key identifier: FA:E4:EF:6F:4B:DB:EA:3F:80:BA:4A:0C:9E:E6:C6:D0:EE:C8:EB:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3235322e302f32332d3233203d3e203238353934.roa
Signing time:             Wed 20 Sep 2023 13:22:45 +0000
ROA not before:           Wed 20 Sep 2023 13:17:45 +0000
ROA not after:            Wed 18 Sep 2024 13:22:45 +0000
asID:                     28594
IP address blocks:        200.218.252.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:74:3f:1f:f2:6b:fc:30:bf:09:82:7f:31:08:ac:96:eb:7f:3e:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54
        Validity
            Not Before: Sep 20 13:17:45 2023 GMT
            Not After : Sep 18 13:22:45 2024 GMT
        Subject: CN=9E29A15292B65138D2E64ACDC5221071B0D2EB42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:44:4e:df:57:a0:37:51:53:83:9c:67:0b:d1:
                    19:ee:25:f4:ef:3e:1e:9e:44:74:35:8a:cf:1f:fc:
                    a1:3e:34:18:6d:82:f5:49:8d:a4:59:26:96:e7:b3:
                    a6:a7:b1:43:7b:dd:14:05:2c:fa:b9:3e:54:6b:13:
                    fd:43:cf:0f:b2:e0:b2:c5:6e:69:98:a6:9a:37:83:
                    81:f4:26:d0:b7:60:0c:57:6c:a8:a0:cb:15:d4:ec:
                    3d:55:08:76:74:e9:7d:6d:87:fd:89:fa:70:fe:58:
                    87:92:3f:12:84:7b:15:d1:20:68:40:f6:88:e3:4e:
                    59:9f:3a:08:1e:e8:7e:0d:f4:5a:66:fc:d4:66:74:
                    1c:8c:a1:ca:48:35:2f:05:2d:f7:fd:d1:a4:b9:85:
                    47:5a:cf:a6:52:1b:3e:e2:9b:93:dd:a4:01:ab:5a:
                    3e:e1:31:4d:16:70:62:31:6d:de:77:b9:b4:e1:19:
                    c2:69:69:79:ed:8a:76:cc:ab:45:96:ed:59:08:3f:
                    75:98:3e:8c:ec:64:79:4f:9f:0c:25:32:1f:55:3f:
                    a7:2e:10:c2:83:d5:c0:bb:10:70:d8:1b:4d:3a:b6:
                    15:93:09:01:67:9a:63:97:61:89:39:57:00:14:ca:
                    4e:12:c3:e5:8f:99:fd:03:09:06:bf:7f:74:14:fe:
                    23:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:29:A1:52:92:B6:51:38:D2:E6:4A:CD:C5:22:10:71:B0:D2:EB:42
            X509v3 Authority Key Identifier:
                keyid:FA:E4:EF:6F:4B:DB:EA:3F:80:BA:4A:0C:9E:E6:C6:D0:EE:C8:EB:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3235322e302f32332d3233203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:60:5f:d5:d9:a3:35:b9:0b:d1:d9:2a:d8:f6:6f:9b:b0:a4:
         40:f8:0f:22:fd:a6:2e:67:2e:83:d6:c2:dc:11:d9:e4:d6:26:
         19:04:a1:dc:ca:81:8c:69:90:09:12:18:40:e1:e5:55:5e:b4:
         b0:0e:6d:77:e1:41:46:17:b2:ff:03:d0:4c:aa:b1:ce:41:ad:
         b5:b4:80:34:16:be:0c:95:41:df:08:3a:fb:91:a7:30:1e:2f:
         57:1d:b7:80:f1:a4:23:bc:91:96:aa:d5:de:a6:9f:50:68:08:
         52:1d:92:c2:ae:58:7b:02:02:6b:2d:30:72:36:f6:f1:d2:b6:
         0a:a3:35:01:f6:cf:05:a3:12:22:70:1d:81:f3:0e:bb:fe:d3:
         10:e9:a3:38:41:80:88:6c:93:94:e0:40:9b:16:ce:f7:13:dd:
         05:08:e0:ab:3d:f8:55:8d:d0:3f:b2:48:62:ef:cf:cc:e4:09:
         41:d3:63:f0:ad:b5:18:b7:f8:3d:50:69:62:63:94:00:9d:9a:
         6e:34:4b:7d:8e:8b:d9:05:dd:57:05:51:94:0a:b2:36:d4:65:
         77:90:b1:df:ca:8d:bd:f8:63:bd:2c:7d:db:d6:55:e1:94:fa:
         95:ec:f6:8b:7b:fb:5b:77:22:14:8d:af:86:cf:0e:c8:50:1b:
         bb:0d:a4:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org