Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e39302e302f32342d3234203d3e203232373036.roa
File:                     3230302e3135322e39302e302f32342d3234203d3e203232373036.roa (raw, json)
Hash identifier:          TGWPgnNj41T+2hTOw0SW5GnASPxIo/DetoDrgVDazXY=
Subject key identifier:   56:5F:19:E2:38:4C:73:C9:F7:4C:D4:35:D9:15:43:03:55:5C:93:44
Certificate issuer:       /CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
Certificate serial:       30B598D2524683788B24164D7B3935DD25EE5F59
Authority key identifier: 5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e39302e302f32342d3234203d3e203232373036.roa
Signing time:             Mon 09 Jan 2023 22:50:42 +0000
ROA not before:           Mon 09 Jan 2023 22:45:42 +0000
ROA not after:            Mon 08 Jan 2024 22:50:42 +0000
asID:                     22706
IP address blocks:        200.152.90.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:b5:98:d2:52:46:83:78:8b:24:16:4d:7b:39:35:dd:25:ee:5f:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
        Validity
            Not Before: Jan  9 22:45:42 2023 GMT
            Not After : Jan  8 22:50:42 2024 GMT
        Subject: CN=565F19E2384C73C9F74CD435D9154303555C9344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:32:47:22:8a:a5:f9:9a:64:7f:2b:52:6f:70:
                    43:f9:8b:73:73:96:6b:a9:40:f6:df:83:d3:0e:6b:
                    6d:94:3a:10:3b:25:18:39:ff:ce:63:7e:8f:3e:1b:
                    e2:3b:db:4f:a2:4b:3d:5c:71:bb:37:35:59:bd:6c:
                    a2:36:7c:80:65:0f:38:48:9c:f7:5e:08:6e:3d:e4:
                    42:c3:60:46:dc:f3:82:cf:45:ad:76:5b:d6:1f:c1:
                    fa:59:d4:93:19:52:47:43:60:8a:9a:24:96:5d:31:
                    ac:03:9c:be:7d:ac:ca:a8:39:a4:a9:d4:8b:37:c4:
                    b1:21:4c:83:59:8d:7a:0a:cd:01:b8:7e:f2:50:d8:
                    85:27:81:05:1d:b3:8e:17:3f:fe:fe:05:62:c4:77:
                    67:04:50:b7:4d:da:7f:5d:f0:f8:f5:7b:a3:58:eb:
                    14:b5:c3:ac:b0:7a:e5:27:f1:b4:c7:bd:10:8a:86:
                    86:fe:b5:a2:9b:90:7b:d1:c3:f4:8b:9b:1b:1a:d3:
                    8b:72:2b:b6:ab:a0:b9:5a:f2:e2:94:21:c0:59:aa:
                    68:b0:45:9e:4c:e1:5f:f3:13:c9:95:37:2e:3e:cd:
                    e4:3d:5b:89:a0:00:26:82:19:fb:7f:e3:9e:0d:75:
                    3c:55:e4:f9:8c:f4:5e:84:41:e6:c1:7f:41:2b:c2:
                    f9:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:5F:19:E2:38:4C:73:C9:F7:4C:D4:35:D9:15:43:03:55:5C:93:44
            X509v3 Authority Key Identifier:
                keyid:5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e39302e302f32342d3234203d3e203232373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:9a:06:25:91:09:bd:7d:7e:57:78:04:49:50:e4:16:2d:f6:
         69:e4:ca:60:78:5e:64:f9:0e:ad:94:c7:06:a6:80:7c:7d:20:
         78:0d:70:58:8d:59:4f:27:e6:aa:4d:6a:d3:ef:bb:7c:d0:3b:
         7d:61:53:d1:67:80:32:f4:d4:37:9d:08:c5:4d:b8:4b:1d:47:
         48:5d:b8:5a:0a:ea:0f:58:46:59:cf:1e:78:eb:d4:2a:ff:e1:
         62:88:ce:0d:dd:22:f9:89:08:12:fe:6a:00:7d:92:3f:c1:ef:
         a9:b7:57:19:14:47:b9:de:e1:32:f3:ce:b9:19:67:b7:9c:d9:
         4a:c3:96:46:03:ce:49:93:bb:bc:8b:5f:ec:19:77:5e:21:c3:
         0d:af:03:5f:22:c5:83:5a:5e:87:21:4c:82:18:ad:7f:ec:70:
         55:2b:de:25:2d:60:3c:74:4f:19:b2:a1:dc:a9:41:dc:88:fa:
         53:6b:72:1f:a5:7e:69:0f:d7:fe:87:f5:0b:96:0f:1c:04:7e:
         88:c8:50:12:6f:22:5e:79:e5:a2:59:ab:88:ea:4b:69:7d:7b:
         33:7d:84:0a:b8:ef:a1:32:32:9b:6c:58:81:c8:e4:fe:10:ea:
         d1:20:b8:21:46:f6:6c:77:b7:b4:9e:83:23:b1:f2:2e:9c:df:
         34:2e:bd:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org