Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38362e302f32332d3233203d3e203232373036.roa
File:                     3230302e3135322e38362e302f32332d3233203d3e203232373036.roa (raw, json)
Hash identifier:          XcADOfSng1ZvZRPzKUKHNxXcLtGy3383CGK50WhziyE=
Subject key identifier:   09:45:6D:68:59:B6:62:01:AE:EA:41:6B:06:72:49:27:84:47:60:34
Certificate issuer:       /CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
Certificate serial:       49359C5591E89E5FFCA6BD99023EFD4248CA553A
Authority key identifier: 5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38362e302f32332d3233203d3e203232373036.roa
Signing time:             Mon 09 Jan 2023 12:58:31 +0000
ROA not before:           Mon 09 Jan 2023 12:53:31 +0000
ROA not after:            Mon 08 Jan 2024 12:58:31 +0000
asID:                     22706
IP address blocks:        200.152.86.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:35:9c:55:91:e8:9e:5f:fc:a6:bd:99:02:3e:fd:42:48:ca:55:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
        Validity
            Not Before: Jan  9 12:53:31 2023 GMT
            Not After : Jan  8 12:58:31 2024 GMT
        Subject: CN=09456D6859B66201AEEA416B0672492784476034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:74:e5:6e:0f:77:7d:43:ef:a3:37:00:b6:a2:
                    69:60:64:1f:26:c3:ac:6c:cf:cd:2f:54:7f:89:f2:
                    33:38:60:29:16:41:49:ee:5a:15:13:01:e3:53:fc:
                    45:b1:a1:f4:ea:77:f8:0c:e7:a8:95:f2:ba:22:38:
                    37:5a:1e:7b:8f:d9:9a:be:78:22:32:2a:c5:2b:e2:
                    92:b9:5d:bb:b6:2f:93:4a:2a:a2:dd:80:ef:2e:c3:
                    a7:f1:bb:27:76:e0:5c:80:f0:3a:d9:dc:eb:95:59:
                    51:db:cb:49:e6:cc:41:6b:b8:41:22:eb:e9:e7:4e:
                    25:98:0b:32:a1:7f:34:46:5e:f9:d4:be:3d:11:76:
                    1a:0c:84:5e:51:72:96:72:96:6e:f9:4a:70:c7:86:
                    3e:cb:ef:5f:4e:4c:da:02:7c:5f:bc:26:3f:f1:d3:
                    a5:89:39:28:23:6c:c3:0d:e5:de:7b:9f:82:5f:f0:
                    39:99:1e:30:70:c1:1d:52:7a:bc:bb:d9:31:19:3c:
                    5f:45:0f:9e:28:12:e8:2c:34:e0:0f:2b:ed:ee:04:
                    4a:47:08:56:1d:c1:07:06:89:11:28:6e:18:e4:e4:
                    ef:ef:69:c2:e9:d2:16:7a:74:30:08:45:9e:68:56:
                    1b:50:63:64:28:54:a1:8e:a6:fb:f8:1a:cb:e7:5a:
                    29:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:45:6D:68:59:B6:62:01:AE:EA:41:6B:06:72:49:27:84:47:60:34
            X509v3 Authority Key Identifier:
                keyid:5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38362e302f32332d3233203d3e203232373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         af:da:44:47:bf:dd:a6:17:5c:32:a3:6f:e3:00:dd:e7:15:78:
