Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3230312e3135302e3134342e302f32322d3232203d3e20323639303733.roa
File:                     3230312e3135302e3134342e302f32322d3232203d3e20323639303733.roa (raw, json)
Hash identifier:          WRR8m/bdVJHHBEFkTugNpMqTiq2qPp8wmfawvqHbfJA=
Subject key identifier:   A8:EE:68:8D:9F:D8:E9:23:53:53:53:11:D1:3F:99:1B:64:4F:C2:E7
Certificate issuer:       /CN=53B0E684E1CDDB349F5BA8482F99BE87D3AFE6E3
Certificate serial:       76A5DA2DDA352C37B9FCE6690A001DFADA61853E
Authority key identifier: 53:B0:E6:84:E1:CD:DB:34:9F:5B:A8:48:2F:99:BE:87:D3:AF:E6:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/53B0E684E1CDDB349F5BA8482F99BE87D3AFE6E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3230312e3135302e3134342e302f32322d3232203d3e20323639303733.roa
Signing time:             Mon 31 Oct 2022 14:00:00 +0000
ROA not before:           Mon 31 Oct 2022 13:55:00 +0000
ROA not after:            Mon 30 Oct 2023 14:00:00 +0000
asID:                     269073
IP address blocks:        201.150.144.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:a5:da:2d:da:35:2c:37:b9:fc:e6:69:0a:00:1d:fa:da:61:85:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53B0E684E1CDDB349F5BA8482F99BE87D3AFE6E3
        Validity
            Not Before: Oct 31 13:55:00 2022 GMT
            Not After : Oct 30 14:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9b:69:35:9e:05:87:a0:9e:4a:8c:25:0a:47:
                    69:ae:94:a6:39:88:31:60:33:5c:07:ed:2d:e3:56:
                    5d:54:b9:18:42:f3:dd:e1:13:13:9a:08:74:c5:d8:
                    ad:67:01:12:9b:b5:e6:bc:e1:8e:5e:d1:68:88:ae:
                    5f:ee:e8:bd:ed:2d:b2:48:22:b2:6f:59:ae:3b:33:
                    20:de:e9:f2:ec:ef:fc:dc:70:76:e1:fc:04:61:63:
                    5c:d2:59:7d:ba:e5:e0:f2:da:33:17:aa:0a:44:6c:
                    f4:c0:03:ff:4a:d2:57:ba:cc:0a:bf:fe:59:dd:2b:
                    e8:18:89:2a:f1:94:85:f0:0d:37:1f:e2:5c:45:57:
                    40:36:39:a5:42:e3:68:cc:97:ef:92:42:3d:73:90:
                    7c:80:03:34:3a:86:7b:ca:70:19:38:87:77:20:e2:
                    17:be:3e:32:b9:9e:a7:0e:84:5f:08:29:e6:2a:74:
                    a9:0f:03:44:45:e7:95:3e:93:02:73:ff:ce:b2:04:
                    45:f3:08:5d:6b:e1:b7:eb:73:4b:f3:70:65:86:c4:
                    8f:09:41:30:0b:59:dd:26:f1:89:32:60:df:18:e2:
                    71:79:58:6a:55:8b:6e:ed:55:d1:ea:4e:9b:c2:66:
                    9e:8f:9b:90:ce:a4:c6:3b:94:79:07:2c:73:c6:bf:
                    38:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:EE:68:8D:9F:D8:E9:23:53:53:53:11:D1:3F:99:1B:64:4F:C2:E7
            X509v3 Authority Key Identifier:
                keyid:53:B0:E6:84:E1:CD:DB:34:9F:5B:A8:48:2F:99:BE:87:D3:AF:E6:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/53B0E684E1CDDB349F5BA8482F99BE87D3AFE6E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/53B0E684E1CDDB349F5BA8482F99BE87D3AFE6E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3230312e3135302e3134342e302f32322d3232203d3e20323639303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:c6:e7:20:10:e1:56:f0:4a:6c:eb:9c:b3:82:df:f5:dd:a0:
         8c:4c:b7:06:2a:2f:86:dc:64:43:12:53:08:7f:3a:07:96:0b:
         aa:b2:5d:5d:86:b7:f4:c9:a2:a4:af:c3:9e:b0:09:3a:9a:b6:
         e1:1f:87:41:a7:fe:1f:d2:b8:e5:f7:f2:ed:a4:45:2d:54:bf:
         da:f8:8a:34:09:2e:d2:e6:93:89:52:3f:d8:72:92:5f:5d:2b:
         71:26:f1:72:70:77:09:21:9b:07:b5:2d:2f:f7:57:8c:b5:4d:
         04:37:c7:5b:8b:af:04:ff:70:59:14:6d:32:0e:f3:2b:94:c6:
         ec:9e:fa:25:ca:31:59:42:79:b0:44:aa:20:a9:75:02:b0:87:
         47:90:a0:69:8e:e6:47:c4:32:94:05:a9:13:4b:88:77:a6:24:
         27:8d:99:64:27:8e:6f:9c:9f:af:df:30:ec:d9:b7:6e:77:4e:
         ca:51:2e:34:ca:38:33:38:0d:62:36:60:5f:05:f6:dc:43:53:
         dd:36:fc:3f:c4:a9:8d:d1:45:06:05:c0:7b:c2:d1:aa:36:b3:
         ad:ae:c7:b2:f2:74:5a:77:ce:1e:d2:a9:6d:33:09:0c:76:de:
         6d:0c:78:d4:36:09:39:e7:7c:76:03:f6:fe:48:ed:a0:f8:d5:
         d4:b5:e7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org