Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3235332e302f32342d3234203d3e203238353934.roa
File:                     3230302e3231382e3235332e302f32342d3234203d3e203238353934.roa (raw, json)
Hash identifier:          r+vmGFd7idaVMh3JGhjJygsHYLN4B81wiyO4apTWGt0=
Subject key identifier:   72:29:6A:04:29:92:92:35:0F:62:4E:66:08:E2:23:FC:47:58:E3:EE
Certificate issuer:       /CN=FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54
Certificate serial:       3BF72140F26222228934519931DACD14E3884894
Authority key identifier: FA:E4:EF:6F:4B:DB:EA:3F:80:BA:4A:0C:9E:E6:C6:D0:EE:C8:EB:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3235332e302f32342d3234203d3e203238353934.roa
Signing time:             Wed 20 Sep 2023 13:22:46 +0000
ROA not before:           Wed 20 Sep 2023 13:17:46 +0000
ROA not after:            Wed 18 Sep 2024 13:22:46 +0000
asID:                     28594
IP address blocks:        200.218.253.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:f7:21:40:f2:62:22:22:89:34:51:99:31:da:cd:14:e3:88:48:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54
        Validity
            Not Before: Sep 20 13:17:46 2023 GMT
            Not After : Sep 18 13:22:46 2024 GMT
        Subject: CN=72296A04299292350F624E6608E223FC4758E3EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e8:b2:00:0d:dc:b3:24:ca:0e:80:4d:17:17:
                    b9:32:49:f0:59:6d:a0:af:51:13:87:89:7b:b3:c7:
                    d3:46:a9:62:aa:7c:c8:ec:a1:ca:1e:5b:5e:ab:52:
                    fc:f5:ff:e3:fb:f1:b7:00:f0:26:d3:de:fc:de:39:
                    bf:4b:8a:55:8e:d5:7b:c9:ac:75:9b:a1:24:f3:e2:
                    a2:91:02:b9:34:04:3f:9b:84:0e:1b:f4:76:b5:75:
                    39:1f:4d:5d:80:b0:fc:e0:85:11:83:10:e1:cc:2d:
                    96:6d:e4:9e:12:49:a5:fb:8e:07:26:a6:e0:05:b6:
                    a0:a2:a1:5d:23:94:f1:d4:a1:f2:94:3e:8f:5d:05:
                    35:fd:01:48:bb:ea:87:ee:06:cf:00:5d:a6:49:a7:
                    ef:c3:cc:e2:29:17:e8:a7:6c:74:3d:1e:db:b6:c5:
                    fd:0c:58:8e:d1:46:32:7e:84:e4:18:72:80:fc:85:
                    44:e5:ef:25:d9:fa:81:00:67:af:8e:cc:7a:4d:02:
                    80:7d:e4:fa:e6:ca:a5:4d:75:0b:09:ba:56:a7:8e:
                    4b:c6:08:96:67:d9:b4:74:07:44:df:06:75:1a:ea:
                    a1:09:fd:56:5d:63:db:36:fa:14:84:3d:7f:94:91:
                    3a:80:2b:83:b6:fa:58:19:e7:2b:10:a9:d9:05:4c:
                    15:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:29:6A:04:29:92:92:35:0F:62:4E:66:08:E2:23:FC:47:58:E3:EE
            X509v3 Authority Key Identifier:
                keyid:FA:E4:EF:6F:4B:DB:EA:3F:80:BA:4A:0C:9E:E6:C6:D0:EE:C8:EB:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3235332e302f32342d3234203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:5e:03:de:be:39:5f:24:84:b7:44:9a:2d:f9:c2:7b:05:4f:
