Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38332e302f32342d3234203d3e203232373036.roa
File:                     3230302e3135322e38332e302f32342d3234203d3e203232373036.roa (raw, json)
Hash identifier:          kadcReEjkeUnNIhC3dmBrXEXfUcNBds+X7JJN6oEkx0=
Subject key identifier:   41:D4:B4:93:1F:D4:67:5E:0F:B7:17:90:42:15:00:A0:C9:3A:5E:F5
Certificate issuer:       /CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
Certificate serial:       3F17E68F219F0CBC8AD05305E0B29D471B53EE75
Authority key identifier: 5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38332e302f32342d3234203d3e203232373036.roa
Signing time:             Mon 09 Jan 2023 22:49:12 +0000
ROA not before:           Mon 09 Jan 2023 22:44:12 +0000
ROA not after:            Mon 08 Jan 2024 22:49:12 +0000
asID:                     22706
IP address blocks:        200.152.83.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:17:e6:8f:21:9f:0c:bc:8a:d0:53:05:e0:b2:9d:47:1b:53:ee:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
        Validity
            Not Before: Jan  9 22:44:12 2023 GMT
            Not After : Jan  8 22:49:12 2024 GMT
        Subject: CN=41D4B4931FD4675E0FB71790421500A0C93A5EF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d0:19:05:37:fc:be:9e:3c:3e:ca:39:20:6b:
                    96:d9:be:bf:dc:97:fc:60:10:e1:de:50:ad:d2:d2:
                    06:3b:23:16:b7:21:57:00:58:b3:3e:93:c5:69:f4:
                    fa:92:fc:a6:d6:14:d1:26:56:fa:21:ff:20:2a:2e:
                    0a:2e:cb:6a:d3:44:08:d7:ec:86:38:af:ba:61:64:
                    87:4c:8c:d6:11:d5:d4:3e:8c:19:c8:ba:30:d4:0b:
                    27:eb:35:5c:09:5e:91:3b:8d:6a:fb:61:9d:fa:6a:
                    b5:11:1b:52:f3:23:1f:50:1a:fd:62:4a:67:f5:48:
                    be:c8:c0:dc:be:39:f5:43:ba:b9:be:f6:f4:b9:6d:
                    71:c6:82:dc:da:87:d5:2f:8c:64:39:d1:12:91:9c:
                    ec:94:e7:f8:0e:7f:55:49:9c:82:bb:1d:e2:8c:4b:
                    f0:5b:41:84:d1:14:89:dc:05:7b:4f:02:ad:f6:15:
                    f2:b2:d3:c2:dd:18:f1:73:81:57:6a:2e:63:9b:4e:
                    e5:55:08:9e:c1:e6:36:19:26:52:3b:ad:b0:ea:29:
                    32:22:ca:74:37:02:d4:73:5c:ca:50:46:9f:71:cc:
                    6d:b1:11:ca:47:0b:aa:7e:ca:6b:85:52:a0:c3:60:
                    94:22:5e:3b:43:75:21:98:be:0d:c3:02:b2:10:ec:
                    ee:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:D4:B4:93:1F:D4:67:5E:0F:B7:17:90:42:15:00:A0:C9:3A:5E:F5
            X509v3 Authority Key Identifier:
                keyid:5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38332e302f32342d3234203d3e203232373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:e5:b2:34:da:95:13:2c:ac:6e:32:38:5d:49:db:c9:63:77:
         5d:47:9b:4a:28:87:82:3a:f6:e9:f5:1a:cd:35:be:d0:75:5b:
         75:e8:04:97:e8:89:0a:a6:d4:94:17:ce:c6:67:2d:45:a3:e7:
         1d:8a:ec:04:c5:a9:bb:d7:0a:db:5b:24:d6:fe:c4:8a:7d:38:
         b2:2e:67:29:81:c4:bb:45:2f:4b:f7:4a:5c:58:56:94:29:bd:
         3a:29:1f:20:b7:eb:b1:a1:ce:4b:ed:d7:c9:07:cb:79:ce:da:
         37:d2:ec:8d:3e:1c:ae:3f:9d:70:ad:ae:a4:e9:85:5b:2f:48:
         8a:5a:89:6a:5f:7b:63:2a:36:31:bb:d9:78:af:44:72:81:06:
         4e:bc:97:a8:1d:d3:13:9c:38:14:9d:df:22:8c:96:3c:54:51:
         21:9c:bf:43:8c:e7:c9:e9:fb:41:d5:20:c3:c3:70:81:0d:cf:
         41:9f:ac:57:09:f5:d4:af:7a:d6:04:63:01:0d:77:f3:95:34:
         68:1e:86:d3:1a:5b:70:de:60:55:15:5b:8a:ca:91:97:02:14:
         59:02:c6:ee:f7:ac:34:d3:f9:8c:f0:d5:88:a8:91:5d:27:70:
         45:8b:9a:bb:0c:68:88:27:12:5f:b3:4a:9f:75:a1:59:9a:3c:
         12:20:30:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org