Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38302e302f32312d3231203d3e203232373036.roa
File:                     3230302e3135322e38302e302f32312d3231203d3e203232373036.roa (raw, json)
Hash identifier:          Vsf1ylOghyNKI/OEh8JUEO//1vbvUhGrRX8bDpgADTY=
Subject key identifier:   C6:D0:54:66:D5:43:61:D7:E7:FA:67:44:E0:62:00:41:4D:D8:5D:C3
Certificate issuer:       /CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
Certificate serial:       01DFEDA30D9155AD17F7C6E08BA75068849AB321
Authority key identifier: 5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38302e302f32312d3231203d3e203232373036.roa
Signing time:             Mon 09 Jan 2023 12:57:11 +0000
ROA not before:           Mon 09 Jan 2023 12:52:11 +0000
ROA not after:            Mon 08 Jan 2024 12:57:11 +0000
asID:                     22706
IP address blocks:        200.152.80.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:df:ed:a3:0d:91:55:ad:17:f7:c6:e0:8b:a7:50:68:84:9a:b3:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
        Validity
            Not Before: Jan  9 12:52:11 2023 GMT
            Not After : Jan  8 12:57:11 2024 GMT
        Subject: CN=C6D05466D54361D7E7FA6744E06200414DD85DC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:78:2a:18:a2:fa:08:2d:ea:e0:82:eb:be:76:
                    d3:90:e6:ae:4e:b7:72:5b:6e:d7:67:bd:82:40:ba:
                    51:23:3d:54:36:a4:07:db:fb:b7:3e:3b:c2:c5:30:
                    90:2f:83:95:38:5a:a3:c7:35:5e:1c:4f:7c:85:78:
                    a5:b2:ea:28:15:38:a0:17:96:a5:60:9a:8e:29:42:
                    e2:30:91:ce:fc:6f:ee:81:1e:1a:4b:15:14:cc:7c:
                    83:06:5b:bc:13:76:b7:14:47:c6:ff:63:e4:02:64:
                    e1:cd:89:82:8f:5d:a8:e8:0b:80:e6:ee:7c:de:df:
                    44:91:24:e9:54:49:e8:b2:be:81:e2:a0:a4:da:e5:
                    79:0d:4a:ce:42:b5:7d:f8:d0:15:d9:83:8b:3e:90:
                    e6:4c:23:c0:04:d2:e4:c5:d3:43:cd:d8:32:a6:1b:
                    f8:e3:42:0a:57:00:63:3a:31:69:e3:3c:ef:be:98:
                    e3:74:ad:9b:e6:c8:04:35:9a:6f:61:e5:56:e7:96:
                    97:0d:dc:54:53:91:c4:29:bf:a8:10:a3:39:6c:f5:
                    65:43:54:79:45:5b:0a:ef:ce:dc:42:3e:a3:9d:3b:
                    81:8c:67:ae:f2:d3:b5:8c:a5:fd:49:43:a7:65:bc:
                    dd:15:54:91:20:90:70:dd:3c:3d:5d:cc:6f:f3:52:
                    30:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:D0:54:66:D5:43:61:D7:E7:FA:67:44:E0:62:00:41:4D:D8:5D:C3
            X509v3 Authority Key Identifier:
                keyid:5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38302e302f32312d3231203d3e203232373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         34:66:9f:f4:b5:ba:42:0e:f7:46:81:c5:04:01:35:0f:3f:c1:
