Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3230372e3234382e32382e302f32322d3233203d3e20323731343432.roa
File:                     3230372e3234382e32382e302f32322d3233203d3e20323731343432.roa (raw, json)
Hash identifier:          Cjuj2wifoaW09Y7cvR7Vy535/16IIu0HSJXR2qDhIk4=
Subject key identifier:   D8:6B:E6:D9:1F:91:30:B9:D2:48:0D:26:92:82:FE:0A:41:CD:2C:42
Certificate issuer:       /CN=53B0E684E1CDDB349F5BA8482F99BE87D3AFE6E3
Certificate serial:       2C112216CDEEE7FDAA30E9342C066194D5BB0D12
Authority key identifier: 53:B0:E6:84:E1:CD:DB:34:9F:5B:A8:48:2F:99:BE:87:D3:AF:E6:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/53B0E684E1CDDB349F5BA8482F99BE87D3AFE6E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3230372e3234382e32382e302f32322d3233203d3e20323731343432.roa
Signing time:             Thu 04 May 2023 15:45:44 +0000
ROA not before:           Thu 04 May 2023 15:40:44 +0000
ROA not after:            Thu 02 May 2024 15:45:44 +0000
asID:                     271442
IP address blocks:        207.248.28.0/22 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:11:22:16:cd:ee:e7:fd:aa:30:e9:34:2c:06:61:94:d5:bb:0d:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53B0E684E1CDDB349F5BA8482F99BE87D3AFE6E3
        Validity
            Not Before: May  4 15:40:44 2023 GMT
            Not After : May  2 15:45:44 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:73:7c:c5:91:a2:b1:c4:62:94:eb:d0:bd:74:
                    c9:9b:9a:4c:bc:90:32:3b:ec:d5:8b:b7:5b:c1:0e:
                    6b:4c:67:97:63:0d:71:5a:81:cf:e6:83:99:f2:ba:
                    6e:d7:4f:64:45:74:35:b8:78:98:58:92:e2:8e:3a:
                    ca:75:6e:76:f0:ad:48:94:0a:98:93:84:83:d0:65:
                    27:b9:9f:c3:5c:12:ad:b0:c9:6e:f4:8b:3b:95:4e:
                    14:48:78:2b:b7:67:d9:3d:54:80:ad:53:43:8e:01:
                    86:df:99:cf:36:ee:d9:35:c4:f2:49:37:7a:50:4c:
                    ee:a3:fe:c6:11:9c:a7:d6:0b:83:b0:38:8f:78:d8:
                    71:0a:db:53:bc:7c:80:33:06:c8:c4:cf:9c:82:39:
                    0b:56:4d:0a:5a:3b:8b:ec:4b:28:6d:48:63:9a:2a:
                    9f:bc:14:53:d3:b5:57:9a:0d:b1:ba:7b:92:ea:47:
                    27:6c:b8:65:1e:54:33:06:6c:78:13:2c:5f:98:73:
                    42:be:1f:4d:7d:7b:54:2d:c4:8e:71:44:b2:59:57:
                    49:6a:3b:47:ba:2e:1d:22:11:92:0e:46:2c:c0:44:
                    c1:79:01:ac:ff:b2:57:a9:13:4c:58:58:a0:04:be:
                    ee:6c:fd:da:ba:81:b9:85:d6:0a:33:ee:ff:08:34:
                    12:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:6B:E6:D9:1F:91:30:B9:D2:48:0D:26:92:82:FE:0A:41:CD:2C:42
            X509v3 Authority Key Identifier:
                keyid:53:B0:E6:84:E1:CD:DB:34:9F:5B:A8:48:2F:99:BE:87:D3:AF:E6:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/53B0E684E1CDDB349F5BA8482F99BE87D3AFE6E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/53B0E684E1CDDB349F5BA8482F99BE87D3AFE6E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BvGzH6Pqd79p339G3eD22s9RTKUygLoNXNEhvNZqzv93/0/3230372e3234382e32382e302f32322d3233203d3e20323731343432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:69:a7:6f:ac:41:fc:e3:e9:fd:4e:87:46:ee:a8:d3:28:4b:
         fb:ab:85:39:40:a6:49:fa:97:16:e2:2f:28:89:38:7c:cc:50:
         30:23:73:28:f7:e7:f1:26:ad:18:0b:cb:38:28:01:1a:65:6b:
         0b:9d:6c:28:95:30:53:a9:ff:fd:de:ac:d0:29:f3:f3:21:81:
         1d:51:a8:8b:68:83:fd:21:88:2c:72:37:5e:e5:e2:8d:64:70:
         7d:11:74:13:73:66:b6:91:a1:05:42:90:1b:13:04:0f:c2:a7:
         8c:cf:ba:98:57:71:72:59:d7:0e:df:c2:43:2b:80:7d:16:e2:
         91:a8:58:60:f4:37:7f:a3:21:b5:13:73:71:09:22:31:40:d6:
         3f:0a:1f:7b:36:6e:50:5f:b8:9e:fa:fc:1e:00:d4:3c:5c:c7:
         b1:35:08:95:ae:e1:85:36:56:ea:9f:e2:b2:ee:e3:ae:75:42:
         f8:c7:26:67:b2:20:79:0f:5e:99:32:ba:ac:99:fa:a5:9b:7c:
         6d:fb:e2:16:6a:bf:3c:33:66:84:ea:90:5b:f4:2c:70:67:a4:
         50:8b:bd:86:02:b6:08:df:0a:6c:a6:43:ba:42:eb:0f:f4:4e:
         c8:a9:29:e2:15:c4:8a:11:06:75:b3:a1:8d:6b:30:5f:af:a3:
         55:e5:c3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:02 2024 by rpki-client on console-ams.rpki-client.org