Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38342e302f32342d3234203d3e203232373036.roa
File:                     3230302e3135322e38342e302f32342d3234203d3e203232373036.roa (raw, json)
Hash identifier:          D4LaQOEIFtWSkDhG4lKU+3VEyW72gJeQnOtv0sxhXD4=
Subject key identifier:   EA:1D:7A:09:6D:E6:01:0F:D6:0F:8A:7E:A4:AD:85:B8:1C:76:2C:0C
Certificate issuer:       /CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
Certificate serial:       2D251BC94891511475B4D925C6B51EC1EB29DED5
Authority key identifier: 5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38342e302f32342d3234203d3e203232373036.roa
Signing time:             Mon 09 Jan 2023 22:49:24 +0000
ROA not before:           Mon 09 Jan 2023 22:44:24 +0000
ROA not after:            Mon 08 Jan 2024 22:49:24 +0000
asID:                     22706
IP address blocks:        200.152.84.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:25:1b:c9:48:91:51:14:75:b4:d9:25:c6:b5:1e:c1:eb:29:de:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
        Validity
            Not Before: Jan  9 22:44:24 2023 GMT
            Not After : Jan  8 22:49:24 2024 GMT
        Subject: CN=EA1D7A096DE6010FD60F8A7EA4AD85B81C762C0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ed:04:10:27:e1:f9:9f:45:e5:bf:05:4c:6e:
                    bc:5e:a4:08:41:94:06:87:d3:7d:95:e8:5a:40:59:
                    5c:cb:ac:fa:f3:5c:a3:32:b9:29:92:ad:b5:63:bb:
                    cf:c8:1a:a1:68:0b:a1:d3:ce:dd:18:3c:90:dd:da:
                    55:6f:28:cc:bc:69:21:f8:81:8c:69:1e:b0:26:32:
                    3f:36:0e:c1:dc:f3:8c:d7:df:66:2b:f0:7a:b0:b9:
                    bf:df:ec:71:de:02:20:72:6a:47:16:56:cb:7d:b8:
                    95:72:fb:89:b8:dd:f0:b5:99:86:6e:65:4c:e9:0b:
                    b7:ee:2e:c2:76:f8:5b:c7:d3:a3:e3:eb:bc:85:d4:
                    ee:06:63:63:11:61:53:d8:d0:f8:bf:c6:40:79:e1:
                    70:66:e4:ac:e0:0f:c4:fd:84:09:57:5a:92:0d:54:
                    27:36:4a:c2:9d:40:d1:cd:87:9d:15:66:b5:6e:55:
                    7e:12:7f:f2:f5:f3:84:0e:ac:42:25:3f:9b:c7:14:
                    d7:c5:9a:49:90:56:28:4b:15:c6:c8:c9:ce:b6:c1:
                    a0:18:03:76:46:2d:de:f2:f0:d0:ae:cc:62:df:f3:
                    02:10:a7:9f:d1:3b:a4:05:68:09:da:73:4e:d2:e0:
                    e1:4e:14:98:95:cd:b4:b3:0e:3f:51:83:03:13:a4:
                    68:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:1D:7A:09:6D:E6:01:0F:D6:0F:8A:7E:A4:AD:85:B8:1C:76:2C:0C
            X509v3 Authority Key Identifier:
                keyid:5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38342e302f32342d3234203d3e203232373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:c3:c3:44:93:2a:47:b7:86:06:60:af:b8:1c:06:8a:b7:4e:
         50:f2:ab:b8:6a:68:c9:50:39:b7:4d:e3:ba:54:f7:b3:a4:f8:
         b1:c7:37:25:7b:62:b4:83:78:7f:12:2e:c3:b8:f8:60:09:b2:
         72:e1:f2:16:6b:81:d5:71:0e:02:d9:4c:f7:9e:17:48:13:6a:
         be:c3:4b:3b:1c:b3:a3:2f:ae:38:69:6d:f2:d8:e3:ee:98:3e:
         bb:34:45:9b:51:1b:24:ce:e9:46:62:d9:0e:a1:9d:c0:c5:7a:
         01:aa:5c:a4:ab:d9:26:e0:dd:51:df:47:c4:8d:0a:31:43:a9:
         b9:37:50:51:e5:13:cb:85:f4:a0:00:cc:93:7a:af:ed:be:88:
         bd:eb:46:79:5e:41:2f:56:89:1e:3c:95:68:fe:d2:41:85:cf:
         29:00:ab:6a:f5:77:24:e0:0c:cb:f4:95:7a:2d:15:f7:d5:07:
         b7:80:6e:f7:4b:31:7f:81:ca:26:ad:22:35:a5:a0:fc:91:61:
         63:74:4b:37:2b:79:5b:e8:9d:0c:bc:43:5e:93:f2:7c:73:42:
         4f:bf:f4:73:e3:5c:dc:29:fe:f3:a9:7c:d3:4c:7f:7c:64:46:
         e5:36:de:f2:3c:5a:91:5c:1c:c8:14:fd:ed:63:8f:84:18:82:
         8c:44:08:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org