Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38302e302f32322d3232203d3e203232373036.roa
File:                     3230302e3135322e38302e302f32322d3232203d3e203232373036.roa (raw, json)
Hash identifier:          2sgH+oJ0agqKAT5OcHzkoUSkb9DUNdrNVHb4JNrOtKM=
Subject key identifier:   B1:2C:95:80:06:42:86:B2:8C:FF:D7:A3:1C:D1:51:5F:D0:AA:CA:85
Certificate issuer:       /CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
Certificate serial:       29F4D67159ACC030E9A787E7114A982E57F4B724
Authority key identifier: 5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38302e302f32322d3232203d3e203232373036.roa
Signing time:             Tue 10 Jan 2023 09:23:33 +0000
ROA not before:           Tue 10 Jan 2023 09:18:33 +0000
ROA not after:            Tue 09 Jan 2024 09:23:33 +0000
asID:                     22706
IP address blocks:        200.152.80.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:f4:d6:71:59:ac:c0:30:e9:a7:87:e7:11:4a:98:2e:57:f4:b7:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
        Validity
            Not Before: Jan 10 09:18:33 2023 GMT
            Not After : Jan  9 09:23:33 2024 GMT
        Subject: CN=B12C9580064286B28CFFD7A31CD1515FD0AACA85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:68:19:a1:7c:7f:d8:04:1f:e2:cf:7d:27:a0:
                    16:50:af:1f:cd:db:ba:b1:a7:19:f6:78:f1:64:fd:
                    a6:8b:51:79:c7:42:79:c6:e0:c7:b1:07:bb:39:76:
                    f8:b8:ef:fc:b2:95:63:31:3b:43:e3:40:4c:22:6c:
                    86:2d:c6:70:90:48:a4:42:02:e1:de:a1:d5:f1:c8:
                    f8:89:83:60:8e:47:dc:10:bd:1b:77:64:55:4b:ce:
                    c5:4e:5a:da:81:58:d5:c1:5e:e3:2a:e3:b6:db:d0:
                    74:5a:ea:73:2b:98:b6:ef:e6:8a:ab:0a:37:b1:a1:
                    b5:74:49:39:10:38:6b:79:2a:21:05:a1:b1:0b:3a:
                    4a:26:1b:6c:92:d8:c0:eb:83:9b:f9:0d:cb:36:b6:
                    d2:2f:e6:c2:56:0a:f1:53:30:c5:bc:73:60:81:81:
                    e6:8e:17:2c:49:ba:4c:0e:dc:9b:fa:a7:78:ce:ce:
                    18:71:f0:bf:e3:5a:5a:60:98:01:b2:aa:ad:f9:9a:
                    85:49:bf:c7:af:35:e8:ff:c4:e8:5e:d3:40:fc:c1:
                    1f:21:f7:39:69:be:be:f8:43:0b:18:5c:26:ef:66:
                    e4:e0:38:3a:5e:b7:42:39:40:59:54:37:9f:39:81:
                    cb:65:39:5a:92:79:1b:fa:e9:a2:19:49:e7:2b:6e:
                    80:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:2C:95:80:06:42:86:B2:8C:FF:D7:A3:1C:D1:51:5F:D0:AA:CA:85
            X509v3 Authority Key Identifier:
                keyid:5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38302e302f32322d3232203d3e203232373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.80.0/22

    Signature Algorithm: sha256WithRSAEncryption
         19:c5:23:c2:04:34:d2:ad:b7:0c:0e:d0:69:b4:57:49:0a:69:
         1b:e2:d7:7e:12:98:8e:12:62:4e:3e:32:d6:95:db:ff:6a:66:
         cd:c0:30:06:76:b1:14:3b:c8:16:88:77:f5:08:3f:2c:ef:01:
         78:8c:3f:66:da:47:b9:fa:b5:ba:25:82:dc:9f:1f:d7:cd:96:
         f3:1f:34:aa:2d:1f:f1:2b:bc:c8:8b:96:4a:c1:9a:11:f5:a0:
         97:79:76:63:d9:a5:cf:ef:5c:6a:7b:f6:25:57:4c:cd:e0:17:
         d2:c9:1f:82:77:20:61:06:17:83:ba:50:f8:13:3b:83:3d:5f:
         0b:84:04:73:f3:08:60:80:59:96:07:4d:5f:54:6e:1d:4f:59:
         41:6b:01:6a:92:3f:81:6a:be:2e:10:3d:63:8e:96:96:c9:14:
         00:10:46:24:b3:d4:a3:8b:69:eb:30:d5:4f:5e:5d:99:ae:bd:
         6f:11:87:e5:cc:b4:e6:ac:3d:ff:45:0e:97:44:1d:c5:ff:31:
         96:77:ba:9c:f0:88:0b:b8:a0:30:42:c2:25:16:10:bd:d5:d2:
         7c:ef:28:a6:c7:a2:6d:64:8a:23:0d:14:97:d8:99:60:81:55:
         66:bc:1a:f4:c4:d2:e8:4b:c0:29:46:6a:9d:71:05:62:8d:d3:
         d3:d7:1b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org