Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38342e302f32332d3233203d3e203232373036.roa
File:                     3230302e3135322e38342e302f32332d3233203d3e203232373036.roa (raw, json)
Hash identifier:          e5hZf6m4f+yti9leIYrMRh01vEkOE4M0hbdHGfZVbx8=
Subject key identifier:   1E:B0:9E:48:8D:E2:FD:3F:31:E4:E4:F6:0E:E2:3F:F1:11:E2:3C:E3
Certificate issuer:       /CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
Certificate serial:       319B1CFCDCDDCEAF9E64694260E422B88ED8A591
Authority key identifier: 5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38342e302f32332d3233203d3e203232373036.roa
Signing time:             Mon 09 Jan 2023 12:58:25 +0000
ROA not before:           Mon 09 Jan 2023 12:53:25 +0000
ROA not after:            Mon 08 Jan 2024 12:58:25 +0000
asID:                     22706
IP address blocks:        200.152.84.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:9b:1c:fc:dc:dd:ce:af:9e:64:69:42:60:e4:22:b8:8e:d8:a5:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
        Validity
            Not Before: Jan  9 12:53:25 2023 GMT
            Not After : Jan  8 12:58:25 2024 GMT
        Subject: CN=1EB09E488DE2FD3F31E4E4F60EE23FF111E23CE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:63:59:00:60:30:8e:84:ba:f8:eb:83:2c:df:
                    72:da:2c:2d:df:17:30:a9:18:47:18:2f:ab:92:5d:
                    11:17:ca:bf:b9:5a:3b:22:9b:2e:b4:3c:45:2a:4f:
                    b9:f5:81:a7:c8:e8:37:1f:c3:ad:4c:fe:f3:25:34:
                    d9:3c:9f:ad:65:b0:ad:ad:90:79:10:0c:e1:0d:ee:
                    c3:56:c6:32:a1:2c:e3:96:3a:cf:f7:64:a9:9a:2b:
                    fb:c6:62:45:7c:b5:83:71:05:f9:53:7c:ff:b3:25:
                    74:2b:a6:4b:b3:ff:df:64:ad:de:b9:47:79:8c:d4:
                    7c:0b:a8:1b:02:9c:68:04:83:3f:a6:71:a9:52:0d:
                    42:49:6e:7d:a5:18:65:c4:64:54:e0:37:f2:0f:c6:
                    22:54:14:1a:56:e5:08:a5:61:0f:7e:3d:52:8c:40:
                    5b:ce:ae:c5:1f:76:cb:cb:2f:b8:e5:2d:73:c1:7e:
                    a9:93:4a:40:42:68:c8:78:ae:6a:5e:de:d1:c4:cd:
                    de:65:6f:96:91:2a:dc:6c:e7:9b:79:b4:f4:ac:ce:
                    b5:34:f9:6b:19:9f:58:29:d3:64:70:47:0c:97:b2:
                    fc:67:a1:28:bf:81:e6:3c:76:a4:cd:6e:d4:60:59:
                    86:6c:3e:f5:79:d0:96:e6:e2:de:e1:d4:af:59:2f:
                    22:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:B0:9E:48:8D:E2:FD:3F:31:E4:E4:F6:0E:E2:3F:F1:11:E2:3C:E3
            X509v3 Authority Key Identifier:
                keyid:5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38342e302f32332d3233203d3e203232373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bf:a3:11:df:a4:88:56:07:b8:36:a4:3e:61:9a:a8:55:a0:c6:
         5d:c2:69:e2:80:fb:f0:4f:64:1f:aa:93:06:b0:55:5c:96:d3:
         8f:0d:3a:1a:ae:87:6a:3c:e6:68:e9:53:a6:01:d9:2b:23:ea:
         0d:4e:7b:56:8a:70:d9:7c:f9:5e:71:a6:e4:69:ea:a4:a4:7d:
         bc:27:44:49:f9:2b:f4:18:5d:2b:f2:ba:b6:0a:b3:89:71:81:
         b6:f3:47:de:67:9a:82:e2:76:9c:23:c5:99:a8:5a:f9:fe:7b:
         a6:b5:b0:11:09:f8:dd:02:e1:3b:99:0a:d6:71:1c:c3:b0:bc:
         5a:46:6d:89:42:f1:c3:e0:42:18:85:84:18:26:9c:d9:78:c5:
         5d:68:9f:aa:49:1a:c4:2f:1d:92:c8:2e:cb:c2:fc:96:30:c4:
         db:eb:a4:33:d9:1b:40:f4:e7:ab:01:40:2c:a7:d9:7c:54:5f:
         f0:2c:d8:50:70:5e:4e:ba:c0:2f:42:c8:7b:f0:5a:bf:a2:cc:
         df:d5:fa:d3:12:31:65:85:e0:b5:97:d0:75:34:55:5a:e8:89:
         1d:86:bf:a8:5f:7a:2c:8e:53:f2:23:39:b5:3a:14:03:1b:f4:
         07:6c:a5:a8:ea:8c:52:aa:1b:9c:0f:3f:47:c9:86:28:04:b5:
         70:a6:1f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org