         0c:0e:79:97:61:c4:09:ac:f2:d5:d0:01:8d:ba:aa:91:d4:9b:
         d6:20:dd:c8:33:05:c1:a5:fb:ca:be:c6:8e:ad:45:68:66:70:
         8c:4b:43:ce:82:e0:b2:83:43:cd:94:fc:a2:d9:f9:26:5b:dc:
         1e:5d:e7:88:9f:ac:9f:11:ee:38:b4:74:39:d5:2e:67:b5:ab:
         9c:56:67:b4:fa:f5:ad:e9:15:99:65:85:f8:cb:4e:ae:a6:17:
         c2:f9:eb:4f:6e:e6:5e:1d:c5:1b:4b:c2:78:2d:a8:5a:5d:db:
         51:e3:c0:cc:9e:2c:47:81:6a:d9:3c:57:76:56:d0:42:0d:7c:
         02:61:68:67:24:e4:8f:ff:31:c7:7a:76:b6:ca:ff:e7:13:6b:
         cb:b8:0e:aa:a2:92:59:0c:2c:78:ad:9b:9a:d6:50:04:0d:8d:
         86:62:e7:91:fa:3f:98:9b:e5:50:39:3d:32:03:03:31:0d:5b:
         ad:40:9d:fb:94:20:4a:40:61:66:70:30:47:a1:f4:7e:aa:75:
         da:c4:5a:e8:17:c2:a4:b4:a6:3a:f0:5f:42:64:84:96:d6:1b:
         3a:f1:20:c8:c1:d7:d0:2b:96:e3:b0:5e:14:c7:b2:70:c1:f0:
         c8:1e:66:8b
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUO/chQPJiIiKJNFGZMdrNFOOISJQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkFFNEVGNkY0QkRCRUEzRjgwQkE0QTBDOUVFNkM2RDBF
RUM4RUI1NDAeFw0yMzA5MjAxMzE3NDZaFw0yNDA5MTgxMzIyNDZaMDMxMTAvBgNV
BAMTKDcyMjk2QTA0Mjk5MjkyMzUwRjYyNEU2NjA4RTIyM0ZDNDc1OEUzRUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx6LIADdyzJMoOgE0XF7kySfBZ
baCvUROHiXuzx9NGqWKqfMjsocoeW16rUvz1/+P78bcA8CbT3vzeOb9LilWO1XvJ
rHWboSTz4qKRArk0BD+bhA4b9Ha1dTkfTV2AsPzghRGDEOHMLZZt5J4SSaX7jgcm
puAFtqCioV0jlPHUofKUPo9dBTX9AUi76ofuBs8AXaZJp+/DzOIpF+inbHQ9Htu2
xf0MWI7RRjJ+hOQYcoD8hUTl7yXZ+oEAZ6+OzHpNAoB95PrmyqVNdQsJulanjkvG
CJZn2bR0B0TfBnUa6qEJ/VZdY9s2+hSEPX+UkTqAK4O2+lgZ5ysQqdkFTBXRAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUcilqBCmSkjUPYk5mCOIj/EdY4+4wHwYDVR0j
BBgwFoAU+uTvb0vb6j+AukoMnubG0O7I61QwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNTNqampURGZVQWVSQ3FSd1lKNkZNcjlCb3l5dWNVOGNpd25QSzRNaEx5
d3ovMS9GQUU0RUY2RjRCREJFQTNGODBCQTRBMEM5RUU2QzZEMEVFQzhFQjU0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZBRTRFRjZGNEJEQkVBM0Y4
MEJBNEEwQzlFRTZDNkQwRUVDOEVCNTQuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzUzampqVERmVUFlUkNxUndZSjZGTXI5Qm95eXVjVThjaXduUEs0TWhMeXd6LzEv
MzIzMDMwMmUzMjMxMzgyZTMyMzUzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzgzNTM5MzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADI2v0wDQYJKoZIhvcNAQELBQADggEBADBeA96+
OV8khLdEmi35wnsFTwwOeZdhxAms8tXQAY26qpHUm9Yg3cgzBcGl+8q+xo6tRWhm
cIxLQ86C4LKDQ82U/KLZ+SZb3B5d54ifrJ8R7ji0dDnVLme1q5xWZ7T69a3pFZll
hfjLTq6mF8L5609u5l4dxRtLwngtqFpd21HjwMyeLEeBatk8V3ZW0EINfAJhaGck
5I//Mcd6drbK/+cTa8u4DqqiklkMLHitm5rWUAQNjYZi55H6P5ib5VA5PTIDAzEN
W61AnfuUIEpAYWZwMEeh9H6qddrEWugXwqS0pjrwX0JkhJbWGzrxIMjB19ArluOw
XhTHsnDB8MgeZos=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org