Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38382e302f32332d3233203d3e203232373036.roa
File:                     3230302e3135322e38382e302f32332d3233203d3e203232373036.roa (raw, json)
Hash identifier:          FS/y2kTUXSbofpcHH/2L45k1xha5OKJCxgwS0L3FCMM=
Subject key identifier:   DC:42:78:38:AC:70:90:76:01:ED:07:AB:95:9B:D5:98:42:4D:F5:7E
Certificate issuer:       /CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
Certificate serial:       6AE98CA9D0499BB1D417800FBEAA8B0EA29AD0F3
Authority key identifier: 5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38382e302f32332d3233203d3e203232373036.roa
Signing time:             Mon 09 Jan 2023 12:59:27 +0000
ROA not before:           Mon 09 Jan 2023 12:54:27 +0000
ROA not after:            Mon 08 Jan 2024 12:59:27 +0000
asID:                     22706
IP address blocks:        200.152.88.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:e9:8c:a9:d0:49:9b:b1:d4:17:80:0f:be:aa:8b:0e:a2:9a:d0:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
        Validity
            Not Before: Jan  9 12:54:27 2023 GMT
            Not After : Jan  8 12:59:27 2024 GMT
        Subject: CN=DC427838AC70907601ED07AB959BD598424DF57E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:31:92:98:be:cb:43:92:03:2a:4f:16:d5:d0:
                    e6:e6:fc:b2:89:36:d8:e1:fe:d9:bc:2c:01:17:2a:
                    67:15:16:e8:77:6d:88:91:93:64:4c:da:d9:d1:bc:
                    3c:91:1b:ae:ce:af:df:36:2a:a9:72:fb:5e:a3:43:
                    1e:1d:8e:bc:cb:c5:69:db:ec:c9:14:71:63:3c:c6:
                    9c:d8:29:21:9f:bd:fd:2f:4a:4f:27:78:14:36:b8:
                    5c:b3:62:a3:c4:84:74:bd:1b:0b:27:0a:55:62:a7:
                    36:c9:83:96:e2:21:29:74:45:74:14:31:27:4f:c3:
                    52:49:e7:3e:88:e0:89:d2:c8:ff:16:eb:f8:48:92:
                    37:3b:13:02:49:d0:51:35:28:57:fe:19:63:1c:7b:
                    d7:0b:1a:3e:9c:ea:45:10:5b:bf:5c:78:39:af:12:
                    bb:3b:dc:46:5b:31:99:ae:75:7c:40:d0:b8:d2:50:
                    2c:15:53:a3:28:5a:58:01:34:e1:f9:ae:80:12:53:
                    63:cb:5e:7d:94:3d:60:b4:80:c2:30:c9:1f:c6:e9:
                    9f:e3:a1:38:a2:82:48:69:be:84:55:47:86:4f:ce:
                    fc:f9:af:2b:11:a2:c6:a0:77:85:5d:7c:a1:5b:25:
                    51:b7:10:3d:89:66:38:e5:72:73:d6:22:a8:e9:96:
                    b8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:42:78:38:AC:70:90:76:01:ED:07:AB:95:9B:D5:98:42:4D:F5:7E
            X509v3 Authority Key Identifier:
                keyid:5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38382e302f32332d3233203d3e203232373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bc:49:fe:ea:53:66:03:59:52:15:5c:03:2a:66:cf:46:01:77:
         ba:a9:b1:77:1d:cc:06:af:65:68:a0:bb:7f:cd:15:6a:c1:d7:
         a1:0f:47:50:67:8a:a3:95:24:a9:1b:c4:bb:1b:eb:fc:e2:be:
         db:ff:7c:bd:f1:ef:ea:82:35:e1:69:db:d4:38:ca:7f:fa:25:
         3b:e7:1a:6f:f9:27:74:85:6c:94:0b:5e:cf:2d:b8:c5:3c:91:
         e6:9b:50:3b:bd:b0:ed:26:f8:21:69:f5:93:26:46:99:a9:5c:
         ab:d1:03:ba:b6:60:5e:d8:02:36:35:c4:77:72:d0:4a:29:b1:
         40:e8:8b:c0:64:85:04:88:2f:6c:87:3b:ed:e1:29:b6:85:d3:
         75:a4:1c:f2:62:5b:15:c5:0e:88:d9:20:e2:3f:00:c6:c3:5a:
         2c:25:a6:61:69:49:b9:ab:e1:8c:cb:97:78:a9:e8:47:ef:58:
         37:93:ea:ae:72:8d:25:45:2a:ea:8b:99:56:cb:25:0e:3e:1e:
         81:0e:d1:b2:c2:42:1f:f2:ee:75:e9:cf:53:58:58:e7:28:50:
         2d:49:91:ad:be:25:a5:9e:ba:04:0c:77:9c:ea:52:6d:b5:4b:
         51:3a:1a:8e:e5:c9:e5:9e:a4:63:9a:c2:1f:9f:aa:8c:0d:85:
         7d:d8:21:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org