Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38342e302f32322d3232203d3e203232373036.roa
File:                     3230302e3135322e38342e302f32322d3232203d3e203232373036.roa (raw, json)
Hash identifier:          +J2bLl21Qjpnrw1gBshktHTQ/5AqlDBeK43kKWNJRD0=
Subject key identifier:   37:84:6F:DA:1F:71:E4:CC:96:22:FC:11:1F:AB:4A:85:FA:A7:34:61
Certificate issuer:       /CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
Certificate serial:       0B50C092391F310C70BDF1D2111255C09E0CCB6F
Authority key identifier: 5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38342e302f32322d3232203d3e203232373036.roa
Signing time:             Tue 10 Jan 2023 09:24:19 +0000
ROA not before:           Tue 10 Jan 2023 09:19:19 +0000
ROA not after:            Tue 09 Jan 2024 09:24:19 +0000
asID:                     22706
IP address blocks:        200.152.84.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:50:c0:92:39:1f:31:0c:70:bd:f1:d2:11:12:55:c0:9e:0c:cb:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
        Validity
            Not Before: Jan 10 09:19:19 2023 GMT
            Not After : Jan  9 09:24:19 2024 GMT
        Subject: CN=37846FDA1F71E4CC9622FC111FAB4A85FAA73461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:0d:d1:14:bf:0f:11:57:b1:0a:45:18:a4:85:
                    25:e7:b8:1e:57:b4:3e:27:d9:f8:59:14:a5:9c:72:
                    9f:d4:3a:d4:d4:9c:5f:7a:f9:77:2c:57:6a:0f:86:
                    16:00:f1:1d:bf:46:ba:28:39:33:c6:b1:76:b0:0e:
                    3f:81:d8:c6:b3:37:4f:55:bc:05:1e:9f:8e:88:d7:
                    59:e8:ba:3e:55:c7:3a:bb:51:23:aa:1f:d4:0e:c6:
                    58:84:7d:a2:7b:3e:9e:d3:7f:47:7d:36:e1:f1:89:
                    21:05:12:51:a0:81:c8:31:bf:9e:1c:2f:20:84:ec:
                    53:5e:0c:34:fe:e6:45:05:a8:5a:54:70:8b:2e:0c:
                    ef:e0:f7:e8:47:ff:6e:b0:20:67:e9:e5:ad:d6:60:
                    67:5e:2b:db:16:4a:fd:ef:29:b9:62:5d:1a:e7:7d:
                    a9:cb:06:f1:72:91:3f:13:3a:d8:3a:dc:79:37:7d:
                    2b:05:5d:de:5c:83:1a:a4:f6:d6:3d:a6:83:5b:b8:
                    c2:03:34:d3:bf:15:29:a6:8d:89:ca:c9:5d:3c:65:
                    a2:89:c7:48:1b:a5:1c:87:56:33:e9:a6:ee:4a:de:
                    58:f1:97:27:ba:0a:db:2b:26:2c:fd:6c:c1:91:58:
                    72:9b:68:1d:32:c7:00:76:45:17:87:87:cf:23:dc:
                    b9:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:84:6F:DA:1F:71:E4:CC:96:22:FC:11:1F:AB:4A:85:FA:A7:34:61
            X509v3 Authority Key Identifier:
                keyid:5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38342e302f32322d3232203d3e203232373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.84.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8b:d4:d1:7d:ba:7a:a5:89:2f:f6:65:a2:ae:f3:6d:ac:a1:08:
         f6:ab:33:b3:f1:3e:03:f3:73:ec:2c:98:b2:47:06:50:69:99:
         9c:12:9b:9a:59:25:93:17:4d:57:36:96:14:5f:5a:c2:ff:45:
         06:cf:1d:c2:8a:90:c7:18:ca:c2:60:b4:05:0d:03:e6:4c:62:
         32:29:92:35:7a:64:a8:d1:61:16:38:75:31:20:f3:db:15:1c:
         f1:cc:b7:4b:b1:10:78:44:7d:10:ef:bb:b1:f9:91:54:9f:69:
         79:d1:6d:81:26:ed:5d:13:c9:0f:17:12:72:31:71:05:8f:4c:
         1b:b7:b1:16:8b:f9:0a:fa:a0:7b:78:0c:e1:0f:05:da:bd:ae:
         69:c6:68:53:a4:bf:09:df:f3:f6:34:99:ba:d1:08:20:d4:6e:
         2a:f1:94:42:53:88:7e:58:d5:87:ad:ae:b5:9f:88:0b:21:3d:
         62:9c:35:b6:78:33:34:e2:af:f3:2e:76:f4:80:bd:4d:77:31:
         70:38:e8:2c:bd:21:62:82:4f:9d:17:f5:cf:55:65:49:8b:68:
         45:92:19:d9:63:57:5c:93:6c:9e:5b:12:1a:66:21:ae:0d:ec:
         15:f8:19:a1:1a:ae:66:37:33:8d:8a:ab:2a:68:79:e2:13:c8:
         9f:fa:3f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org