Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38382e302f32322d3232203d3e203232373036.roa
File:                     3230302e3135322e38382e302f32322d3232203d3e203232373036.roa (raw, json)
Hash identifier:          aPjKxsWl8dE+vxIsUFN7BfS4MhsFSWA6vok6g7GbWJ8=
Subject key identifier:   CD:E6:96:84:23:E6:B3:62:8A:91:28:52:8C:5E:0E:79:35:1F:8D:88
Certificate issuer:       /CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
Certificate serial:       6541EFDDD6804FA8BC50D596D05DC75B176E0D7A
Authority key identifier: 5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38382e302f32322d3232203d3e203232373036.roa
Signing time:             Tue 10 Jan 2023 09:24:40 +0000
ROA not before:           Tue 10 Jan 2023 09:19:40 +0000
ROA not after:            Tue 09 Jan 2024 09:24:40 +0000
asID:                     22706
IP address blocks:        200.152.88.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:41:ef:dd:d6:80:4f:a8:bc:50:d5:96:d0:5d:c7:5b:17:6e:0d:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
        Validity
            Not Before: Jan 10 09:19:40 2023 GMT
            Not After : Jan  9 09:24:40 2024 GMT
        Subject: CN=CDE6968423E6B3628A9128528C5E0E79351F8D88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:12:27:e7:c2:e4:af:cb:54:2f:2f:c5:57:69:
                    5e:08:88:b1:e7:00:77:4c:6a:64:69:25:0e:1d:8d:
                    e5:fb:61:65:1f:68:30:5e:6d:20:21:37:c4:1b:a4:
                    f0:86:22:f7:2b:74:df:e8:4f:e3:e4:97:05:23:21:
                    fa:ce:fb:d4:59:ea:e1:b4:e1:4d:3a:3a:b9:f9:e6:
                    45:07:b0:8a:bd:ff:20:1e:b3:03:e4:1c:66:e5:a5:
                    27:f8:8a:19:f0:51:fa:4b:9d:15:47:05:b7:99:ef:
                    08:5c:66:ac:81:f2:bb:00:27:6a:bf:af:b3:1d:53:
                    3b:40:33:7f:d6:d5:3f:ea:0b:81:c4:9c:8d:f0:53:
                    4f:88:30:1b:4d:af:a4:16:b9:b8:8d:f2:cf:b2:c0:
                    16:6e:bc:11:cb:a7:c7:c3:78:38:cf:5b:fe:a4:30:
                    6c:40:2e:c5:50:de:0b:7c:92:a3:c7:40:2c:1f:2d:
                    03:cd:89:ec:e7:22:3c:28:41:aa:9e:9e:5e:dc:30:
                    f1:48:06:00:af:9e:37:0f:bc:1f:6a:ed:2d:bc:20:
                    ca:f6:14:60:14:c8:b3:2d:3b:2a:28:1c:a6:b5:8f:
                    75:dd:a6:ec:6b:e3:81:7d:67:ce:a6:6c:e8:e5:f9:
                    5f:66:ea:4c:e8:63:28:7f:ec:d6:92:84:a3:19:a4:
                    3f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:E6:96:84:23:E6:B3:62:8A:91:28:52:8C:5E:0E:79:35:1F:8D:88
            X509v3 Authority Key Identifier:
                keyid:5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38382e302f32322d3232203d3e203232373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.88.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:cc:7d:b8:59:8d:fc:7d:c7:b3:4d:1d:fe:49:f4:33:a3:c6:
