Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e39342e302f32342d3234203d3e203232373036.roa
File:                     3230302e3135322e39342e302f32342d3234203d3e203232373036.roa (raw, json)
Hash identifier:          cxaiB87kqkG/4FZq6F3XPzTKYvZg2a2jAKN+vE3X8J4=
Subject key identifier:   AC:45:F2:84:1A:43:55:AE:D0:98:FD:BE:2B:5B:20:EC:B1:F2:71:5E
Certificate issuer:       /CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
Certificate serial:       54572E2D1CA2490D6840241DA4F306B36E90A083
Authority key identifier: 5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e39342e302f32342d3234203d3e203232373036.roa
Signing time:             Mon 09 Jan 2023 22:51:28 +0000
ROA not before:           Mon 09 Jan 2023 22:46:28 +0000
ROA not after:            Mon 08 Jan 2024 22:51:28 +0000
asID:                     22706
IP address blocks:        200.152.94.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:57:2e:2d:1c:a2:49:0d:68:40:24:1d:a4:f3:06:b3:6e:90:a0:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
        Validity
            Not Before: Jan  9 22:46:28 2023 GMT
            Not After : Jan  8 22:51:28 2024 GMT
        Subject: CN=AC45F2841A4355AED098FDBE2B5B20ECB1F2715E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:6a:af:88:01:2a:06:b9:ec:19:76:33:c5:9d:
                    f2:96:60:6b:fd:a1:a4:92:77:41:e8:42:88:eb:f2:
                    38:0a:63:34:56:30:cf:17:19:2f:d4:bb:e8:0e:08:
                    25:ff:33:90:93:4b:c1:d2:cd:22:b6:f4:a7:9f:e1:
                    a4:46:30:bc:da:fc:a8:ff:7e:e4:5d:83:ce:cc:f7:
                    67:27:ac:c2:0d:a7:a4:d3:2d:ed:16:09:33:09:22:
                    a1:67:0f:23:87:21:7c:48:88:88:99:8c:8f:d3:dc:
                    20:2d:67:c0:98:fb:af:f2:75:b0:1e:3d:8f:a1:fa:
                    81:9f:38:22:9e:ac:00:e2:99:96:14:fe:dc:c9:f6:
                    20:33:55:4d:4a:b0:a5:2d:29:78:26:ec:22:cb:9f:
                    b8:00:da:19:74:8b:5a:1d:d4:06:78:0b:85:79:58:
                    cc:90:f3:ac:39:c3:64:28:a8:6d:26:8e:ad:f9:fa:
                    25:8c:d0:fa:ca:e7:b9:ff:25:49:81:b9:15:79:6b:
                    f5:00:a2:67:96:5d:c9:b4:44:60:fb:67:1f:50:15:
                    39:b0:d7:83:4e:0f:04:77:fc:dc:7f:f3:80:53:4f:
                    b4:ed:5b:46:de:97:6e:af:c4:4d:88:8f:f5:fe:34:
                    c6:0e:af:c9:15:c6:54:15:73:98:08:7c:5f:94:96:
                    16:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:45:F2:84:1A:43:55:AE:D0:98:FD:BE:2B:5B:20:EC:B1:F2:71:5E
            X509v3 Authority Key Identifier:
                keyid:5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e39342e302f32342d3234203d3e203232373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:2a:2e:41:7d:7e:df:a6:b0:55:f2:33:01:01:37:97:c7:8b:
         56:2a:85:5d:fb:14:78:8b:08:ec:5c:36:ec:4a:9e:73:00:09:
         ae:f3:9f:2d:fc:c2:36:3b:e4:54:d9:f3:16:64:46:c2:be:b2:
         5c:9b:b6:2a:d6:d7:4f:0f:3b:ac:18:88:61:b7:cd:ad:48:3e:
         26:4c:10:d7:0d:89:90:b4:27:3f:38:a3:c4:c3:19:88:ae:0b:
         f4:a6:f1:22:be:ae:1f:10:79:f4:4d:d0:bf:7c:d9:ce:a7:e6:
         67:2c:4a:df:53:00:3e:30:00:57:de:57:30:05:83:6f:f5:d9:
         66:1c:ee:4c:59:ae:02:4d:e1:46:a1:24:7c:ab:60:49:08:fd:
         ab:11:a9:30:ae:34:32:af:2f:ee:28:b5:29:11:4d:40:df:87:
         25:74:1a:59:9c:e5:42:89:d9:9d:41:0a:84:19:54:2e:b0:d4:
         f4:27:4b:0f:e8:25:f2:ff:f5:31:42:b4:97:21:ad:a7:84:c2:
         de:05:54:df:5e:76:fa:93:49:73:47:9d:e6:b7:5f:7e:24:47:
         d1:bd:2d:b0:ca:f8:ca:1c:22:4a:5d:cb:a1:72:77:30:b5:e1:
         39:ce:2e:c5:79:8b:3f:e8:24:ff:1b:d0:cc:e8:c1:10:79:b8:
         d3:66:1d:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org