Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38392e302f32342d3234203d3e203232373036.roa
File:                     3230302e3135322e38392e302f32342d3234203d3e203232373036.roa (raw, json)
Hash identifier:          rHFR7CE+pyCQ8xNfHWau+yXriEzWPxnYXNUcLJ0SoiU=
Subject key identifier:   87:92:EA:03:D7:A8:F8:95:BC:04:BC:41:D5:58:23:5A:90:98:FC:EE
Certificate issuer:       /CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
Certificate serial:       7F5AC3C9AD87A1517BB2A40236E7218046481B3C
Authority key identifier: 5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38392e302f32342d3234203d3e203232373036.roa
Signing time:             Mon 09 Jan 2023 22:50:31 +0000
ROA not before:           Mon 09 Jan 2023 22:45:31 +0000
ROA not after:            Mon 08 Jan 2024 22:50:31 +0000
asID:                     22706
IP address blocks:        200.152.89.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:5a:c3:c9:ad:87:a1:51:7b:b2:a4:02:36:e7:21:80:46:48:1b:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
        Validity
            Not Before: Jan  9 22:45:31 2023 GMT
            Not After : Jan  8 22:50:31 2024 GMT
        Subject: CN=8792EA03D7A8F895BC04BC41D558235A9098FCEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:56:60:c4:cc:71:e9:6f:0b:73:72:a6:08:d2:
                    85:fd:b6:d7:a9:6d:67:bc:3e:d7:57:8d:e1:b4:3b:
                    78:c4:7d:87:ca:63:19:0a:e6:d6:43:f6:25:8b:32:
                    47:5c:1a:d0:91:b2:3e:78:7e:3c:22:17:33:8f:21:
                    a9:d7:b0:9c:4d:7f:4d:cc:cd:3a:9f:43:a7:07:26:
                    6a:10:ba:ef:77:a1:c8:83:08:12:38:e6:f0:79:40:
                    92:5e:d0:0d:0b:d6:53:a3:c0:9c:90:26:28:70:30:
                    07:ea:3d:e9:a8:65:40:7a:15:4e:9e:67:e6:15:db:
                    00:dc:03:22:f3:1c:17:4d:bf:60:d1:7a:d2:cc:62:
                    fe:8f:1a:9f:2c:7d:0b:31:4a:e9:dc:44:06:fc:60:
                    ae:3b:7a:79:d3:8e:71:c7:dd:ec:45:c3:c1:2b:68:
                    d8:81:94:26:01:97:13:e0:a5:18:63:ff:51:df:fb:
                    03:99:3f:b8:88:64:97:de:59:d8:31:78:b0:5d:ca:
                    d6:af:77:47:14:25:f2:9f:a6:12:c4:74:f7:94:a6:
                    f9:a1:b1:fa:5d:ff:66:5c:db:d3:9d:0c:4d:28:c6:
                    71:37:be:ca:0f:b8:47:db:c1:59:5d:09:d2:39:fe:
                    d2:de:0f:f6:bc:88:40:b0:de:13:9c:21:6b:aa:ad:
                    51:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:92:EA:03:D7:A8:F8:95:BC:04:BC:41:D5:58:23:5A:90:98:FC:EE
            X509v3 Authority Key Identifier:
                keyid:5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e38392e302f32342d3234203d3e203232373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:8c:91:85:b7:3c:bc:ef:00:8e:ed:d7:f1:3e:28:89:39:16:
         75:9d:54:4d:18:b3:de:8f:63:61:aa:c3:ba:15:59:d2:2d:71:
         a1:f4:54:cd:b9:ff:4f:d5:03:40:6d:2e:c1:a5:1b:f0:78:ea:
         83:cf:c3:bf:89:52:fb:bc:b9:65:6c:04:19:cb:fa:08:0d:6d:
         be:09:9a:eb:80:89:c5:9a:07:14:98:7b:c3:0c:54:98:c5:ba:
         99:ee:45:80:98:67:f8:00:a2:8c:ae:6e:cf:32:53:2c:b3:ee:
         fc:1c:fe:1a:06:5b:b5:80:fc:ad:74:7e:e5:f4:d1:03:3a:99:
         45:05:40:15:e1:f7:77:0c:0f:12:b6:97:81:f7:e4:89:19:1b:
         8d:bc:0b:e9:e3:83:a9:df:ec:73:57:6a:8b:81:94:f2:71:e6:
         04:df:1a:ef:bf:c4:83:57:cd:17:81:8f:6a:10:82:2a:3f:2b:
         32:bf:fe:98:8e:11:52:7a:70:a3:9e:44:28:0c:4d:5f:4a:d2:
         3e:f0:1a:32:c6:b6:d4:2f:66:a7:b2:c3:c4:35:da:e7:a8:8a:
         0f:00:17:28:46:f6:22:b1:b2:78:1c:cb:2f:44:4c:99:b2:30:
         53:c7:ce:f7:da:47:36:ce:66:98:78:45:9e:fa:81:c8:50:5f:
         ca:47:5e:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org