Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e39322e302f32342d3234203d3e203232373036.roa
File:                     3230302e3135322e39322e302f32342d3234203d3e203232373036.roa (raw, json)
Hash identifier:          oQHA0olG4x1aWG1shiZECqPM1W0mTctPmalHO2GHJjI=
Subject key identifier:   80:09:53:13:7F:06:CA:AA:C7:62:64:F6:2F:E7:7E:3C:3A:6C:8A:76
Certificate issuer:       /CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
Certificate serial:       75D6F30E1F66D859D7474BB1A20B09D9283EAB35
Authority key identifier: 5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e39322e302f32342d3234203d3e203232373036.roa
Signing time:             Mon 09 Jan 2023 22:51:04 +0000
ROA not before:           Mon 09 Jan 2023 22:46:04 +0000
ROA not after:            Mon 08 Jan 2024 22:51:04 +0000
asID:                     22706
IP address blocks:        200.152.92.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:d6:f3:0e:1f:66:d8:59:d7:47:4b:b1:a2:0b:09:d9:28:3e:ab:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
        Validity
            Not Before: Jan  9 22:46:04 2023 GMT
            Not After : Jan  8 22:51:04 2024 GMT
        Subject: CN=800953137F06CAAAC76264F62FE77E3C3A6C8A76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:84:9b:10:c3:08:b4:a1:f0:de:8e:f7:51:c3:
                    e1:f5:9d:9f:6c:1c:99:cb:c5:c5:37:e1:6f:3c:70:
                    de:44:23:ce:ea:bb:f1:da:e7:99:f4:43:e0:a5:f3:
                    d9:92:eb:5e:6f:29:4d:30:5e:d5:5c:32:d5:cf:02:
                    8f:74:f6:29:b7:7f:35:d4:64:a8:4f:e3:39:68:e1:
                    cc:f7:b5:17:79:99:5b:3e:7f:36:6a:1d:16:4c:23:
                    ce:ee:01:21:7e:f3:9e:6e:71:d7:07:57:ab:2c:b7:
                    6e:05:2a:ce:a3:c6:ec:f4:45:c7:d8:a9:06:59:61:
                    2f:89:33:5b:91:33:6a:59:90:dc:d3:e4:1a:fb:76:
                    55:24:f1:bb:9d:08:b7:81:c6:e5:61:ea:af:80:fa:
                    93:3c:07:15:2d:f3:c9:2f:72:96:ea:8c:ba:cc:7b:
                    9f:35:60:e1:8d:29:fe:a1:99:ff:cb:c4:4e:69:3b:
                    0b:d6:54:50:b0:36:36:fc:d9:10:f8:f6:76:81:ef:
                    5f:0f:08:9d:db:3c:da:ff:d7:13:22:38:47:9e:17:
                    c2:78:e4:d2:1f:57:bc:4d:8b:c2:da:e7:be:2f:fb:
                    32:5c:e9:cb:1f:89:5a:aa:e0:71:1c:99:ec:85:ee:
                    47:b9:a8:38:6a:6d:65:a9:48:97:4c:04:5e:e8:57:
                    6d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:09:53:13:7F:06:CA:AA:C7:62:64:F6:2F:E7:7E:3C:3A:6C:8A:76
            X509v3 Authority Key Identifier:
                keyid:5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e39322e302f32342d3234203d3e203232373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:9c:d3:ff:55:d8:fd:7f:50:3b:f6:6d:9a:29:33:18:26:a2:
         92:4b:14:b9:4d:a4:33:f2:b4:da:89:e9:a3:b5:cb:08:95:4e:
         e7:c8:da:fe:c8:9b:3e:c7:50:cc:fa:08:81:3d:3a:0d:9d:95:
         51:79:61:36:19:94:c6:dc:ae:be:d2:c2:1d:0d:83:1a:60:b6:
         66:3c:b0:8d:20:fd:70:ec:fe:f3:73:dd:ef:d9:fc:9e:91:ac:
         02:cb:26:c8:ef:64:db:31:80:68:16:21:39:cb:6a:80:f1:35:
         8c:9b:a9:6b:7f:52:22:c1:4c:ed:07:17:62:1e:78:cc:10:31:
         1f:df:8a:35:b8:a5:ed:0f:a3:6f:0d:2f:18:53:72:bf:7e:21:
         11:d6:42:31:2b:41:5a:7f:97:e4:80:56:ef:fe:22:fb:ab:d0:
         30:5c:b5:15:8f:52:d9:e6:0b:dc:ee:47:34:5f:6d:7b:ac:bb:
         1a:7e:c2:d7:73:ba:9e:cc:7e:d8:26:4a:9f:20:06:81:02:26:
         1c:ab:57:ac:86:6b:cb:f5:54:5d:00:99:5e:2c:93:86:4a:4c:
         b0:6d:20:a3:f9:52:fd:c5:bd:b2:56:0e:ec:ae:af:29:4c:bc:
         07:f9:e1:76:85:fd:ad:da:b3:da:62:4c:a3:30:b4:88:77:79:
         34:bf:6f:4d
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUddbzDh9m2FnXR0uxogsJ2Sg+qzUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQ3Njc2NjQzOTcxNkREOUE2MUM0NzE3REU5NkFGRTUz
MUE4QUMzRTAeFw0yMzAxMDkyMjQ2MDRaFw0yNDAxMDgyMjUxMDRaMDMxMTAvBgNV
BAMTKDgwMDk1MzEzN0YwNkNBQUFDNzYyNjRGNjJGRTc3RTNDM0E2QzhBNzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXhJsQwwi0ofDejvdRw+H1nZ9s
HJnLxcU34W88cN5EI87qu/Ha55n0Q+Cl89mS615vKU0wXtVcMtXPAo909im3fzXU
ZKhP4zlo4cz3tRd5mVs+fzZqHRZMI87uASF+855ucdcHV6sst24FKs6jxuz0RcfY
qQZZYS+JM1uRM2pZkNzT5Br7dlUk8budCLeBxuVh6q+A+pM8BxUt88kvcpbqjLrM
e581YOGNKf6hmf/LxE5pOwvWVFCwNjb82RD49naB718PCJ3bPNr/1xMiOEeeF8J4
5NIfV7xNi8La574v+zJc6csfiVqq4HEcmeyF7ke5qDhqbWWpSJdMBF7oV217AgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUgAlTE38GyqrHYmT2L+d+PDpsinYwHwYDVR0j
BBgwFoAUXXZ2ZDlxbdmmHEcX3pav5TGorD4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3Aya3V4V1l3Q0QyWnVQRmJpTFV0SlBoQW05YjgyMlZyQ01YcjNNRU40
bVkvMC81RDc2NzY2NDM5NzE2REQ5QTYxQzQ3MTdERTk2QUZFNTMxQThBQzNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVENzY3NjY0Mzk3MTZERDlB
NjFDNDcxN0RFOTZBRkU1MzFBOEFDM0UuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NwMmt1eFdZd0NEMlp1UEZiaUxVdEpQaEFtOWI4MjJWckNNWHIzTUVONG1ZLzAv
MzIzMDMwMmUzMTM1MzIyZTM5MzIyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMy
MzczMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyJhcMA0GCSqGSIb3DQEBCwUAA4IBAQBInNP/Vdj9
f1A79m2aKTMYJqKSSxS5TaQz8rTaiemjtcsIlU7nyNr+yJs+x1DM+giBPToNnZVR
eWE2GZTG3K6+0sIdDYMaYLZmPLCNIP1w7P7zc93v2fyekawCyybI72TbMYBoFiE5
y2qA8TWMm6lrf1IiwUztBxdiHnjMEDEf34o1uKXtD6NvDS8YU3K/fiER1kIxK0Fa
f5fkgFbv/iL7q9AwXLUVj1LZ5gvc7kc0X217rLsafsLXc7qezH7YJkqfIAaBAiYc
q1eshmvL9VRdAJleLJOGSkywbSCj+VL9xb2yVg7srq8pTLwH+eF2hf2t2rPaYkyj
MLSId3k0v29N
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org