Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38322e302f32332d3233203d3e203232373036.roa
File:                     3230302e3135322e38322e302f32332d3233203d3e203232373036.roa (raw, json)
Hash identifier:          iEzJUe/HD34fn7nAB8z4bmJpgFNqnJVFpcJhqciw9OU=
Subject key identifier:   0A:30:36:6B:DD:36:81:E9:03:20:D4:4C:DD:16:79:5B:39:E8:5D:70
Certificate issuer:       /CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
Certificate serial:       1839890F96BF5F5FEA04973C6D01E69837441C8E
Authority key identifier: 5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38322e302f32332d3233203d3e203232373036.roa
Signing time:             Mon 09 Jan 2023 12:58:14 +0000
ROA not before:           Mon 09 Jan 2023 12:53:14 +0000
ROA not after:            Mon 08 Jan 2024 12:58:14 +0000
asID:                     22706
IP address blocks:        200.152.82.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:39:89:0f:96:bf:5f:5f:ea:04:97:3c:6d:01:e6:98:37:44:1c:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
        Validity
            Not Before: Jan  9 12:53:14 2023 GMT
            Not After : Jan  8 12:58:14 2024 GMT
        Subject: CN=0A30366BDD3681E90320D44CDD16795B39E85D70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:55:e1:4a:8d:11:ee:32:6a:84:7e:c5:c7:7a:
                    2a:4c:fb:7d:63:6f:31:bc:2a:5c:af:23:ba:d8:24:
                    80:ca:d7:36:41:45:b0:89:81:53:f8:1f:7e:b2:e1:
                    95:e6:59:84:3b:d0:db:59:fa:67:eb:5e:61:16:26:
                    7f:27:f9:17:1a:90:cd:76:25:c6:f8:2d:09:42:fe:
                    24:aa:7b:1a:24:8c:1e:4b:2c:95:8b:70:77:08:44:
                    ed:c8:5b:e9:1d:04:54:cb:a0:0a:09:05:72:88:9b:
                    ac:a7:1a:96:95:72:eb:38:96:d9:63:75:3e:59:52:
                    48:cd:0e:bc:38:ed:91:1a:ca:44:a8:25:64:b6:18:
                    6e:f5:92:18:6a:b9:cc:12:c8:d2:28:ee:2e:32:ab:
                    c7:35:02:0d:16:09:2c:54:3c:50:2c:56:db:02:80:
                    1b:2c:ce:a2:28:70:e8:10:c4:a9:74:be:ff:e8:db:
                    e3:04:67:3f:9c:97:40:b6:6d:72:b0:8b:e0:df:83:
                    59:89:6c:d8:78:a2:ef:69:bc:ef:a9:4b:e9:c2:bf:
                    84:21:ef:5a:06:81:a6:c1:ff:eb:52:50:d5:8d:4f:
                    73:27:ed:0b:9c:71:ad:c4:58:db:0e:58:c3:11:88:
                    fe:07:78:c6:6c:b5:37:9a:04:dc:53:5d:e0:b4:4f:
                    5d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:30:36:6B:DD:36:81:E9:03:20:D4:4C:DD:16:79:5B:39:E8:5D:70
            X509v3 Authority Key Identifier:
                keyid:5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38322e302f32332d3233203d3e203232373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:b8:67:1c:d5:f8:f5:de:e2:15:df:44:a6:d0:3a:1d:01:74:
         cd:f7:da:d2:7e:f6:a5:c2:a6:5e:f9:95:11:3b:a3:f8:7c:08:
         5f:57:96:b1:69:38:b7:96:00:5c:02:2d:52:d0:f7:d9:62:72:
         f8:87:8d:fc:24:9c:37:ce:a5:7b:fc:b9:47:80:16:f7:de:e2:
         48:ba:2b:5b:ac:59:90:70:ca:cc:a6:bb:9b:e2:64:9b:d3:b3:
         06:95:17:26:f8:d4:34:3e:a2:bc:6b:ae:14:17:26:67:7d:c8:
         ff:29:05:96:17:30:a1:56:f7:5d:1e:d1:3e:2c:ca:57:8a:90:
         37:19:29:40:90:85:5c:8a:54:0a:6a:20:f0:8c:c5:5a:1c:b6:
         1c:9d:d4:bf:69:5b:2c:54:41:87:e1:40:95:1f:9e:2d:fe:65:
         3a:09:57:aa:ee:b8:1e:14:22:76:09:de:a1:f6:d8:a0:fa:72:
         1c:99:6f:7b:65:b8:93:8b:69:bd:35:31:79:c4:e5:00:a1:d3:
         e7:3c:cf:a3:f7:f5:c0:c3:21:c6:7d:14:a8:5d:c3:e9:b1:12:
         01:10:a0:b2:a8:a1:66:0b:7d:23:ae:3d:54:eb:47:cc:b3:76:
         d7:30:b9:af:b9:6f:a3:2a:3c:04:24:8b:16:43:a7:f6:d3:8f:
         4c:8f:b3:87
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUGDmJD5a/X1/qBJc8bQHmmDdEHI4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQ3Njc2NjQzOTcxNkREOUE2MUM0NzE3REU5NkFGRTUz
MUE4QUMzRTAeFw0yMzAxMDkxMjUzMTRaFw0yNDAxMDgxMjU4MTRaMDMxMTAvBgNV
BAMTKDBBMzAzNjZCREQzNjgxRTkwMzIwRDQ0Q0REMTY3OTVCMzlFODVENzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoVeFKjRHuMmqEfsXHeipM+31j
bzG8KlyvI7rYJIDK1zZBRbCJgVP4H36y4ZXmWYQ70NtZ+mfrXmEWJn8n+RcakM12
Jcb4LQlC/iSqexokjB5LLJWLcHcIRO3IW+kdBFTLoAoJBXKIm6ynGpaVcus4ltlj
dT5ZUkjNDrw47ZEaykSoJWS2GG71khhqucwSyNIo7i4yq8c1Ag0WCSxUPFAsVtsC
gBsszqIocOgQxKl0vv/o2+MEZz+cl0C2bXKwi+Dfg1mJbNh4ou9pvO+pS+nCv4Qh
71oGgabB/+tSUNWNT3Mn7Qucca3EWNsOWMMRiP4HeMZstTeaBNxTXeC0T10/AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUCjA2a902gekDINRM3RZ5WznoXXAwHwYDVR0j
BBgwFoAUXXZ2ZDlxbdmmHEcX3pav5TGorD4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3Aya3V4V1l3Q0QyWnVQRmJpTFV0SlBoQW05YjgyMlZyQ01YcjNNRU40
bVkvMC81RDc2NzY2NDM5NzE2REQ5QTYxQzQ3MTdERTk2QUZFNTMxQThBQzNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVENzY3NjY0Mzk3MTZERDlB
NjFDNDcxN0RFOTZBRkU1MzFBOEFDM0UuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NwMmt1eFdZd0NEMlp1UEZiaUxVdEpQaEFtOWI4MjJWckNNWHIzTUVONG1ZLzAv
MzIzMDMwMmUzMTM1MzIyZTM4MzIyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjMy
MzczMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQByJhSMA0GCSqGSIb3DQEBCwUAA4IBAQBXuGcc1fj1
3uIV30Sm0DodAXTN99rSfvalwqZe+ZURO6P4fAhfV5axaTi3lgBcAi1S0PfZYnL4
h438JJw3zqV7/LlHgBb33uJIuitbrFmQcMrMprub4mSb07MGlRcm+NQ0PqK8a64U
FyZnfcj/KQWWFzChVvddHtE+LMpXipA3GSlAkIVcilQKaiDwjMVaHLYcndS/aVss
VEGH4UCVH54t/mU6CVeq7rgeFCJ2Cd6h9tig+nIcmW97ZbiTi2m9NTF5xOUAodPn
PM+j9/XAwyHGfRSoXcPpsRIBEKCyqKFmC30jrj1U60fMs3bXMLmvuW+jKjwEJIsW
Q6f2049Mj7OH
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org