Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38362e302f32342d3234203d3e203232373036.roa
File:                     3230302e3135322e38362e302f32342d3234203d3e203232373036.roa (raw, json)
Hash identifier:          a7WqgLC9ZRJwU6XlvT6fZJUBSoguHSeKVugtd28mvAk=
Subject key identifier:   C9:C9:7A:9B:0A:6C:4F:5B:DC:CD:18:D5:70:5E:4E:CD:0C:8F:B7:4F
Certificate issuer:       /CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
Certificate serial:       4585FF01F2A79D035A4228F5F2C125A3FAB6CAD5
Authority key identifier: 5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38362e302f32342d3234203d3e203232373036.roa
Signing time:             Mon 09 Jan 2023 22:49:48 +0000
ROA not before:           Mon 09 Jan 2023 22:44:48 +0000
ROA not after:            Mon 08 Jan 2024 22:49:48 +0000
asID:                     22706
IP address blocks:        200.152.86.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:85:ff:01:f2:a7:9d:03:5a:42:28:f5:f2:c1:25:a3:fa:b6:ca:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
        Validity
            Not Before: Jan  9 22:44:48 2023 GMT
            Not After : Jan  8 22:49:48 2024 GMT
        Subject: CN=C9C97A9B0A6C4F5BDCCD18D5705E4ECD0C8FB74F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8e:34:3c:9a:f3:71:a4:c0:14:97:33:52:a6:
                    b4:bd:70:48:56:f8:8e:e1:d0:76:d5:34:15:9f:1d:
                    1a:c7:e4:93:50:ea:34:48:89:94:a8:0d:74:7a:70:
                    c4:63:1c:05:fb:c5:60:37:3a:3e:81:15:b8:be:51:
                    8b:1b:8e:81:c2:5e:06:27:bc:de:58:93:72:f9:e0:
                    da:08:ba:7c:1c:c7:0b:20:a5:d5:02:5c:2d:ec:79:
                    0b:a4:f4:fd:7c:42:d7:5d:c9:84:a9:88:e6:ac:14:
                    fe:22:ac:6f:3a:d9:13:f4:f6:92:e6:f4:a9:da:4b:
                    68:bf:d7:d4:ad:83:a6:0c:7b:c8:9f:a0:84:8c:bb:
                    f0:72:f3:5f:be:c1:e6:f9:de:8c:40:ed:35:e3:9d:
                    89:62:7a:e9:ff:89:40:a0:62:e8:fa:dc:b4:3c:a5:
                    48:0c:7a:60:f3:d5:c8:e5:b7:fa:67:42:6a:c7:57:
                    27:4e:5d:ed:c7:b7:76:1a:13:7d:75:4a:15:85:1a:
                    0b:4f:40:53:b3:bf:f5:ad:d6:89:70:f7:3c:11:6f:
                    47:a5:ac:7c:9e:f6:e0:25:87:7d:33:10:34:2f:c1:
                    82:af:33:84:20:42:3f:0c:49:a7:e9:ce:c5:4a:2b:
                    a5:95:f6:6c:53:50:7e:2e:8e:ef:25:12:e1:c9:4a:
                    6c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:C9:7A:9B:0A:6C:4F:5B:DC:CD:18:D5:70:5E:4E:CD:0C:8F:B7:4F
            X509v3 Authority Key Identifier:
                keyid:5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38362e302f32342d3234203d3e203232373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:2d:0c:97:f8:22:fb:4b:4d:7a:8b:bf:18:b0:ae:42:62:af:
         22:1b:f8:cf:1d:c0:e5:d8:63:3f:db:64:c2:85:2c:65:9f:69:
         55:a4:c9:ae:e1:a9:c5:56:b2:2a:66:e7:54:d7:9d:63:44:1d:
         7f:38:7c:5c:8e:b4:f7:e2:3f:65:65:5e:33:58:b4:2a:b6:36:
         d2:e9:df:b3:14:93:5b:34:02:2c:a6:df:d2:09:19:09:ea:6c:
         bc:7e:5b:4a:bf:29:13:e8:1c:a5:6e:be:df:fa:70:1e:d9:0d:
         91:d7:63:3e:39:4b:7d:d1:20:91:87:ab:81:62:8e:86:f6:01:
         e9:12:88:1b:df:73:0c:25:1f:17:cf:66:39:c5:06:bc:f0:41:
         e3:a4:00:44:53:b6:d9:b6:45:f3:a4:c6:37:0d:84:d7:ef:1d:
         b5:79:bf:06:43:23:b0:27:3c:c1:08:58:ee:84:c8:e7:91:62:
         8e:a7:6d:de:eb:00:82:38:2e:bc:f7:cf:13:5e:b8:33:1e:00:
         9f:5a:19:45:e7:ec:c1:c3:12:57:f1:0e:86:22:85:a5:b2:8f:
         bf:62:3e:c1:c4:24:e6:58:a0:f0:fa:ac:38:57:63:c3:15:94:
         92:6c:43:6a:e8:e6:e9:94:61:b8:6f:c1:4f:ae:a0:06:17:13:
         08:95:92:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org