Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e39342e302f32332d3233203d3e203232373036.roa
File:                     3230302e3135322e39342e302f32332d3233203d3e203232373036.roa (raw, json)
Hash identifier:          q0C5hzyA85lf0O7nnGnYcWkzCv5OpgxHzIfD6isSKu0=
Subject key identifier:   19:63:3C:F1:AA:2A:05:82:D6:63:6C:E5:6E:D5:99:AC:BB:43:E5:6B
Certificate issuer:       /CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
Certificate serial:       11498CEFBCA1B2A7C486E6CC3BA559101173855F
Authority key identifier: 5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e39342e302f32332d3233203d3e203232373036.roa
Signing time:             Mon 09 Jan 2023 12:59:54 +0000
ROA not before:           Mon 09 Jan 2023 12:54:54 +0000
ROA not after:            Mon 08 Jan 2024 12:59:54 +0000
asID:                     22706
IP address blocks:        200.152.94.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:49:8c:ef:bc:a1:b2:a7:c4:86:e6:cc:3b:a5:59:10:11:73:85:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
        Validity
            Not Before: Jan  9 12:54:54 2023 GMT
            Not After : Jan  8 12:59:54 2024 GMT
        Subject: CN=19633CF1AA2A0582D6636CE56ED599ACBB43E56B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:79:95:3b:13:cd:97:75:cd:88:88:79:94:38:
                    33:2a:47:78:9b:24:eb:ae:be:9b:89:06:7c:22:87:
                    83:45:00:53:fd:57:fa:8b:ee:32:3e:e9:83:fe:a3:
                    f3:60:10:9c:c3:4c:1b:f1:1c:23:fd:bb:70:97:1f:
                    90:2a:29:4f:84:f9:b8:ce:18:3b:7c:b4:cd:0e:65:
                    2e:47:1f:04:44:c3:93:85:43:04:fd:aa:0a:2f:8a:
                    db:83:95:05:19:f9:c4:ca:11:54:b9:fb:4f:2a:90:
                    e3:9d:46:99:1a:7c:01:b2:d4:0d:94:ae:a9:08:9b:
                    34:ec:16:d5:8c:5f:77:54:82:0e:90:b1:bc:57:af:
                    a5:ec:f0:80:59:f5:e3:ff:4f:d9:ec:ea:1b:f1:57:
                    87:76:e5:1a:b1:94:ba:65:d4:41:76:d0:2a:39:dd:
                    1e:3e:9b:e4:c1:64:a4:31:b1:ba:41:34:aa:3b:3b:
                    c2:17:ef:03:ee:29:62:91:ee:c2:06:04:87:c3:68:
                    fe:97:b1:7c:28:e0:d3:51:0e:a4:7c:88:78:d4:dd:
                    0b:f6:34:b1:e3:34:20:34:53:93:4e:db:9c:92:3d:
                    67:07:df:32:55:43:55:7a:d6:36:8b:61:c0:da:b9:
                    da:f1:d6:a9:33:59:7a:fe:1a:b3:0d:e0:c6:49:c0:
                    20:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:63:3C:F1:AA:2A:05:82:D6:63:6C:E5:6E:D5:99:AC:BB:43:E5:6B
            X509v3 Authority Key Identifier:
                keyid:5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e39342e302f32332d3233203d3e203232373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         be:c0:42:63:f4:3d:b0:54:06:2c:39:d1:78:29:2f:a2:6d:5e:
         e7:ad:a8:4f:32:71:83:83:ce:7d:ef:68:9c:37:fb:36:47:42:
         78:62:15:8b:51:80:8c:9e:97:6b:7d:cc:86:78:c3:75:26:08:
         de:0b:6f:29:58:76:c0:17:36:03:44:79:1d:37:aa:ef:9f:f3:
         82:44:0d:24:19:80:6b:ea:fe:a8:94:9a:33:d5:89:ea:4c:9d:
         52:96:66:cb:96:a4:e1:27:ec:4e:06:37:36:b0:61:8c:9c:d7:
         2e:46:25:e6:0f:7d:78:78:c2:16:ed:cb:b5:95:32:24:20:e9:
         3a:2f:6b:43:ef:ab:c3:a2:a5:fd:75:44:7d:1e:d0:97:54:10:
         7f:b6:99:3a:a5:34:80:0e:6a:9d:94:4b:ba:f5:e0:44:b5:7a:
         43:a0:73:ff:c9:0c:73:e6:17:c5:24:77:1c:86:54:38:32:f6:
         23:6d:f9:f6:f2:6c:f9:f8:00:64:50:f7:17:66:59:26:5e:70:
         d2:de:37:b1:58:38:29:e4:75:ae:71:c1:85:27:53:9a:02:9e:
         49:02:61:21:0e:28:b5:2c:a1:8c:46:38:33:43:68:28:46:49:
         3f:c6:3a:4a:57:39:45:1b:5f:36:00:50:40:4e:4f:36:8d:d3:
         4e:30:fd:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org