Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/1/3230302e35332e31362e302f32302d3234203d3e20323632333931.roa
File:                     3230302e35332e31362e302f32302d3234203d3e20323632333931.roa (raw, json)
Hash identifier:          6vPbyXXs5isFW2dQhlk7SlrlwSiEM0vXJI52pldFfe8=
Subject key identifier:   A7:77:38:18:06:20:84:FC:BF:17:14:24:C4:22:BD:EE:83:CE:3C:13
Certificate issuer:       /CN=F0EC5B53A8430F1A639383DFA83E56A37D3A7A0D
Certificate serial:       5A3071488A733A8951085B6946597A5716A2141D
Authority key identifier: F0:EC:5B:53:A8:43:0F:1A:63:93:83:DF:A8:3E:56:A3:7D:3A:7A:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0EC5B53A8430F1A639383DFA83E56A37D3A7A0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/1/3230302e35332e31362e302f32302d3234203d3e20323632333931.roa
Signing time:             Wed 03 Apr 2024 21:39:07 +0000
ROA not before:           Wed 03 Apr 2024 21:34:07 +0000
ROA not after:            Wed 02 Apr 2025 21:39:07 +0000
asID:                     262391
IP address blocks:        200.53.16.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:30:71:48:8a:73:3a:89:51:08:5b:69:46:59:7a:57:16:a2:14:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0EC5B53A8430F1A639383DFA83E56A37D3A7A0D
        Validity
            Not Before: Apr  3 21:34:07 2024 GMT
            Not After : Apr  2 21:39:07 2025 GMT
        Subject: CN=A7773818062084FCBF171424C422BDEE83CE3C13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c8:a0:4b:4c:17:a0:28:52:b6:e1:fb:36:9f:
                    26:a6:36:cc:07:7b:9a:07:55:90:5b:83:d7:cb:54:
                    9e:87:e6:02:d2:ee:5e:7b:88:d9:8d:0b:e0:aa:55:
                    02:42:09:ea:6b:c8:3a:7a:5f:0a:58:44:ad:10:1d:
                    51:32:07:ba:e2:50:54:ff:97:7a:53:03:f4:5d:9d:
                    ff:bd:c2:c3:45:04:2e:99:c5:44:a5:98:a7:8f:87:
                    2f:8a:ce:c7:ba:e6:7a:9a:52:82:af:07:ea:aa:16:
                    03:c8:e8:b9:61:6a:0a:3c:de:87:8d:54:7b:a4:46:
                    c5:53:06:88:e5:4e:06:e0:0d:82:a8:f4:96:ff:c0:
                    e9:80:a5:c6:35:af:87:98:02:ec:27:19:f6:e6:75:
                    21:73:bd:9c:fe:3d:f0:70:6f:7d:93:27:ed:34:47:
                    b9:7c:6b:a0:b0:b5:95:ce:af:19:e1:38:f4:71:c4:
                    4a:8f:6e:35:e3:70:9d:00:ba:ee:cc:1d:da:09:e6:
                    fd:46:52:b4:f2:51:2c:09:03:e8:7a:44:66:2c:e0:
                    30:71:8d:11:30:7f:e1:b2:f1:6d:a0:a7:f5:16:71:
                    96:22:84:83:c1:00:1e:52:ce:3b:88:19:92:fc:2f:
                    72:b6:f5:c9:4b:bf:38:a1:38:f6:bb:5f:9e:bd:4f:
                    2e:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:77:38:18:06:20:84:FC:BF:17:14:24:C4:22:BD:EE:83:CE:3C:13
            X509v3 Authority Key Identifier:
                keyid:F0:EC:5B:53:A8:43:0F:1A:63:93:83:DF:A8:3E:56:A3:7D:3A:7A:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/1/F0EC5B53A8430F1A639383DFA83E56A37D3A7A0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0EC5B53A8430F1A639383DFA83E56A37D3A7A0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/1/3230302e35332e31362e302f32302d3234203d3e20323632333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         68:8e:3e:7e:7d:02:e3:0c:bf:78:69:c3:96:d9:4d:a1:8e:23:
         96:dc:e1:a7:49:7e:99:68:bd:6c:08:6f:c0:5c:aa:91:17:f7:
         00:b2:d3:af:b8:cd:8e:45:49:73:da:1c:36:73:fe:f5:5c:62:
         35:fd:15:b3:74:97:88:cb:57:dd:71:75:05:93:3f:7c:2e:72:
         6e:93:72:b3:15:40:7c:54:74:40:5c:20:4e:ff:96:9b:4a:2c:
         3c:d4:37:07:1a:78:0b:09:2e:51:82:44:da:f6:17:c8:5a:97:
         28:38:49:7d:fc:d3:3f:04:28:6f:9c:82:52:c7:8d:72:e9:1e:
         e9:50:b4:db:14:b1:48:08:96:1a:9f:4e:43:ca:ab:41:da:f7:
         db:74:28:63:e3:20:18:47:ad:d6:c8:57:6e:5b:c9:9a:96:cc:
         2e:d3:24:09:a8:24:15:07:a0:07:b1:85:31:bb:d6:bc:82:d8:
         56:e8:24:9c:c1:05:8f:8a:6e:c5:2f:7c:47:86:ac:ef:b5:eb:
         2e:c3:74:49:8c:ed:f6:71:96:6b:bd:8a:c3:b5:45:8b:7a:88:
         3c:77:83:8a:50:eb:11:07:b0:80:d2:0b:21:3c:4a:90:2a:9a:
         73:97:9c:6e:b1:6f:98:d5:83:86:c9:20:4f:84:fc:ef:82:d6:
         72:f4:cd:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 04:26:00 2024 by rpki-client on console-fra.rpki-client.org