Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38382e302f32342d3234203d3e203232373036.roa
File:                     3230302e3135322e38382e302f32342d3234203d3e203232373036.roa (raw, json)
Hash identifier:          qd7we4b3wmKGnc4vYdKoc8S/m/hl/LNfFt2YtSDkfb8=
Subject key identifier:   BE:8E:49:6C:3A:FF:0E:F5:09:22:B5:D6:27:31:7F:42:3F:D5:FA:C8
Certificate issuer:       /CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
Certificate serial:       7143CB2EDC9FFC6A0EE6639C1FC67C94CD46B6B8
Authority key identifier: 5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38382e302f32342d3234203d3e203232373036.roa
Signing time:             Mon 09 Jan 2023 22:50:21 +0000
ROA not before:           Mon 09 Jan 2023 22:45:21 +0000
ROA not after:            Mon 08 Jan 2024 22:50:21 +0000
asID:                     22706
IP address blocks:        200.152.88.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:43:cb:2e:dc:9f:fc:6a:0e:e6:63:9c:1f:c6:7c:94:cd:46:b6:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
        Validity
            Not Before: Jan  9 22:45:21 2023 GMT
            Not After : Jan  8 22:50:21 2024 GMT
        Subject: CN=BE8E496C3AFF0EF50922B5D627317F423FD5FAC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9a:28:87:ee:ca:6f:e2:74:d0:f4:bd:4e:32:
                    2a:94:67:29:e1:ef:1b:17:8f:16:6c:06:ac:33:c0:
                    bb:f6:65:3c:21:63:11:a4:5c:73:3f:7c:ad:55:84:
                    53:2d:83:60:26:fa:29:11:c8:e3:9b:97:68:8a:95:
                    ae:c7:d4:01:0c:fc:f3:c8:01:95:5d:09:1f:b1:02:
                    ba:32:5b:a4:63:bb:22:48:f4:a8:66:4a:34:a3:b8:
                    10:5a:e1:e9:ad:f3:6c:8b:37:bb:ba:6b:b2:15:12:
                    c0:c0:ca:2a:b7:71:f6:5a:1f:6d:04:9d:e0:07:bb:
                    9d:1e:4a:93:8a:37:5c:14:f7:97:9f:84:47:56:59:
                    05:56:43:2b:47:b5:69:a8:30:f7:68:2d:bd:37:e6:
                    e1:90:30:f2:60:57:e1:07:31:fb:8f:75:69:0d:d4:
                    bf:e9:b9:35:2b:d5:05:b9:4c:56:fb:3c:14:99:50:
                    6a:b8:6f:6d:6c:8a:7d:b3:48:2a:5f:a3:d1:c7:b1:
                    67:86:05:e3:5c:b3:d2:87:18:d4:29:5f:12:49:7b:
                    7b:48:c5:18:24:93:af:8b:4d:30:ea:86:2e:e1:10:
                    72:a4:7f:2f:f7:fd:21:f8:b9:03:53:aa:2a:48:c7:
                    5b:62:ad:49:ff:fc:32:c9:48:61:c2:9e:91:e4:6d:
                    a3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:8E:49:6C:3A:FF:0E:F5:09:22:B5:D6:27:31:7F:42:3F:D5:FA:C8
            X509v3 Authority Key Identifier:
                keyid:5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38382e302f32342d3234203d3e203232373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:36:3e:eb:bb:56:48:a9:cc:a4:ec:9c:99:d0:6e:36:fe:e2:
