Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38302e302f32342d3234203d3e203232373036.roa
File:                     3230302e3135322e38302e302f32342d3234203d3e203232373036.roa (raw, json)
Hash identifier:          DYNAnFBJ+F/T1CXNsO6khSHG+Pi47BExUqmlK/r8fJ8=
Subject key identifier:   DC:FB:A7:7A:1F:5A:62:4E:EA:B2:FF:02:62:38:37:94:25:20:B7:1F
Certificate issuer:       /CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
Certificate serial:       087BE32A2F9D35ACE56B41D350579474FAA4BF73
Authority key identifier: 5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38302e302f32342d3234203d3e203232373036.roa
Signing time:             Mon 09 Jan 2023 21:58:57 +0000
ROA not before:           Mon 09 Jan 2023 21:53:57 +0000
ROA not after:            Mon 08 Jan 2024 21:58:57 +0000
asID:                     22706
IP address blocks:        200.152.80.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:7b:e3:2a:2f:9d:35:ac:e5:6b:41:d3:50:57:94:74:fa:a4:bf:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
        Validity
            Not Before: Jan  9 21:53:57 2023 GMT
            Not After : Jan  8 21:58:57 2024 GMT
        Subject: CN=DCFBA77A1F5A624EEAB2FF02623837942520B71F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2b:8e:47:b4:e9:9a:01:f9:9f:73:36:d5:16:
                    ed:2b:07:be:f8:1e:3e:28:79:e9:df:66:6e:f1:39:
                    98:ab:65:78:c2:9f:5b:8d:78:5b:a0:69:f8:b4:30:
                    48:3e:91:7e:8e:93:68:93:c1:2f:13:b1:7f:fa:20:
                    3d:83:07:f6:74:43:67:af:b3:85:84:41:78:42:3c:
                    ed:7f:2c:1d:32:5f:51:47:73:ee:4a:03:c2:02:12:
                    58:09:63:f8:7a:42:32:8a:56:a8:54:a4:6f:86:fd:
                    00:fd:a0:50:73:7e:2e:21:7f:b8:47:36:50:68:18:
                    97:cc:c3:c4:db:73:b9:b1:ea:f2:31:3d:3a:1d:90:
                    a4:b1:ab:51:fe:27:fb:84:98:b6:e3:69:f6:3c:24:
                    6b:e4:0d:1f:65:c4:23:cb:70:49:ec:a3:a1:65:d6:
                    33:ca:ec:55:f0:28:47:1f:14:02:76:aa:94:df:0e:
                    48:10:5e:0b:2d:40:25:5a:71:a1:6f:8d:a7:df:d2:
                    b8:3a:a3:0b:62:97:ff:77:bd:0d:e6:a8:58:b7:a3:
                    2a:a6:ff:e0:fa:a5:f0:43:32:45:0e:21:28:2d:b4:
                    5f:7f:7c:09:3e:29:e8:2c:4d:f5:ba:b8:45:44:99:
                    86:6b:86:72:86:f9:04:dd:2b:33:db:84:e8:8f:9a:
                    ca:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:FB:A7:7A:1F:5A:62:4E:EA:B2:FF:02:62:38:37:94:25:20:B7:1F
            X509v3 Authority Key Identifier:
                keyid:5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38302e302f32342d3234203d3e203232373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:f5:2f:6e:c2:f6:16:8d:57:94:31:88:b6:40:29:75:a2:7a:
         8b:5b:73:af:a0:e4:40:f8:6e:e8:1b:ae:c9:52:8c:4b:20:f2:
         f7:15:d4:60:58:25:df:ec:25:0c:6d:3e:07:03:de:88:fd:6a:
         5d:1d:61:53:ef:e0:f9:61:2f:b5:9d:77:bd:c7:47:02:68:56:
         45:7b:cf:de:2b:ca:ab:92:b0:cd:47:97:41:87:ad:d1:e2:86:
         d2:54:87:42:45:3b:06:e7:ea:75:32:e6:a3:2a:47:2d:d7:a6:
         97:76:8d:b9:4e:e5:15:b7:9a:6b:8d:5b:80:ff:09:39:13:ad:
         1f:ef:1b:63:19:21:e5:3d:23:c1:1c:d6:c0:cb:f2:0b:a5:4f:
         6e:0a:b7:de:33:55:5f:fa:f5:ce:4b:48:48:34:5c:23:c0:54:
         d3:af:bd:6f:2f:d4:d7:2c:20:eb:1b:00:d5:84:52:00:bf:13:
         9a:58:06:6b:cc:4e:22:f6:8b:a4:06:d6:d5:8a:bc:f6:84:f4:
         d6:bb:65:43:76:83:b4:45:16:de:e8:6e:1d:6a:77:06:a7:c6:
         b9:f0:41:b2:94:fd:0a:ce:ec:20:1f:22:c2:c3:92:e2:7e:9f:
         39:91:9f:e1:a0:10:ea:f6:6b:a8:0a:75:10:2f:30:50:44:37:
         7f:54:bb:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org