Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38302e302f32302d3234203d3e203232373036.roa
File:                     3230302e3135322e38302e302f32302d3234203d3e203232373036.roa (raw, json)
Hash identifier:          SrYCDWbXnyFlZJgmXjDQcQ7IDHpg/nSZQLvPfNrG2kM=
Subject key identifier:   67:70:AF:75:49:B0:6C:55:A1:3C:99:9F:A4:3F:45:3D:AB:87:06:F4
Certificate issuer:       /CN=8A06D83850FBF1E5B4D567F59587362D8D24F4B9
Certificate serial:       40238414CEE875B410A198BDA9BD5784E37338D2
Authority key identifier: 8A:06:D8:38:50:FB:F1:E5:B4:D5:67:F5:95:87:36:2D:8D:24:F4:B9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A06D83850FBF1E5B4D567F59587362D8D24F4B9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38302e302f32302d3234203d3e203232373036.roa
Signing time:             Fri 03 May 2024 20:56:42 +0000
ROA not before:           Fri 03 May 2024 20:51:42 +0000
ROA not after:            Fri 02 May 2025 20:56:42 +0000
asID:                     22706
IP address blocks:        200.152.80.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:23:84:14:ce:e8:75:b4:10:a1:98:bd:a9:bd:57:84:e3:73:38:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A06D83850FBF1E5B4D567F59587362D8D24F4B9
        Validity
            Not Before: May  3 20:51:42 2024 GMT
            Not After : May  2 20:56:42 2025 GMT
        Subject: CN=6770AF7549B06C55A13C999FA43F453DAB8706F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:99:6d:0a:a7:16:11:86:5b:a1:af:30:da:40:
                    fe:23:3a:69:fb:13:df:81:be:6d:5a:a4:4f:d1:c5:
                    43:26:a1:97:b7:f4:a8:c2:a9:a0:77:3b:da:25:6d:
                    54:96:e4:74:ce:03:17:8b:29:85:7c:4e:9f:31:51:
                    f7:e6:04:b5:fc:e6:67:d2:87:f1:9e:ca:1a:56:52:
                    0d:07:e9:df:a8:7f:0a:87:79:94:e8:12:60:09:df:
                    f6:34:12:c4:d1:54:2f:c4:57:52:93:aa:26:9c:88:
                    6e:d7:09:7f:d5:f2:1c:29:b2:08:87:26:d7:89:c0:
                    fd:89:aa:07:49:ec:c3:9f:67:c1:f0:0a:84:8c:31:
                    44:3e:af:c0:8f:e9:16:20:25:73:12:d7:38:5d:47:
                    f5:e5:36:e4:53:f0:cf:ce:dc:39:c0:37:34:ca:af:
                    e8:6b:10:31:c8:9f:d5:b8:09:9f:67:9a:20:f4:ca:
                    66:b0:11:61:2e:9e:0c:6b:6f:42:5f:12:9a:ce:37:
                    55:34:05:03:3e:a1:fa:d2:56:b9:a9:c0:7f:52:b7:
                    e9:17:37:93:2c:f4:6e:68:4d:50:6c:47:82:f4:7d:
                    47:d8:0e:51:c0:b1:0e:3a:e6:37:00:91:da:74:8c:
                    02:4a:23:36:93:0b:a4:2b:d3:82:01:53:9b:ee:1a:
                    39:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:70:AF:75:49:B0:6C:55:A1:3C:99:9F:A4:3F:45:3D:AB:87:06:F4
            X509v3 Authority Key Identifier:
                keyid:8A:06:D8:38:50:FB:F1:E5:B4:D5:67:F5:95:87:36:2D:8D:24:F4:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/8A06D83850FBF1E5B4D567F59587362D8D24F4B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8A06D83850FBF1E5B4D567F59587362D8D24F4B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38302e302f32302d3234203d3e203232373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         65:41:5c:e2:93:75:42:e7:74:c6:8e:56:3a:3b:59:6b:36:5a:
         b0:46:d3:8c:ef:62:33:a0:6d:b5:9e:72:d0:e6:0b:b7:98:44:
         24:5c:90:00:9a:c0:49:67:c4:79:34:bd:6d:26:e5:6e:22:09:
         b4:11:bc:16:7e:27:ea:2e:f6:92:79:52:e7:e4:1b:3a:52:60:
         ba:df:38:ae:54:34:16:c4:7c:85:17:4f:bb:7e:b6:63:97:dc:
         24:f6:65:60:0e:e9:36:1b:0a:57:8c:72:5c:c5:bd:e4:33:5a:
         8b:af:e5:9c:0f:50:7d:39:58:9e:52:ce:df:8d:b7:5f:cf:87:
         a6:2b:4f:f2:39:d6:10:5e:43:e2:04:b7:08:cc:5a:17:f5:ce:
         60:4f:30:e8:1e:8f:93:e4:ae:f3:6d:94:8e:17:7c:ad:bd:a1:
         84:c8:eb:1f:21:d6:0a:89:68:2a:01:09:9d:f2:77:76:e3:4a:
         51:a6:f4:72:d5:b5:4c:12:88:17:ad:7f:f3:19:c1:66:39:28:
         05:13:86:e5:59:7d:60:61:f0:e9:54:57:7f:cd:97:47:96:7e:
         0e:9b:53:7f:d9:17:55:a4:48:f0:f2:be:03:e8:93:41:0f:eb:
         b5:ba:d9:b7:e2:b4:03:6e:e9:22:c5:df:fa:b9:f6:d2:e8:4f:
         1c:6e:fe:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org