         77:62:92:0f:f1:a3:1e:65:bf:8a:15:0b:86:8f:4f:2d:95:5d:
         24:3d:8f:de:a6:79:f7:87:40:72:ba:df:0d:7c:8a:79:8f:aa:
         32:19:ec:fa:d3:1b:09:70:81:d5:b2:68:49:b4:39:95:87:3d:
         21:35:24:a6:74:ac:14:4d:ed:9f:8d:76:bc:1a:b0:f4:b2:b9:
         17:f3:f9:d3:06:9d:e0:a2:e7:35:c0:5b:c1:3f:d2:b5:a6:51:
         6f:47:d1:de:7c:61:30:8a:a0:dc:e3:71:39:89:29:64:87:07:
         f5:af:46:9b:4f:5d:1b:3b:7d:b8:ca:75:bb:4f:92:43:08:9c:
         75:09:f5:41:74:6e:5f:45:2f:83:79:fa:18:a9:88:f8:e0:8e:
         3a:c8:00:6a:27:c5:b5:08:a2:e2:ec:64:ff:25:4a:3a:05:a0:
         9c:70:07:a2:1c:ec:f3:3c:01:43:02:cb:e7:98:cf:75:e3:a7:
         05:ba:83:7d:d9:8d:39:c0:75:e3:1e:6f:2e:d9:53:54:18:4d:
         37:a9:ff:5f:c1:20:d2:32:cf:c5:5f:39:35:88:91:35:ba:e4:
         3b:0f:4d:b6:21:32:c6:d1:f4:86:90:8d:24:fb:17:31:4f:ef:
         e1:14:26:21
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUZUHv3daAT6i8UNWW0F3HWxduDXowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQ3Njc2NjQzOTcxNkREOUE2MUM0NzE3REU5NkFGRTUz
MUE4QUMzRTAeFw0yMzAxMTAwOTE5NDBaFw0yNDAxMDkwOTI0NDBaMDMxMTAvBgNV
BAMTKENERTY5Njg0MjNFNkIzNjI4QTkxMjg1MjhDNUUwRTc5MzUxRjhEODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHEifnwuSvy1QvL8VXaV4IiLHn
AHdMamRpJQ4djeX7YWUfaDBebSAhN8QbpPCGIvcrdN/oT+PklwUjIfrO+9RZ6uG0
4U06Orn55kUHsIq9/yAeswPkHGblpSf4ihnwUfpLnRVHBbeZ7whcZqyB8rsAJ2q/
r7MdUztAM3/W1T/qC4HEnI3wU0+IMBtNr6QWubiN8s+ywBZuvBHLp8fDeDjPW/6k
MGxALsVQ3gt8kqPHQCwfLQPNieznIjwoQaqenl7cMPFIBgCvnjcPvB9q7S28IMr2
FGAUyLMtOyooHKa1j3Xdpuxr44F9Z86mbOjl+V9m6kzoYyh/7NaShKMZpD/bAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUzeaWhCPms2KKkShSjF4OeTUfjYgwHwYDVR0j
BBgwFoAUXXZ2ZDlxbdmmHEcX3pav5TGorD4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3Aya3V4V1l3Q0QyWnVQRmJpTFV0SlBoQW05YjgyMlZyQ01YcjNNRU40
bVkvMC81RDc2NzY2NDM5NzE2REQ5QTYxQzQ3MTdERTk2QUZFNTMxQThBQzNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVENzY3NjY0Mzk3MTZERDlB
NjFDNDcxN0RFOTZBRkU1MzFBOEFDM0UuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NwMmt1eFdZd0NEMlp1UEZiaUxVdEpQaEFtOWI4MjJWckNNWHIzTUVONG1ZLzAv
MzIzMDMwMmUzMTM1MzIyZTM4MzgyZTMwMmYzMjMyMmQzMjMyMjAzZDNlMjAzMjMy
MzczMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQCyJhYMA0GCSqGSIb3DQEBCwUAA4IBAQCWzH24WY38
fcezTR3+SfQzo8Z3YpIP8aMeZb+KFQuGj08tlV0kPY/epnn3h0Byut8NfIp5j6oy
Gez60xsJcIHVsmhJtDmVhz0hNSSmdKwUTe2fjXa8GrD0srkX8/nTBp3gouc1wFvB
P9K1plFvR9HefGEwiqDc43E5iSlkhwf1r0abT10bO324ynW7T5JDCJx1CfVBdG5f
RS+DefoYqYj44I46yABqJ8W1CKLi7GT/JUo6BaCccAeiHOzzPAFDAsvnmM9146cF
uoN92Y05wHXjHm8u2VNUGE03qf9fwSDSMs/FXzk1iJE1uuQ7D022ITLG0fSGkI0k
+xcxT+/hFCYh
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org