Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38322e302f32342d3234203d3e203232373036.roa
File:                     3230302e3135322e38322e302f32342d3234203d3e203232373036.roa (raw, json)
Hash identifier:          TT1y5g1UhigiVBAZNPxltwsDObrFzQRDIVNmkTyJ4Bw=
Subject key identifier:   62:FF:F5:FB:53:5F:D2:F6:89:1C:E8:4B:45:FF:35:55:D8:75:38:2B
Certificate issuer:       /CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
Certificate serial:       02408B20F36E99161C7B5C58DDC522A1DF3DFCE0
Authority key identifier: 5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38322e302f32342d3234203d3e203232373036.roa
Signing time:             Mon 09 Jan 2023 22:49:00 +0000
ROA not before:           Mon 09 Jan 2023 22:44:00 +0000
ROA not after:            Mon 08 Jan 2024 22:49:00 +0000
asID:                     22706
IP address blocks:        200.152.82.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:40:8b:20:f3:6e:99:16:1c:7b:5c:58:dd:c5:22:a1:df:3d:fc:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
        Validity
            Not Before: Jan  9 22:44:00 2023 GMT
            Not After : Jan  8 22:49:00 2024 GMT
        Subject: CN=62FFF5FB535FD2F6891CE84B45FF3555D875382B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:b4:e8:31:42:78:f3:d0:f8:c1:57:48:23:f2:
                    eb:39:46:46:ea:81:11:89:dc:20:2c:4a:f3:33:d1:
                    62:14:6e:6a:71:1a:b5:20:5f:03:b5:d1:66:fe:fc:
                    9b:91:65:db:56:63:3f:35:30:c1:b7:a1:5a:2c:dc:
                    12:a7:60:62:18:46:6e:05:37:1c:06:f3:c1:25:40:
                    46:2d:20:ba:59:a7:23:07:1c:fc:83:fe:28:eb:d9:
                    a8:8e:2e:3f:2b:5a:33:86:41:af:0b:e0:11:72:96:
                    cf:9b:39:57:5e:af:f4:38:b4:42:48:6e:c7:b5:9a:
                    73:35:18:1e:f3:b2:29:a7:e6:f2:f3:bb:ed:78:7e:
                    c3:3e:1d:3e:dd:91:ac:f9:24:01:e2:0e:dd:d9:ed:
                    10:c8:57:c6:96:c1:93:03:87:7b:ac:bb:79:64:e8:
                    6b:f2:90:ad:88:fc:d9:06:47:b4:0c:5f:b8:98:b0:
                    26:53:72:ea:18:23:37:14:e1:27:7e:2b:19:7d:6c:
                    a6:54:0a:8f:b9:0b:20:8a:d7:e3:d6:f5:57:b8:a6:
                    60:a6:b0:ab:73:ea:3a:3e:61:99:bd:e2:9b:2f:b6:
                    cd:0f:7e:ab:4f:a3:c7:8c:02:a2:a0:bc:57:57:9f:
                    2c:f7:3d:92:ff:67:9f:23:54:0e:91:17:9f:88:1f:
                    f1:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:FF:F5:FB:53:5F:D2:F6:89:1C:E8:4B:45:FF:35:55:D8:75:38:2B
            X509v3 Authority Key Identifier:
                keyid:5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38322e302f32342d3234203d3e203232373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:ed:b9:87:6f:7b:7c:1a:e5:0c:77:e2:58:b7:44:11:a8:6d:
         56:f8:63:32:a5:a0:c4:a3:66:d8:e5:6e:ef:98:a2:66:4c:11:
         46:e8:86:42:88:c6:a0:2e:59:8b:80:cf:e1:f7:cf:72:6e:00:
         17:f8:dd:70:4c:c6:72:55:0e:7b:9b:58:9e:89:1c:84:5d:87:
         05:31:81:f8:b2:5c:91:5a:ad:0d:71:96:73:db:fe:35:d6:d5:
         2d:27:ff:39:b0:c9:20:78:bd:ae:b2:86:cb:06:a1:fb:f2:44:
         b3:7e:37:a1:fa:e7:b8:e5:e2:22:86:18:fc:e1:8e:3e:25:83:
         c2:e9:2f:5c:76:a6:21:a5:09:e2:5c:64:f5:dc:20:e3:d3:f4:
         cc:28:8d:d9:3b:53:4c:a1:4b:46:83:5f:7e:d8:b7:c3:2a:0d:
         e1:ae:b6:d3:be:91:36:b2:3b:df:0d:b4:68:ab:47:49:cd:a5:
         29:84:82:97:b2:c2:8b:71:89:a4:d1:c3:2c:13:35:ba:eb:fb:
         31:95:0a:83:28:c3:58:c6:fd:18:e1:cb:79:96:a9:bd:1b:55:
         2b:d4:29:c4:7d:bf:85:ab:e6:f6:4e:db:66:3b:a5:c4:00:4f:
         79:74:a0:2a:b4:9f:78:3d:e5:ce:8a:e5:0b:ac:85:e3:d9:7c:
         e7:2c:f8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org