Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e39302e302f32332d3233203d3e203232373036.roa
File:                     3230302e3135322e39302e302f32332d3233203d3e203232373036.roa (raw, json)
Hash identifier:          6+ZSiwD22tHrRbWBy9xCOE/ZWzvxynvbUqmnvwt8Pww=
Subject key identifier:   53:1D:A3:D4:9A:4B:7D:C6:C9:66:B8:AE:52:74:78:F8:4F:13:96:33
Certificate issuer:       /CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
Certificate serial:       228E0BB6017B09A1EF949C2F2DE4784283B5EF19
Authority key identifier: 5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e39302e302f32332d3233203d3e203232373036.roa
Signing time:             Mon 09 Jan 2023 12:59:36 +0000
ROA not before:           Mon 09 Jan 2023 12:54:36 +0000
ROA not after:            Mon 08 Jan 2024 12:59:36 +0000
asID:                     22706
IP address blocks:        200.152.90.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:8e:0b:b6:01:7b:09:a1:ef:94:9c:2f:2d:e4:78:42:83:b5:ef:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
        Validity
            Not Before: Jan  9 12:54:36 2023 GMT
            Not After : Jan  8 12:59:36 2024 GMT
        Subject: CN=531DA3D49A4B7DC6C966B8AE527478F84F139633
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6c:1f:d3:2d:bf:b2:95:c2:d9:9f:bd:bd:18:
                    15:22:59:32:03:bf:c9:fa:ad:b1:26:62:f1:1c:b1:
                    ef:18:3c:5e:0b:4b:4c:cf:4e:ff:e1:3c:72:db:f3:
                    37:73:fd:17:90:07:c3:0a:7d:24:b4:31:9e:8c:a1:
                    82:87:a8:d5:c9:6c:e7:53:e9:6e:9d:46:d6:56:54:
                    fa:69:1d:91:54:0e:ed:ae:87:80:45:2d:46:e2:a1:
                    aa:d8:26:28:a5:6c:4f:71:3c:36:17:15:3b:59:03:
                    d5:26:97:2b:9d:2e:51:85:ec:e7:ac:ff:f0:dd:b0:
                    73:ba:c9:e9:d8:86:0c:1c:9b:df:39:51:6b:f4:3e:
                    da:03:7e:4d:02:d0:6d:8e:00:31:14:1a:7d:a6:6f:
                    d9:ca:60:2b:aa:66:27:6c:04:d0:3e:e6:9c:ab:92:
                    f4:66:4e:c0:f8:da:cb:69:e0:a2:74:12:b1:d6:a4:
                    e2:80:78:61:aa:85:36:0e:5e:e9:50:bc:92:a1:1c:
                    e1:fe:81:53:c0:5a:f7:e9:3e:23:cb:e6:67:5c:37:
                    07:12:e2:1c:10:37:f5:76:40:21:78:07:05:27:79:
                    51:97:1a:cd:4e:df:ad:d0:71:27:7b:f0:a2:8b:e7:
                    5f:a8:c0:3c:3c:b7:a6:99:f6:4f:81:11:e6:df:a2:
                    8b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:1D:A3:D4:9A:4B:7D:C6:C9:66:B8:AE:52:74:78:F8:4F:13:96:33
            X509v3 Authority Key Identifier:
                keyid:5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e39302e302f32332d3233203d3e203232373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bf:87:ee:d1:10:4d:46:21:4a:06:e5:8d:82:e9:b3:3a:bb:8a:
         cf:3f:f9:11:7e:25:ac:96:b5:8d:0d:aa:6b:54:35:8d:6d:0b:
         8d:18:91:2e:6c:e0:b2:cb:e1:01:67:cb:9c:6d:63:02:ef:50:
         bc:97:7d:78:34:a2:53:5a:8b:6e:88:c6:d5:78:21:3f:ff:cc:
         ea:65:b4:de:5a:3a:87:54:b7:52:b2:16:4b:e3:22:2b:c4:fc:
         9e:1b:e5:14:35:80:c5:c6:28:0b:da:1f:7f:87:ea:a7:03:7f:
         79:5d:f1:f8:7e:e3:5f:4f:bf:23:ed:c1:84:b5:e1:5e:43:ab:
         5e:ca:0e:04:9d:29:0a:a6:c2:eb:69:10:37:f1:85:33:fa:14:
         af:22:0d:1d:c9:46:ea:a6:09:4d:4e:96:68:3f:7a:a2:66:9f:
         47:32:17:e6:46:77:02:2c:ea:b5:2d:49:03:e4:d2:1c:37:24:
         cd:10:97:47:c1:97:a0:7e:cc:5d:e9:a2:7b:94:bb:3f:44:16:
         c2:73:63:ad:bc:a5:1c:b4:8d:54:e4:5c:b5:11:34:4d:fa:d2:
         52:5c:3c:06:4b:86:cc:c7:50:47:af:3a:88:b2:81:2f:ec:69:
         1c:3f:1f:a0:ef:94:7c:99:3f:dc:34:d4:d0:6f:71:be:26:18:
         dd:88:78:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org