Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38382e302f32312d3231203d3e203232373036.roa
File:                     3230302e3135322e38382e302f32312d3231203d3e203232373036.roa (raw, json)
Hash identifier:          ZArJrQQ7rLCA2ut1H6i3xL+bKLzOpalSX/ApjjsxxAM=
Subject key identifier:   0A:91:28:FE:B6:B4:ED:2F:5E:B9:5B:F1:09:F3:1E:52:B4:4C:00:B1
Certificate issuer:       /CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
Certificate serial:       2B135B84CCF296DA6DAFE96B43D72499BA1C2B5F
Authority key identifier: 5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38382e302f32312d3231203d3e203232373036.roa
Signing time:             Mon 09 Jan 2023 12:59:13 +0000
ROA not before:           Mon 09 Jan 2023 12:54:13 +0000
ROA not after:            Mon 08 Jan 2024 12:59:13 +0000
asID:                     22706
IP address blocks:        200.152.88.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:13:5b:84:cc:f2:96:da:6d:af:e9:6b:43:d7:24:99:ba:1c:2b:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
        Validity
            Not Before: Jan  9 12:54:13 2023 GMT
            Not After : Jan  8 12:59:13 2024 GMT
        Subject: CN=0A9128FEB6B4ED2F5EB95BF109F31E52B44C00B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:59:10:2e:31:fe:75:13:11:36:9f:7f:c7:57:
                    2d:fa:ab:46:40:88:f8:a6:da:96:b5:38:81:49:7f:
                    dd:3f:8e:63:d8:d6:55:34:8d:b4:62:f7:db:3e:89:
                    18:5a:a6:1a:62:a8:02:bf:e0:8d:f7:e6:6d:6e:0d:
                    4c:71:e1:79:e1:30:76:c5:bf:20:8c:52:1b:b6:7e:
                    d8:b5:f5:60:e0:78:45:44:24:ac:38:04:b2:f2:9e:
                    6d:33:0d:33:b9:c5:4e:14:68:f6:d7:b7:f6:48:a5:
                    d2:a1:ca:74:da:ec:59:a2:23:68:b3:f2:76:2c:61:
                    8d:4b:bb:7c:0b:f3:1c:dc:6f:47:c9:0c:93:dc:2c:
                    32:94:d7:78:7a:73:b4:26:6d:04:bb:19:97:90:e3:
                    81:40:a5:c2:8b:b8:e8:6a:c7:23:3a:ad:b9:30:ed:
                    17:32:4a:82:5d:b0:3e:10:f0:98:b9:07:66:db:b6:
                    89:31:cb:3c:1f:a8:fb:4d:28:14:4e:27:c6:78:e2:
                    25:11:50:cf:72:e5:a0:f8:57:93:c1:b9:7a:aa:53:
                    31:c3:8e:32:ca:02:65:ca:09:b7:24:b3:b9:20:f3:
                    7f:72:42:e3:b5:d0:9e:8d:36:51:1d:41:ac:46:c3:
                    aa:b6:b0:bc:a9:e3:48:54:02:99:cf:ca:8f:44:f5:
                    35:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:91:28:FE:B6:B4:ED:2F:5E:B9:5B:F1:09:F3:1E:52:B4:4C:00:B1
            X509v3 Authority Key Identifier:
                keyid:5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38382e302f32312d3231203d3e203232373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         25:22:1a:a3:fa:24:ff:11:c9:c8:73:1f:3f:32:c6:cc:4d:8f:
         7e:9d:a9:a4:79:d5:1c:e8:f6:45:dd:47:b5:dc:4a:f8:25:d2:
         72:56:df:36:6d:ff:6b:17:24:9d:87:d4:16:06:19:72:7c:54:
         89:1b:3f:9a:61:47:10:90:7e:3d:09:10:68:16:0e:36:a5:12:
         a7:95:bf:aa:8b:8f:db:f0:6c:0b:3f:ac:6d:28:b8:17:86:30:
         52:9b:c5:c8:12:97:86:f6:7d:f9:cf:0a:69:dd:f2:ca:2a:b9:
         b3:7c:8e:37:83:71:fe:bc:30:57:a3:7d:2e:5b:41:79:b7:cd:
         24:9d:c7:ac:54:c2:e2:e9:e8:7c:af:8c:a4:11:60:93:6d:db:
         b1:71:d0:8d:b3:22:db:7f:ae:29:4a:83:85:59:8a:d6:45:28:
         b6:fd:8d:1d:06:1e:19:45:bf:11:89:a1:5e:9f:fe:70:b4:51:
         53:25:21:cd:ce:87:d1:d7:79:cb:95:76:95:45:a5:d7:88:66:
         8d:88:ff:ee:73:27:82:28:da:5d:1f:e3:bb:02:07:31:bd:58:
         68:12:5f:81:cf:08:db:f8:33:0c:af:07:f2:65:6c:71:3a:a0:
         3e:e0:e6:20:cd:b4:10:7d:89:20:cb:dd:d1:50:35:ca:fc:02:
         0d:e3:fa:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org