Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38372e302f32342d3234203d3e203232373036.roa
File:                     3230302e3135322e38372e302f32342d3234203d3e203232373036.roa (raw, json)
Hash identifier:          8VYp9bF7ywMbR59JX0M07K+Z0IztI0QvdRD5fnP5QW0=
Subject key identifier:   65:A2:3D:A3:E9:72:23:CC:01:B9:54:87:E5:84:E2:74:67:D7:53:24
Certificate issuer:       /CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
Certificate serial:       3A2B80DD16A87D2B407D4FD10A3978EA84A3B1C9
Authority key identifier: 5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38372e302f32342d3234203d3e203232373036.roa
Signing time:             Mon 09 Jan 2023 22:50:10 +0000
ROA not before:           Mon 09 Jan 2023 22:45:10 +0000
ROA not after:            Mon 08 Jan 2024 22:50:10 +0000
asID:                     22706
IP address blocks:        200.152.87.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:2b:80:dd:16:a8:7d:2b:40:7d:4f:d1:0a:39:78:ea:84:a3:b1:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
        Validity
            Not Before: Jan  9 22:45:10 2023 GMT
            Not After : Jan  8 22:50:10 2024 GMT
        Subject: CN=65A23DA3E97223CC01B95487E584E27467D75324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8f:a7:a2:e2:4e:7d:01:bb:a4:ed:36:64:c4:
                    de:d2:2d:61:c6:90:4e:0d:a9:78:9f:35:4b:99:eb:
                    87:77:3e:06:b0:6e:0b:ed:0a:2c:aa:a4:6a:3a:2f:
                    50:d7:7d:b1:ee:0a:6e:b3:62:f6:60:15:e4:ec:74:
                    19:c2:bc:48:c4:fb:7e:18:1f:19:03:34:83:6c:0d:
                    a4:c9:78:c2:0a:19:c8:c0:7b:f0:49:52:07:c8:3a:
                    21:4e:3a:a2:a5:cf:8b:9f:96:91:3f:4e:d8:02:5a:
                    d7:48:41:62:ec:69:88:0e:fc:cd:75:d7:ad:b9:15:
                    56:26:be:7a:88:b2:7d:bc:0a:3d:55:d0:89:30:bb:
                    ec:b6:ae:9c:ae:99:69:5b:7b:8b:05:63:79:c0:2f:
                    c1:fa:5c:55:13:09:4d:2c:97:06:25:ea:55:3b:06:
                    fb:99:03:c1:50:39:4b:83:94:e8:6f:cd:43:00:4b:
                    d4:9c:ee:3c:22:06:c1:d1:be:46:71:b1:73:60:aa:
                    04:72:bb:d8:4a:88:8d:04:fe:16:a6:88:57:ba:ce:
                    6a:71:ff:97:67:95:94:26:5c:7c:c5:ab:a6:86:5d:
                    c8:04:55:fd:de:92:87:91:e6:51:8b:37:af:14:75:
                    68:2e:a0:c7:98:a8:e7:08:95:f0:9f:87:52:18:66:
                    48:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:A2:3D:A3:E9:72:23:CC:01:B9:54:87:E5:84:E2:74:67:D7:53:24
            X509v3 Authority Key Identifier:
                keyid:5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38372e302f32342d3234203d3e203232373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:d5:74:0b:51:c0:d8:10:fb:10:14:ba:84:1c:6c:ea:6c:d5:
         1a:39:bc:1e:5a:6f:6c:14:d1:ce:6c:86:a4:02:4d:97:6c:b8:
         29:ba:de:e2:44:c5:c7:53:09:8a:fa:4b:22:4f:c7:a6:b4:38:
         2b:8f:80:6a:e3:80:45:1d:89:ec:eb:88:a4:94:1a:88:83:b8:
         40:3c:a0:9a:c1:cd:70:b2:dc:38:0c:8b:c4:1b:84:1d:be:7a:
         a8:d9:ca:9f:c9:1a:0b:c4:7e:6c:35:70:f3:67:a4:29:32:66:
         5b:4d:a0:61:0d:d3:aa:18:dd:0f:31:e6:21:24:fd:3f:d7:52:
         2a:5b:3e:b1:b4:2c:cb:58:52:27:c0:4c:a0:4c:09:a5:07:25:
         61:c0:45:1f:60:84:d5:60:e4:88:54:f3:bc:26:db:ba:ac:9a:
         70:35:2d:0d:d6:e7:a5:ed:d9:3c:5a:6a:9d:8c:6c:3d:d3:f9:
         a1:8e:92:8b:fa:ba:25:dc:c0:fa:d7:e1:8f:38:f7:38:2a:d9:
         75:de:ef:46:30:a3:e0:3d:42:19:0b:23:35:08:50:fb:54:d5:
         21:da:7a:00:ae:36:d4:ca:d0:13:69:53:8e:98:a7:19:64:6c:
         6b:83:eb:33:39:f7:32:fa:66:4e:ca:11:45:66:d6:ff:05:d9:
         d2:48:80:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org