Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/1/3230302e35332e33302e302f32342d3234203d3e203533303632.roa
File:                     3230302e35332e33302e302f32342d3234203d3e203533303632.roa (raw, json)
Hash identifier:          I4250gRQljEiiWUc4h6HM//SppqRYI2b2ARXB9TfUJQ=
Subject key identifier:   8A:A6:DE:6D:6B:6F:6B:F8:0B:C3:FD:D6:06:43:5F:6C:18:60:8C:45
Certificate issuer:       /CN=F0EC5B53A8430F1A639383DFA83E56A37D3A7A0D
Certificate serial:       671D70F08BBA3EA7C39D7C1A935D41C790262588
Authority key identifier: F0:EC:5B:53:A8:43:0F:1A:63:93:83:DF:A8:3E:56:A3:7D:3A:7A:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0EC5B53A8430F1A639383DFA83E56A37D3A7A0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/1/3230302e35332e33302e302f32342d3234203d3e203533303632.roa
Signing time:             Wed 03 Apr 2024 21:39:08 +0000
ROA not before:           Wed 03 Apr 2024 21:34:08 +0000
ROA not after:            Wed 02 Apr 2025 21:39:08 +0000
asID:                     53062
IP address blocks:        200.53.30.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:1d:70:f0:8b:ba:3e:a7:c3:9d:7c:1a:93:5d:41:c7:90:26:25:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0EC5B53A8430F1A639383DFA83E56A37D3A7A0D
        Validity
            Not Before: Apr  3 21:34:08 2024 GMT
            Not After : Apr  2 21:39:08 2025 GMT
        Subject: CN=8AA6DE6D6B6F6BF80BC3FDD606435F6C18608C45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:d1:2f:d2:3d:24:8f:2b:11:4b:4e:61:cd:f1:
                    cb:2c:a2:41:43:74:0d:8d:c5:f6:8f:6a:30:84:4d:
                    9d:30:bf:0d:b0:ba:b7:e2:a5:e9:b9:87:7b:14:30:
                    7c:8d:ee:0f:ab:7e:f8:4a:73:b2:7a:52:21:db:e9:
                    7d:36:a8:ec:bc:42:5d:37:31:0b:5d:70:74:a7:f0:
                    d8:ad:45:aa:09:75:f2:4e:cb:64:5a:83:03:9a:a2:
                    5c:51:42:83:67:cc:c2:98:cf:92:25:66:25:9f:1f:
                    a5:74:2d:d7:fb:5e:da:06:8b:c3:73:1b:c9:fd:b6:
                    21:1b:52:b1:e5:e4:9d:f5:cf:a2:81:f7:08:6b:98:
                    61:fd:88:8b:c0:77:6d:9f:36:43:c9:19:31:80:bd:
                    0b:c3:ba:c7:78:80:2f:d9:e4:7d:55:3a:a1:cc:01:
                    fd:94:7b:f4:7d:30:0b:9b:2e:3e:11:0f:53:35:24:
                    73:20:2a:02:86:97:db:d7:a9:f3:9f:9c:e9:67:29:
                    8d:a7:08:7c:f5:b9:b7:37:a3:ef:6c:40:bb:d0:2c:
                    12:28:28:b1:44:4d:75:e8:3d:64:5b:d6:6e:30:0b:
                    d2:df:ba:35:b6:50:7c:25:46:ba:24:8f:db:5a:ea:
                    79:fe:a3:59:4e:22:b1:d2:6f:45:e2:f9:e7:fe:25:
                    5e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:A6:DE:6D:6B:6F:6B:F8:0B:C3:FD:D6:06:43:5F:6C:18:60:8C:45
            X509v3 Authority Key Identifier:
                keyid:F0:EC:5B:53:A8:43:0F:1A:63:93:83:DF:A8:3E:56:A3:7D:3A:7A:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/1/F0EC5B53A8430F1A639383DFA83E56A37D3A7A0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0EC5B53A8430F1A639383DFA83E56A37D3A7A0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/1/3230302e35332e33302e302f32342d3234203d3e203533303632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.53.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:b4:8b:43:07:49:58:ad:6d:27:23:18:8d:1a:97:be:6d:ba:
         52:4f:cd:41:4a:fa:0d:31:fc:e0:9f:e2:76:b8:f2:ee:0d:cb:
         63:61:3c:27:fd:ce:9d:e1:84:33:3b:00:3a:dd:0b:b0:8a:0b:
         dc:c4:8e:c6:b4:46:3f:e5:77:8c:a9:42:d6:0c:0c:0a:c3:cd:
         f1:eb:ad:80:4f:be:73:c9:75:ae:92:0d:ba:3f:ec:a7:e6:50:
         34:8c:fd:b8:9e:ba:36:51:95:76:a8:9e:4c:79:f0:b0:70:57:
         31:52:56:bd:7f:56:aa:43:0d:6f:a0:87:20:6a:78:9d:e5:26:
         b7:40:a3:d9:ad:bf:bb:99:aa:c1:28:fb:4c:41:23:ae:31:4e:
         8d:ac:a7:14:9e:48:e8:bd:75:c0:88:fa:b1:aa:bc:51:5f:14:
         50:84:74:37:3a:49:c4:82:83:6b:ba:66:a3:ea:71:50:b3:dd:
         46:9d:7a:d9:6c:a5:36:b5:56:3e:d8:2c:e9:1d:e4:50:ce:72:
         3d:9e:7a:37:63:95:fd:8b:50:13:07:b6:12:00:88:70:b9:c9:
         c8:24:1a:79:d4:1f:b7:84:46:e3:13:ce:33:b4:c9:8c:02:6b:
         ef:77:4b:ad:ab:d1:03:e3:3d:77:01:e0:ae:3d:b4:da:f8:22:
         8c:15:0f:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 05:05:46 2024 by rpki-client on console-ams.rpki-client.org