Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e39312e302f32342d3234203d3e203232373036.roa
File:                     3230302e3135322e39312e302f32342d3234203d3e203232373036.roa (raw, json)
Hash identifier:          mxNGDtTQyV7hrzbtnpE7m3tx21rrNwXldv9AwBIUvQg=
Subject key identifier:   47:78:4A:B2:BC:1A:53:A1:7D:0A:7D:FF:E1:C6:AA:E6:4D:70:5E:A5
Certificate issuer:       /CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
Certificate serial:       32CD130A8ECD3A8335AADA08EFF205E4B58FC049
Authority key identifier: 5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e39312e302f32342d3234203d3e203232373036.roa
Signing time:             Mon 09 Jan 2023 22:50:55 +0000
ROA not before:           Mon 09 Jan 2023 22:45:55 +0000
ROA not after:            Mon 08 Jan 2024 22:50:55 +0000
asID:                     22706
IP address blocks:        200.152.91.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:cd:13:0a:8e:cd:3a:83:35:aa:da:08:ef:f2:05:e4:b5:8f:c0:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
        Validity
            Not Before: Jan  9 22:45:55 2023 GMT
            Not After : Jan  8 22:50:55 2024 GMT
        Subject: CN=47784AB2BC1A53A17D0A7DFFE1C6AAE64D705EA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:fb:7a:37:69:77:f8:65:87:5e:52:d3:1f:99:
                    80:aa:f4:c7:d7:9b:00:cb:d4:0a:7f:73:3d:54:90:
                    bc:ec:27:8a:39:c7:aa:9d:80:53:66:4f:71:90:9b:
                    17:bd:75:3c:b6:ce:31:98:a9:9e:c2:61:21:01:62:
                    4a:dc:4c:6c:c6:84:32:79:ae:a2:99:29:89:a9:94:
                    67:be:62:73:c0:22:2a:94:fd:05:64:52:4c:13:56:
                    e4:00:66:b9:6a:78:03:90:61:66:01:39:19:f8:1a:
                    a4:40:4a:5d:d7:f5:fc:38:63:18:dd:9a:54:d8:f9:
                    b4:69:3b:34:c7:da:46:a1:32:83:42:67:9f:4d:82:
                    11:8b:8d:62:03:e9:3d:9a:56:05:17:b1:2b:ee:c6:
                    f1:98:8d:71:82:f5:fa:19:ea:38:e9:22:f6:a8:e2:
                    9e:93:48:08:4f:60:70:b8:98:f2:86:fb:73:2c:4e:
                    be:2a:75:b1:27:3c:77:62:12:f7:55:80:94:ca:21:
                    ab:c4:75:7d:84:b4:4a:8e:06:ef:54:24:fa:79:0b:
                    b6:65:e5:3c:d6:ae:50:51:7d:58:6f:3f:a8:ee:a9:
                    28:8a:df:e7:43:1d:1f:c0:0b:08:c9:10:80:89:cd:
                    e0:f2:53:9a:8f:65:30:99:7f:8e:a5:7e:ae:de:19:
                    c0:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:78:4A:B2:BC:1A:53:A1:7D:0A:7D:FF:E1:C6:AA:E6:4D:70:5E:A5
            X509v3 Authority Key Identifier:
                keyid:5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e39312e302f32342d3234203d3e203232373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:33:7f:03:ac:43:82:46:02:ab:b4:c8:8b:50:f6:86:8a:30:
         fd:a7:88:a5:a9:cb:93:1b:67:0b:39:87:97:eb:1b:cf:dc:0d:
         91:b7:2b:35:a1:f9:e3:93:29:d1:28:65:b6:b8:29:3d:bb:a1:
         b4:0f:c7:9b:27:c5:fc:ac:65:64:46:74:30:4b:29:8b:31:bb:
         65:93:12:ec:4f:74:57:19:01:5d:7c:e1:a6:65:01:e0:22:9e:
         50:16:dc:0e:b5:5a:09:4a:2b:1e:0b:a1:85:21:f5:ed:2c:0d:
         ef:68:1b:36:da:c3:68:87:76:0a:e1:3b:dd:39:7d:27:1e:73:
         81:5c:7c:87:fd:53:8d:a2:d1:a0:a0:1b:0a:9e:a2:6b:66:ee:
         d9:10:7f:15:35:bd:07:b5:13:ce:ee:7b:59:b8:ae:9b:41:20:
         fd:1a:20:74:19:63:9d:04:ca:31:02:8c:61:8f:71:00:1a:ee:
         26:33:12:01:38:44:88:ce:95:6b:22:dc:ea:8c:32:b1:6a:f6:
         44:2f:83:c7:10:8e:73:e6:ba:ed:e8:7b:d5:99:03:d1:cf:e5:
         f6:c4:a7:1f:51:b2:5b:d9:7c:f3:9b:f7:57:41:1f:88:24:5f:
         df:c2:91:83:11:e8:1c:12:a0:00:af:c2:a1:24:32:e8:e7:d1:
         15:12:4b:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org