         49:e3:ce:d6:f8:b0:e2:b2:ee:a5:21:dc:c3:3a:71:35:fd:4a:
         1d:b0:a2:11:e3:30:15:65:11:3e:f0:a1:4b:97:e0:0e:82:23:
         64:12:45:cd:fa:02:51:71:99:7f:2d:12:84:48:e9:b3:9e:5b:
         04:1c:eb:18:f9:04:50:66:d2:7a:8b:0d:aa:9b:29:b9:74:4f:
         f2:71:66:90:59:47:ac:e5:15:d7:d6:2b:83:d4:63:30:20:ca:
         d8:b4:80:8c:f8:51:03:83:d1:29:8b:09:4b:6a:41:44:a9:70:
         4d:b1:ab:62:7c:ac:3c:1e:e7:bd:cf:fe:99:14:62:35:9a:7a:
         05:e5:37:6e:e0:25:cd:dc:40:a5:b0:a3:b5:16:ee:dc:4b:01:
         2a:b3:00:19:54:28:3b:f1:1d:12:ec:ad:1e:94:e4:29:d4:08:
         29:38:4e:a3:73:6f:e9:19:ef:72:2e:b8:12:15:8a:87:7b:4f:
         04:2b:93:5d:35:64:9e:03:dc:45:fb:50:a2:2e:c6:95:79:98:
         10:4b:ec:bd:f7:d9:fc:80:01:27:a6:bc:3c:55:5e:de:47:41:
         cf:95:e8:05:11:21:3f:a2:eb:fc:b7:e3:6f:b6:d1:4b:30:8f:
         8d:7b:db:8f
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUAd/tow2RVa0X98bgi6dQaISasyEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQ3Njc2NjQzOTcxNkREOUE2MUM0NzE3REU5NkFGRTUz
MUE4QUMzRTAeFw0yMzAxMDkxMjUyMTFaFw0yNDAxMDgxMjU3MTFaMDMxMTAvBgNV
BAMTKEM2RDA1NDY2RDU0MzYxRDdFN0ZBNjc0NEUwNjIwMDQxNEREODVEQzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCseCoYovoILergguu+dtOQ5q5O
t3JbbtdnvYJAulEjPVQ2pAfb+7c+O8LFMJAvg5U4WqPHNV4cT3yFeKWy6igVOKAX
lqVgmo4pQuIwkc78b+6BHhpLFRTMfIMGW7wTdrcUR8b/Y+QCZOHNiYKPXajoC4Dm
7nze30SRJOlUSeiyvoHioKTa5XkNSs5CtX340BXZg4s+kOZMI8AE0uTF00PN2DKm
G/jjQgpXAGM6MWnjPO++mON0rZvmyAQ1mm9h5VbnlpcN3FRTkcQpv6gQozls9WVD
VHlFWwrvztxCPqOdO4GMZ67y07WMpf1JQ6dlvN0VVJEgkHDdPD1dzG/zUjCdAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUxtBUZtVDYdfn+mdE4GIAQU3YXcMwHwYDVR0j
BBgwFoAUXXZ2ZDlxbdmmHEcX3pav5TGorD4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3Aya3V4V1l3Q0QyWnVQRmJpTFV0SlBoQW05YjgyMlZyQ01YcjNNRU40
bVkvMC81RDc2NzY2NDM5NzE2REQ5QTYxQzQ3MTdERTk2QUZFNTMxQThBQzNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVENzY3NjY0Mzk3MTZERDlB
NjFDNDcxN0RFOTZBRkU1MzFBOEFDM0UuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NwMmt1eFdZd0NEMlp1UEZiaUxVdEpQaEFtOWI4MjJWckNNWHIzTUVONG1ZLzAv
MzIzMDMwMmUzMTM1MzIyZTM4MzAyZTMwMmYzMjMxMmQzMjMxMjAzZDNlMjAzMjMy
MzczMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQDyJhQMA0GCSqGSIb3DQEBCwUAA4IBAQA0Zp/0tbpC
DvdGgcUEATUPP8FJ487W+LDisu6lIdzDOnE1/UodsKIR4zAVZRE+8KFLl+AOgiNk
EkXN+gJRcZl/LRKESOmznlsEHOsY+QRQZtJ6iw2qmym5dE/ycWaQWUes5RXX1iuD
1GMwIMrYtICM+FEDg9EpiwlLakFEqXBNsatifKw8Hue9z/6ZFGI1mnoF5Tdu4CXN
3EClsKO1Fu7cSwEqswAZVCg78R0S7K0elOQp1AgpOE6jc2/pGe9yLrgSFYqHe08E
K5NdNWSeA9xF+1CiLsaVeZgQS+y999n8gAEnprw8VV7eR0HPlegFESE/ouv8t+Nv
ttFLMI+Ne9uP
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org