Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e39332e302f32342d3234203d3e203232373036.roa
File:                     3230302e3135322e39332e302f32342d3234203d3e203232373036.roa (raw, json)
Hash identifier:          jPKgFl2LmEMu43Rm7W5Ky/1KIf2NnonGILPOJFBc1eQ=
Subject key identifier:   EF:3B:BF:53:11:C7:CC:60:B6:A2:66:DC:16:94:EE:BF:4A:58:8F:34
Certificate issuer:       /CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
Certificate serial:       395F1C6B360BD5D4E2BB5094664B1A64434747D2
Authority key identifier: 5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e39332e302f32342d3234203d3e203232373036.roa
Signing time:             Mon 09 Jan 2023 22:51:15 +0000
ROA not before:           Mon 09 Jan 2023 22:46:15 +0000
ROA not after:            Mon 08 Jan 2024 22:51:15 +0000
asID:                     22706
IP address blocks:        200.152.93.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:5f:1c:6b:36:0b:d5:d4:e2:bb:50:94:66:4b:1a:64:43:47:47:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
        Validity
            Not Before: Jan  9 22:46:15 2023 GMT
            Not After : Jan  8 22:51:15 2024 GMT
        Subject: CN=EF3BBF5311C7CC60B6A266DC1694EEBF4A588F34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:db:40:9b:99:38:8d:d3:fa:ec:61:f1:75:7d:
                    b8:1d:9a:b4:e6:20:4e:43:81:8d:05:d3:e1:3f:53:
                    67:14:82:32:e9:7c:58:7f:64:2b:a8:91:a9:3c:4c:
                    d4:41:4a:01:73:58:da:b6:5f:31:44:1b:58:af:85:
                    25:22:ca:7f:15:92:92:ed:48:1f:4c:c9:48:9c:58:
                    e5:f7:16:53:8b:c8:2e:fe:fe:f0:bf:b1:13:a0:a4:
                    02:90:f6:4f:8c:6b:8d:1f:46:4f:d1:0b:14:7c:d1:
                    d9:cc:be:5e:96:21:c2:09:80:ff:2f:9b:a0:d1:64:
                    88:24:25:ed:6b:87:e0:67:b4:d8:44:52:08:54:21:
                    2b:1b:21:60:a0:ed:bb:6b:14:67:5d:08:07:31:60:
                    0d:fb:a9:62:b6:cf:0d:91:f8:3c:d0:9b:04:9d:08:
                    42:39:f6:24:54:61:45:70:57:04:cb:6a:bc:bc:bf:
                    1a:8c:4d:e5:17:a4:41:29:85:ee:28:7c:94:10:48:
                    09:61:85:06:62:fa:1c:3d:34:20:b7:8e:5f:b3:b0:
                    e6:21:09:80:86:7b:84:80:ee:1f:48:b2:aa:23:e6:
                    70:c1:7e:9f:c2:c1:4e:ba:6e:b4:72:64:13:42:d2:
                    0a:6d:5e:4c:63:64:b6:4b:ac:12:22:2a:69:50:20:
                    da:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:3B:BF:53:11:C7:CC:60:B6:A2:66:DC:16:94:EE:BF:4A:58:8F:34
            X509v3 Authority Key Identifier:
                keyid:5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e39332e302f32342d3234203d3e203232373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:4e:3c:76:a8:92:67:7f:1b:4e:24:84:3a:d8:b6:92:02:2d:
         3a:a4:03:63:b2:52:ec:d3:fc:7b:26:d6:b8:b3:64:5c:d4:be:
         e3:67:7a:18:b2:e3:28:6b:b2:cf:b5:67:00:86:35:26:6f:8a:
         ad:c0:bf:ab:e9:e4:13:a9:19:b1:d6:3c:d1:d4:55:5d:f6:69:
         c6:57:c9:90:1b:10:cf:8b:c0:7f:b8:2b:42:ef:89:8a:0e:a6:
         40:c1:75:82:2b:76:64:57:67:26:2d:e0:4f:a1:46:f3:e7:62:
         5e:e0:93:f1:29:c5:0c:48:a5:78:b0:55:86:b6:6d:59:5e:ec:
         3b:c8:54:c7:62:ca:fb:86:1a:bc:4b:18:d9:3b:fa:84:fe:8b:
         65:40:57:5e:01:94:0e:4c:29:48:80:a5:43:30:38:d0:ca:95:
         15:f6:22:d5:b0:da:71:91:21:fd:6d:25:05:ac:6c:86:1c:21:
         44:87:58:34:38:a9:af:8b:07:f1:63:fb:a1:0e:05:d5:cb:59:
         32:5d:b6:e1:45:d5:4f:b4:26:74:34:18:b2:b1:d6:93:19:d0:
         18:85:fd:b5:ab:f7:a3:33:82:0a:32:a6:90:c0:60:df:44:60:
         9a:05:a5:4d:d7:e9:4f:cf:23:77:0e:4c:52:15:d7:82:5f:88:
         0a:ce:b5:89
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUOV8cazYL1dTiu1CUZksaZENHR9IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUQ3Njc2NjQzOTcxNkREOUE2MUM0NzE3REU5NkFGRTUz
MUE4QUMzRTAeFw0yMzAxMDkyMjQ2MTVaFw0yNDAxMDgyMjUxMTVaMDMxMTAvBgNV
BAMTKEVGM0JCRjUzMTFDN0NDNjBCNkEyNjZEQzE2OTRFRUJGNEE1ODhGMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC820CbmTiN0/rsYfF1fbgdmrTm
IE5DgY0F0+E/U2cUgjLpfFh/ZCuokak8TNRBSgFzWNq2XzFEG1ivhSUiyn8VkpLt
SB9MyUicWOX3FlOLyC7+/vC/sROgpAKQ9k+Ma40fRk/RCxR80dnMvl6WIcIJgP8v
m6DRZIgkJe1rh+BntNhEUghUISsbIWCg7btrFGddCAcxYA37qWK2zw2R+DzQmwSd
CEI59iRUYUVwVwTLary8vxqMTeUXpEEphe4ofJQQSAlhhQZi+hw9NCC3jl+zsOYh
CYCGe4SA7h9Isqoj5nDBfp/CwU66brRyZBNC0gptXkxjZLZLrBIiKmlQINpVAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQU7zu/UxHHzGC2ombcFpTuv0pYjzQwHwYDVR0j
BBgwFoAUXXZ2ZDlxbdmmHEcX3pav5TGorD4wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vQ3Aya3V4V1l3Q0QyWnVQRmJpTFV0SlBoQW05YjgyMlZyQ01YcjNNRU40
bVkvMC81RDc2NzY2NDM5NzE2REQ5QTYxQzQ3MTdERTk2QUZFNTMxQThBQzNFLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzVENzY3NjY0Mzk3MTZERDlB
NjFDNDcxN0RFOTZBRkU1MzFBOEFDM0UuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0NwMmt1eFdZd0NEMlp1UEZiaUxVdEpQaEFtOWI4MjJWckNNWHIzTUVONG1ZLzAv
MzIzMDMwMmUzMTM1MzIyZTM5MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjMy
MzczMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAyJhdMA0GCSqGSIb3DQEBCwUAA4IBAQCBTjx2qJJn
fxtOJIQ62LaSAi06pANjslLs0/x7Jta4s2Rc1L7jZ3oYsuMoa7LPtWcAhjUmb4qt
wL+r6eQTqRmx1jzR1FVd9mnGV8mQGxDPi8B/uCtC74mKDqZAwXWCK3ZkV2cmLeBP
oUbz52Je4JPxKcUMSKV4sFWGtm1ZXuw7yFTHYsr7hhq8SxjZO/qE/otlQFdeAZQO
TClIgKVDMDjQypUV9iLVsNpxkSH9bSUFrGyGHCFEh1g0OKmviwfxY/uhDgXVy1ky
XbbhRdVPtCZ0NBiysdaTGdAYhf21q/ejM4IKMqaQwGDfRGCaBaVN1+lPzyN3DkxS
FdeCX4gKzrWJ
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org