Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fyq5Pd5SHowmEwmqdN4ivBJTZBLv14yazRkWRq6BmzVe/0/3230302e35332e36382e302f32332d3233203d3e20323731333034.roa
File:                     3230302e35332e36382e302f32332d3233203d3e20323731333034.roa (raw, json)
Hash identifier:          93R8pys1f9LTo7kiECMIJ1VjTmDlz8fs0gRt676rUw0=
Subject key identifier:   D1:9D:B8:AB:2F:7B:28:64:49:F9:70:53:14:04:9D:E4:4E:90:BE:DB
Certificate issuer:       /CN=DF1BF4C8AF5714489FC67733E3835BAE3260825C
Certificate serial:       3489DADFCAC532E2BD0674CDC1FE8C28FFCC2430
Authority key identifier: DF:1B:F4:C8:AF:57:14:48:9F:C6:77:33:E3:83:5B:AE:32:60:82:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DF1BF4C8AF5714489FC67733E3835BAE3260825C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fyq5Pd5SHowmEwmqdN4ivBJTZBLv14yazRkWRq6BmzVe/0/3230302e35332e36382e302f32332d3233203d3e20323731333034.roa
Signing time:             Fri 20 Oct 2023 00:00:00 +0000
ROA not before:           Thu 19 Oct 2023 23:55:00 +0000
ROA not after:            Fri 18 Oct 2024 00:00:00 +0000
asID:                     271304
IP address blocks:        200.53.68.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:89:da:df:ca:c5:32:e2:bd:06:74:cd:c1:fe:8c:28:ff:cc:24:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF1BF4C8AF5714489FC67733E3835BAE3260825C
        Validity
            Not Before: Oct 19 23:55:00 2023 GMT
            Not After : Oct 18 00:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e3:ce:60:5b:08:af:c1:be:b2:b1:9f:78:f3:
                    fe:9d:53:0d:ab:d4:ae:b5:08:7a:8f:2d:a4:bf:9d:
                    ad:86:a6:7d:c7:9d:c9:84:9c:5b:5d:c0:e6:a8:90:
                    c8:c3:78:d0:6d:f2:ab:fb:e0:c1:42:d2:e2:37:3d:
                    80:38:75:26:79:07:7a:dc:db:09:3b:69:bc:fd:58:
                    fc:8b:ff:b6:b1:80:80:7b:71:e1:62:c3:c1:0c:0b:
                    d8:44:c6:00:98:4f:d7:be:b2:1c:a9:06:5c:41:d3:
                    16:40:6b:a3:0c:0e:26:b7:81:60:f1:95:06:55:e4:
                    33:c7:7d:13:0d:34:e1:38:17:bb:ce:98:07:38:0d:
                    8f:69:5d:cc:44:ea:ff:fc:37:40:f0:df:8f:5f:c0:
                    06:79:65:ab:ff:95:bf:d5:1a:ca:42:d5:37:71:32:
                    e2:a6:51:6e:75:97:89:f9:1d:ed:ae:33:1a:cf:d9:
                    49:ee:6d:a6:15:99:e2:f2:0b:94:d1:89:06:4e:13:
                    24:0b:f2:1b:20:b7:4f:eb:bb:20:2b:3d:92:12:ff:
                    33:b6:05:15:4c:be:cb:60:1c:99:28:62:bc:33:9b:
                    f1:d9:0c:d5:5e:b0:af:f2:fd:de:40:01:3f:6f:1a:
                    55:a9:8f:49:9e:82:d5:d8:90:ee:71:ea:78:5b:a3:
                    49:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:9D:B8:AB:2F:7B:28:64:49:F9:70:53:14:04:9D:E4:4E:90:BE:DB
            X509v3 Authority Key Identifier:
                keyid:DF:1B:F4:C8:AF:57:14:48:9F:C6:77:33:E3:83:5B:AE:32:60:82:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fyq5Pd5SHowmEwmqdN4ivBJTZBLv14yazRkWRq6BmzVe/0/DF1BF4C8AF5714489FC67733E3835BAE3260825C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DF1BF4C8AF5714489FC67733E3835BAE3260825C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fyq5Pd5SHowmEwmqdN4ivBJTZBLv14yazRkWRq6BmzVe/0/3230302e35332e36382e302f32332d3233203d3e20323731333034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         92:7c:ce:c1:c9:4d:03:f0:f4:06:f3:b6:07:7c:ab:5d:44:9e:
         01:90:a5:20:bf:46:ab:2b:97:6f:4f:8c:35:e7:50:93:44:49:
         88:c9:1c:e6:d9:c1:fa:09:71:7c:b7:0e:07:c0:fb:12:c4:21:
         47:14:de:a6:8f:b6:da:0f:e4:58:4c:47:9f:b0:ca:e7:33:65:
         c2:6c:b0:da:14:c7:9a:84:bf:73:69:4c:b8:56:bd:df:a7:cb:
         f8:ee:14:79:bf:99:4d:f8:63:60:03:bd:fd:87:9e:2f:df:66:
         f4:27:e8:f0:c7:bf:a3:13:40:81:ef:0c:1a:8f:35:10:82:44:
         63:9d:ea:30:8c:01:34:5f:dc:37:26:3f:b1:e6:15:74:30:88:
         29:19:d5:76:f1:af:b5:ad:33:9d:67:4d:34:79:61:e2:3e:32:
         4e:ac:98:05:be:94:24:30:f7:39:e8:5a:16:c7:c4:77:fb:ed:
         8a:fa:df:52:43:c9:3c:88:a9:81:d1:fe:98:3f:c5:d3:a1:81:
         76:37:9c:96:bd:74:9a:e4:8e:e2:16:a4:82:3d:56:4a:06:90:
         fd:22:09:2f:ea:91:c6:27:b8:75:de:81:7c:8d:77:2f:8d:de:
         45:a6:88:d8:0b:ff:a1:3c:b7:b0:65:90:da:b1:7b:17:9b:86:
         7d:09:a7:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org