Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3235342e302f32332d3233203d3e203238353934.roa
File:                     3230302e3231382e3235342e302f32332d3233203d3e203238353934.roa (raw, json)
Hash identifier:          Dqd41S3n16c+V1/kHn6HwP20uCVQLTJB4bI2OSiCzXY=
Subject key identifier:   31:73:AE:4F:0C:40:9E:E0:A7:7E:B9:A8:94:80:FB:2D:BA:58:08:18
Certificate issuer:       /CN=FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54
Certificate serial:       3E686FF51E31706020AADFB8090F9BD969A01A96
Authority key identifier: FA:E4:EF:6F:4B:DB:EA:3F:80:BA:4A:0C:9E:E6:C6:D0:EE:C8:EB:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3235342e302f32332d3233203d3e203238353934.roa
Signing time:             Wed 20 Sep 2023 13:22:44 +0000
ROA not before:           Wed 20 Sep 2023 13:17:44 +0000
ROA not after:            Wed 18 Sep 2024 13:22:44 +0000
asID:                     28594
IP address blocks:        200.218.254.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:68:6f:f5:1e:31:70:60:20:aa:df:b8:09:0f:9b:d9:69:a0:1a:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54
        Validity
            Not Before: Sep 20 13:17:44 2023 GMT
            Not After : Sep 18 13:22:44 2024 GMT
        Subject: CN=3173AE4F0C409EE0A77EB9A89480FB2DBA580818
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:6e:26:1c:73:df:b9:1d:5a:95:b2:07:d2:63:
                    38:69:de:62:3d:55:f1:27:f0:da:27:5b:14:cf:8a:
                    87:43:5c:11:a7:96:f4:68:2b:d8:be:83:f7:64:4e:
                    ba:d7:db:66:a4:16:8f:e5:d8:b7:ee:28:9a:bb:48:
                    b6:c8:5e:b2:95:5b:25:cb:98:a7:04:b5:88:93:19:
                    75:ec:0b:5b:cc:1b:ef:16:5b:0e:ea:13:32:f4:65:
                    fe:f9:52:f5:10:1b:b6:bd:84:10:d1:27:aa:79:17:
                    3e:59:5e:fc:08:b8:22:82:77:26:8d:cd:22:c4:44:
                    e9:a2:63:4e:d4:6f:b1:67:21:94:c4:77:0a:5c:61:
                    02:e1:69:9f:44:4d:d5:3f:ed:c0:18:17:d4:1d:62:
                    ba:d2:a1:04:36:b2:93:e6:71:8e:ca:e3:20:be:03:
                    6b:ba:0c:7c:8f:c2:5e:01:32:d9:38:69:6f:f6:d1:
                    65:5f:46:6c:2f:59:73:19:17:01:f3:90:1e:6c:74:
                    22:81:8c:e2:02:7e:28:b7:7e:b3:e1:5a:68:c4:51:
                    6f:e3:f2:5a:0a:a8:e8:92:cd:e7:76:3a:5b:0b:81:
                    e9:8d:51:e7:27:4d:bc:5d:c3:91:48:de:e3:af:f2:
                    7c:61:87:5f:f5:29:61:e5:91:3e:40:4e:b1:92:18:
                    ba:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:73:AE:4F:0C:40:9E:E0:A7:7E:B9:A8:94:80:FB:2D:BA:58:08:18
            X509v3 Authority Key Identifier:
                keyid:FA:E4:EF:6F:4B:DB:EA:3F:80:BA:4A:0C:9E:E6:C6:D0:EE:C8:EB:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FAE4EF6F4BDBEA3F80BA4A0C9EE6C6D0EEC8EB54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/1/3230302e3231382e3235342e302f32332d3233203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:4c:f8:7d:9b:44:b8:6e:fd:01:3d:ab:b4:fa:97:5c:e7:e2:
         90:85:13:77:7f:ca:1f:ca:0f:cd:d1:b7:e1:68:f4:5d:7b:79:
         20:88:b8:cd:de:28:ec:89:71:eb:99:40:51:74:f8:8f:16:b6:
         e1:dd:55:8c:8f:52:96:7f:87:39:cd:2f:ad:bb:db:af:fc:34:
         52:4a:cb:0e:d5:9a:6e:c7:79:a3:39:ba:2c:4e:36:28:a8:d7:
         12:fb:25:13:1d:8f:c8:3b:d2:2a:ce:ab:2a:ba:98:34:ae:ff:
         6f:fe:7d:fa:77:ca:bb:72:3a:fa:08:3b:55:eb:ae:48:bf:ac:
         69:43:70:38:ff:20:77:30:ee:9c:97:87:de:05:2a:26:da:41:
         61:c8:05:dd:8d:2f:39:e6:31:c6:8d:e2:78:41:d8:73:3b:5a:
         85:10:ea:af:4d:8c:3d:86:0b:a0:b4:60:69:e5:a3:cc:53:ec:
         6d:02:3d:49:af:70:d5:95:b4:0b:27:28:bc:c6:40:3e:ed:c2:
         2d:ff:e6:dd:0c:94:fa:9e:80:3c:5f:ae:2d:26:6f:1b:fc:4a:
         9c:72:8f:d9:be:ff:28:23:ec:c2:2b:ea:15:b4:95:2b:b9:b8:
         53:e3:ed:29:31:b2:f1:8f:6f:78:4c:2e:d3:45:0b:9f:92:04:
         41:f5:f5:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:50 2024 by rpki-client on console-ams.rpki-client.org