Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38352e302f32342d3234203d3e203232373036.roa
File:                     3230302e3135322e38352e302f32342d3234203d3e203232373036.roa (raw, json)
Hash identifier:          1bjw3zfLMahJp5MTcNccYgZ5Yl6fqJ32z2ZjRkYty/M=
Subject key identifier:   9C:04:DE:26:E9:E1:37:B6:ED:F9:3E:50:1E:C3:C2:1D:9E:FD:11:BD
Certificate issuer:       /CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
Certificate serial:       57805FEF43C3FCDF1902208C1F8CFF00D590700B
Authority key identifier: 5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38352e302f32342d3234203d3e203232373036.roa
Signing time:             Mon 09 Jan 2023 22:49:37 +0000
ROA not before:           Mon 09 Jan 2023 22:44:37 +0000
ROA not after:            Mon 08 Jan 2024 22:49:37 +0000
asID:                     22706
IP address blocks:        200.152.85.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:80:5f:ef:43:c3:fc:df:19:02:20:8c:1f:8c:ff:00:d5:90:70:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
        Validity
            Not Before: Jan  9 22:44:37 2023 GMT
            Not After : Jan  8 22:49:37 2024 GMT
        Subject: CN=9C04DE26E9E137B6EDF93E501EC3C21D9EFD11BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4a:43:94:93:75:f3:2a:26:1e:47:bd:a1:84:
                    da:ac:fc:32:50:79:54:0c:69:f8:51:60:96:93:8c:
                    7f:a2:bb:f9:a8:80:54:4c:da:72:81:d0:d5:11:9c:
                    7c:bc:f1:25:cf:9f:9b:04:03:5c:e4:b8:2d:53:1c:
                    ff:af:9b:3c:ad:77:c9:64:60:4f:c5:b5:0b:26:d9:
                    e3:78:b1:d7:31:13:17:1b:4a:dd:db:35:25:b9:59:
                    02:d1:50:07:71:1e:4a:ea:ed:f5:49:1f:77:89:4d:
                    f5:5c:6d:2b:78:30:06:51:b4:43:c9:0b:2e:ae:92:
                    7a:37:38:ec:2c:84:ea:7a:6d:a0:36:08:8f:3a:dc:
                    48:a9:71:04:f9:00:15:0c:c3:2c:74:72:7b:36:22:
                    26:d9:45:82:32:61:5d:90:ea:c9:b6:d8:78:a9:03:
                    22:83:5c:f5:82:b1:2c:80:77:29:ca:80:e7:c5:c2:
                    e2:4f:a8:b4:2f:f0:04:14:61:38:45:26:2e:05:95:
                    31:cb:03:3c:25:78:cf:78:b8:e7:ae:75:f5:9d:4c:
                    7e:aa:7c:22:40:b5:55:a0:94:dc:8b:5d:f9:45:a6:
                    8d:56:c3:fd:4f:d2:6f:64:6c:95:d2:e5:f8:cf:85:
                    ef:e3:ca:d3:81:be:bc:c9:ee:43:cb:e4:09:08:59:
                    03:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:04:DE:26:E9:E1:37:B6:ED:F9:3E:50:1E:C3:C2:1D:9E:FD:11:BD
            X509v3 Authority Key Identifier:
                keyid:5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38352e302f32342d3234203d3e203232373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:a6:e5:48:52:1c:fe:d8:99:31:7a:72:a8:13:b9:87:18:db:
         1c:fd:aa:fe:8c:fa:e7:9c:85:68:30:3d:f8:b5:f1:0f:de:1f:
         4b:15:85:3a:a3:e3:bf:72:39:c5:b8:23:ef:a7:d3:8a:e9:1d:
         ff:c4:4e:9b:13:dc:b8:85:8c:84:2a:e8:5f:17:5b:4a:79:94:
         26:4d:a0:2d:27:7b:de:8e:04:93:b8:ec:7d:2e:99:8f:7b:eb:
         d5:95:cb:80:1f:d7:6c:15:9a:3d:8a:58:ee:fa:25:d2:c0:b1:
         c2:8a:2c:69:d6:32:14:8d:cc:34:3a:23:94:49:32:db:c6:68:
         14:65:86:eb:83:8b:11:50:95:87:3b:e6:0d:ab:cb:2a:89:7d:
         7d:e7:31:ba:fc:5a:6e:e6:71:54:d9:50:e2:cb:8f:0b:c6:aa:
         73:56:d7:ae:6a:5b:f3:0c:b7:5c:26:c9:63:bb:e1:9c:1b:74:
         62:af:21:35:38:24:4c:0c:b6:8f:9e:1a:76:06:73:0e:a0:6b:
         2c:4a:6d:9f:7d:15:33:0d:4b:5a:b5:b7:b2:47:ea:ac:9a:fb:
         a0:c8:d2:fc:93:c9:af:51:c0:45:10:1a:5f:f0:57:b7:a2:8d:
         cd:45:7e:a4:55:fe:99:43:ad:53:c3:4e:49:cb:1c:ff:a2:76:
         90:33:76:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org