         d7:ae:bd:2b:24:8a:a1:14:b3:de:a4:20:96:f2:fb:cf:85:ca:
         72:6f:83:c6:89:86:26:1e:f7:24:fe:dd:c3:07:c1:5b:b0:13:
         a6:ba:2a:57:70:82:6d:f9:c3:4c:62:4b:b8:5e:05:b6:a8:9f:
         4d:21:a5:02:e2:e3:91:0f:b3:e3:fa:26:17:e5:86:72:20:4e:
         96:ef:9a:72:86:eb:24:e3:66:cd:c3:62:fb:f4:1e:bf:47:55:
         0f:c3:8f:b9:f9:7c:e7:c1:6b:65:bb:0f:ab:b5:50:fb:68:c1:
         d1:a1:65:35:42:56:4c:bd:8c:72:46:b2:4b:88:7b:f4:2d:80:
         4f:9a:a9:0a:1e:54:b9:4c:83:83:fe:9d:ee:f2:46:0c:b7:5a:
         23:54:71:44:3e:93:cd:56:d8:2b:05:06:cc:2e:e4:05:8f:62:
         60:6e:a5:97:d6:65:fd:21:7b:9a:28:f4:85:06:47:24:cd:a1:
         1a:d5:7c:e1:75:b8:31:d2:52:1b:35:9b:40:2e:4b:2b:ec:69:
         c2:db:a7:1a:b8:5c:72:79:0c:64:89:8d:2c:99:fc:45:d4:c3:
         66:cc:da:55:88:3e:70:21:2b:05:42:77:fa:39:85:35:52:ad:
         dd:9d:71:8e
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUcUPLLtyf/GoO5mOcH8Z8lM1GtrgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQ3Njc2NjQzOTcxNkREOUE2MUM0NzE3REU5NkFGRTUz
MUE4QUMzRTAeFw0yMzAxMDkyMjQ1MjFaFw0yNDAxMDgyMjUwMjFaMDMxMTAvBgNV
BAMTKEJFOEU0OTZDM0FGRjBFRjUwOTIyQjVENjI3MzE3RjQyM0ZENUZBQzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwmiiH7spv4nTQ9L1OMiqUZynh
7xsXjxZsBqwzwLv2ZTwhYxGkXHM/fK1VhFMtg2Am+ikRyOObl2iKla7H1AEM/PPI
AZVdCR+xAroyW6RjuyJI9KhmSjSjuBBa4emt82yLN7u6a7IVEsDAyiq3cfZaH20E
neAHu50eSpOKN1wU95efhEdWWQVWQytHtWmoMPdoLb035uGQMPJgV+EHMfuPdWkN
1L/puTUr1QW5TFb7PBSZUGq4b21sin2zSCpfo9HHsWeGBeNcs9KHGNQpXxJJe3tI
xRgkk6+LTTDqhi7hEHKkfy/3/SH4uQNTqipIx1tirUn//DLJSGHCnpHkbaNTAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUvo5JbDr/DvUJIrXWJzF/Qj/V+sgwHwYDVR0j
BBgwFoAUXXZ2ZDlxbdmmHEcX3pav5TGorD4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3Aya3V4V1l3Q0QyWnVQRmJpTFV0SlBoQW05YjgyMlZyQ01YcjNNRU40
bVkvMC81RDc2NzY2NDM5NzE2REQ5QTYxQzQ3MTdERTk2QUZFNTMxQThBQzNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVENzY3NjY0Mzk3MTZERDlB
NjFDNDcxN0RFOTZBRkU1MzFBOEFDM0UuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NwMmt1eFdZd0NEMlp1UEZiaUxVdEpQaEFtOWI4MjJWckNNWHIzTUVONG1ZLzAv
MzIzMDMwMmUzMTM1MzIyZTM4MzgyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMy
MzczMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyJhYMA0GCSqGSIb3DQEBCwUAA4IBAQCgNj7ru1ZI
qcyk7JyZ0G42/uLXrr0rJIqhFLPepCCW8vvPhcpyb4PGiYYmHvck/t3DB8FbsBOm
uipXcIJt+cNMYku4XgW2qJ9NIaUC4uORD7Pj+iYX5YZyIE6W75pyhusk42bNw2L7
9B6/R1UPw4+5+XznwWtluw+rtVD7aMHRoWU1QlZMvYxyRrJLiHv0LYBPmqkKHlS5
TIOD/p3u8kYMt1ojVHFEPpPNVtgrBQbMLuQFj2JgbqWX1mX9IXuaKPSFBkckzaEa
1Xzhdbgx0lIbNZtALksr7GnC26cauFxyeQxkiY0smfxF1MNmzNpViD5wISsFQnf6
OYU1Uq3dnXGO
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org