Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3230372e3234382e32382e302f32322d3233203d3e20323639303733.roa
File:                     3230372e3234382e32382e302f32322d3233203d3e20323639303733.roa (raw, json)
Hash identifier:          yx3WS03IMZc/9ANeodjNmzWugFCzVQFh0JwPROzg9Tw=
Subject key identifier:   E8:92:95:BC:EF:9E:11:65:03:24:E6:59:79:E0:EF:26:45:9C:07:84
Certificate issuer:       /CN=53B0E684E1CDDB349F5BA8482F99BE87D3AFE6E3
Certificate serial:       17BDA2262C5BD371762889A66B5A9267EC23B9D4
Authority key identifier: 53:B0:E6:84:E1:CD:DB:34:9F:5B:A8:48:2F:99:BE:87:D3:AF:E6:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/53B0E684E1CDDB349F5BA8482F99BE87D3AFE6E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3230372e3234382e32382e302f32322d3233203d3e20323639303733.roa
Signing time:             Thu 11 Apr 2024 11:00:00 +0000
ROA not before:           Thu 11 Apr 2024 10:55:00 +0000
ROA not after:            Thu 10 Apr 2025 11:00:00 +0000
asID:                     269073
IP address blocks:        207.248.28.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:bd:a2:26:2c:5b:d3:71:76:28:89:a6:6b:5a:92:67:ec:23:b9:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53B0E684E1CDDB349F5BA8482F99BE87D3AFE6E3
        Validity
            Not Before: Apr 11 10:55:00 2024 GMT
            Not After : Apr 10 11:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:cd:6d:00:b3:f6:7a:41:f5:9d:98:f0:e8:05:
                    d0:a9:bf:76:e4:5a:c9:f6:f8:93:18:db:10:a4:6a:
                    13:bf:7b:bb:96:79:27:1e:62:b7:07:91:bc:e8:1e:
                    9c:03:1c:f0:9b:00:e9:79:24:ee:d1:5f:a4:7f:6a:
                    62:f0:fd:a7:5c:5f:f3:f1:b6:15:c0:d0:94:3f:13:
                    f5:dc:97:3e:96:b7:8f:7d:7d:f1:b7:1e:aa:30:12:
                    9a:9a:9b:54:5d:b4:3f:7c:d0:31:62:ad:f7:a1:82:
                    1e:26:13:cf:ee:50:bb:3e:51:28:cd:30:3c:e6:d1:
                    a1:6f:a7:a4:c1:fe:fe:cd:e9:0b:c4:c9:de:77:2f:
                    b3:02:60:13:dd:f9:33:12:65:97:eb:ee:8d:58:17:
                    ec:43:37:e9:cb:a9:bc:5b:91:c5:47:64:d5:f9:02:
                    1e:1f:0c:51:35:af:35:0b:6b:87:45:d1:53:1f:09:
                    63:12:05:bb:27:b4:32:dd:b0:cc:7d:2c:eb:f9:72:
                    d1:5d:8c:80:36:e6:86:f7:2e:3f:b1:fb:81:2c:68:
                    85:0f:99:2c:f9:13:2b:d0:36:be:10:ec:25:3e:04:
                    2f:9a:2f:d8:22:66:68:da:10:83:0d:99:a8:ce:fe:
                    77:c4:de:24:a4:8c:7f:7d:f0:9e:44:30:70:12:09:
                    12:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:92:95:BC:EF:9E:11:65:03:24:E6:59:79:E0:EF:26:45:9C:07:84
            X509v3 Authority Key Identifier:
                keyid:53:B0:E6:84:E1:CD:DB:34:9F:5B:A8:48:2F:99:BE:87:D3:AF:E6:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/53B0E684E1CDDB349F5BA8482F99BE87D3AFE6E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/53B0E684E1CDDB349F5BA8482F99BE87D3AFE6E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3230372e3234382e32382e302f32322d3233203d3e20323639303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:b9:e5:ca:7c:0c:c2:e7:75:d2:36:7f:23:5c:6d:3d:3d:b9:
         4c:be:e5:a1:9d:47:e8:f5:4e:d2:80:2b:0e:b2:0f:73:eb:45:
         61:37:c5:13:b0:1d:9e:06:3d:7c:7f:1f:08:4d:50:2a:a6:a1:
         61:89:9f:a8:a2:b0:02:2d:a9:e9:c3:8d:1c:da:96:2e:00:90:
         32:fd:fa:f9:e0:d9:db:30:c0:12:04:1e:ed:f0:a4:fa:b2:62:
         12:61:2a:54:60:08:d1:31:8c:c1:63:53:41:bd:c4:5d:09:53:
         e9:81:7d:10:b2:90:a8:1a:b5:0e:1c:4b:00:5e:78:c8:40:4f:
         c4:9c:aa:9a:c2:46:83:fc:78:ed:69:66:e3:7c:cb:c7:4a:20:
         34:e7:c8:56:5d:9d:3f:af:a9:1c:ab:d0:9a:f3:f0:9e:a1:d8:
         8e:9d:98:d2:d6:d5:f0:19:ad:95:eb:c4:65:33:32:50:90:35:
         75:37:26:7a:83:a1:de:43:33:f0:2e:a4:e2:7a:f5:94:7c:9a:
         98:e0:b5:ba:81:e3:bf:47:4b:f5:5a:be:56:b2:e9:ad:9c:f6:
         59:df:e5:7a:4c:7a:62:9c:57:d9:2d:96:cf:dc:d2:96:a3:89:
         32:c3:ce:d4:a9:d7:1a:cf:d6:17:2c:6b:2d:f9:6c:da:6a:09:
         fb:ca:ee:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:02 2024 by rpki-client on console-ams.rpki-client.org