         15:e5:e2:a9:1d:55:e6:7d:cd:d9:b0:5c:6e:f5:5d:25:ac:e5:
         e5:fc:b5:87:c7:50:20:81:b9:b2:90:11:4d:c1:6c:d7:fc:0d:
         27:6f:71:68:86:e2:43:39:b6:82:d4:a9:0c:59:09:09:69:95:
         f3:58:5b:2c:32:a9:4b:8d:53:f3:e1:04:00:2b:e6:f5:0e:2b:
         64:6e:41:d4:f1:93:c1:64:3b:b0:e7:82:70:d3:25:b9:05:b9:
         ad:88:a1:dc:1a:98:b5:6c:e6:21:1b:8e:1b:6b:c9:5b:17:0c:
         09:33:c7:0a:40:9e:d2:ac:49:ec:80:d0:2b:a1:a8:c6:10:92:
         86:51:ec:b4:04:94:d1:8a:e3:ea:05:81:f3:1d:82:a6:28:a9:
         fb:89:a9:9a:02:e8:eb:e0:2a:41:2f:d9:1c:cc:33:ec:46:bc:
         4e:b9:4a:4c:de:4a:59:a5:db:70:7e:a0:5e:66:87:44:96:85:
         5d:37:c0:d2:eb:cd:b1:1a:c3:a7:26:5d:e5:ed:13:41:9e:de:
         db:a6:d0:85:e3:5f:51:87:75:e9:e8:40:b4:31:92:6c:76:a0:
         f7:28:f3:f2:27:1f:56:a5:80:c7:f5:6f:e4:ec:20:26:3a:4b:
         19:9a:62:64
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUSTWcVZHonl/8pr2ZAj79QkjKVTowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQ3Njc2NjQzOTcxNkREOUE2MUM0NzE3REU5NkFGRTUz
MUE4QUMzRTAeFw0yMzAxMDkxMjUzMzFaFw0yNDAxMDgxMjU4MzFaMDMxMTAvBgNV
BAMTKDA5NDU2RDY4NTlCNjYyMDFBRUVBNDE2QjA2NzI0OTI3ODQ0NzYwMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8dOVuD3d9Q++jNwC2omlgZB8m
w6xsz80vVH+J8jM4YCkWQUnuWhUTAeNT/EWxofTqd/gM56iV8roiODdaHnuP2Zq+
eCIyKsUr4pK5Xbu2L5NKKqLdgO8uw6fxuyd24FyA8DrZ3OuVWVHby0nmzEFruEEi
6+nnTiWYCzKhfzRGXvnUvj0RdhoMhF5RcpZylm75SnDHhj7L719OTNoCfF+8Jj/x
06WJOSgjbMMN5d57n4Jf8DmZHjBwwR1Sery72TEZPF9FD54oEugsNOAPK+3uBEpH
CFYdwQcGiREobhjk5O/vacLp0hZ6dDAIRZ5oVhtQY2QoVKGOpvv4GsvnWimdAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUCUVtaFm2YgGu6kFrBnJJJ4RHYDQwHwYDVR0j
BBgwFoAUXXZ2ZDlxbdmmHEcX3pav5TGorD4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3Aya3V4V1l3Q0QyWnVQRmJpTFV0SlBoQW05YjgyMlZyQ01YcjNNRU40
bVkvMC81RDc2NzY2NDM5NzE2REQ5QTYxQzQ3MTdERTk2QUZFNTMxQThBQzNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVENzY3NjY0Mzk3MTZERDlB
NjFDNDcxN0RFOTZBRkU1MzFBOEFDM0UuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NwMmt1eFdZd0NEMlp1UEZiaUxVdEpQaEFtOWI4MjJWckNNWHIzTUVONG1ZLzAv
MzIzMDMwMmUzMTM1MzIyZTM4MzYyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMjMy
MzczMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQByJhWMA0GCSqGSIb3DQEBCwUAA4IBAQCv2kRHv92m
F1wyo2/jAN3nFXgV5eKpHVXmfc3ZsFxu9V0lrOXl/LWHx1AggbmykBFNwWzX/A0n
b3FohuJDObaC1KkMWQkJaZXzWFssMqlLjVPz4QQAK+b1DitkbkHU8ZPBZDuw54Jw
0yW5BbmtiKHcGpi1bOYhG44ba8lbFwwJM8cKQJ7SrEnsgNAroajGEJKGUey0BJTR
iuPqBYHzHYKmKKn7iamaAujr4CpBL9kczDPsRrxOuUpM3kpZpdtwfqBeZodEloVd
N8DS682xGsOnJl3l7RNBnt7bptCF419Rh3Xp6EC0MZJsdqD3KPPyJx9WpYDH9W/k
7CAmOksZmmJk
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org