Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e39352e302f32342d3234203d3e203232373036.roa
File:                     3230302e3135322e39352e302f32342d3234203d3e203232373036.roa (raw, json)
Hash identifier:          RbdPoVJo7uzWJ/8tMzMUITYAjib0HYap7EW1dU+Vh7w=
Subject key identifier:   1B:82:7A:A3:5B:FB:40:38:83:3C:A4:6B:73:9A:0D:A9:47:78:C6:A2
Certificate issuer:       /CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
Certificate serial:       48D895D03E6837679E7592C8F24A63F0A41E603E
Authority key identifier: 5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e39352e302f32342d3234203d3e203232373036.roa
Signing time:             Mon 09 Jan 2023 22:51:37 +0000
ROA not before:           Mon 09 Jan 2023 22:46:37 +0000
ROA not after:            Mon 08 Jan 2024 22:51:37 +0000
asID:                     22706
IP address blocks:        200.152.95.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:d8:95:d0:3e:68:37:67:9e:75:92:c8:f2:4a:63:f0:a4:1e:60:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D76766439716DD9A61C4717DE96AFE531A8AC3E
        Validity
            Not Before: Jan  9 22:46:37 2023 GMT
            Not After : Jan  8 22:51:37 2024 GMT
        Subject: CN=1B827AA35BFB4038833CA46B739A0DA94778C6A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a6:8b:27:41:4d:9d:83:1a:f3:94:d6:03:84:
                    d9:f3:89:9f:30:e8:2c:5c:97:06:fc:d1:40:1f:aa:
                    ac:47:e4:19:28:39:bb:be:3a:ec:34:ed:fd:b9:f6:
                    83:c5:17:88:3f:75:bd:dc:51:31:40:ec:83:da:ae:
                    d0:88:89:40:c4:5e:fc:da:aa:ca:bd:a8:42:f6:20:
                    6b:49:a2:9d:13:3c:4b:71:0c:99:b2:16:e0:e5:19:
                    81:ea:e0:8c:71:51:50:3e:3c:c0:a6:ef:1d:cf:d6:
                    88:4c:1e:e2:f5:d9:0c:41:e7:58:a6:19:e2:01:6e:
                    31:d5:ef:34:5a:d9:c5:56:09:22:4b:7c:cc:be:97:
                    ec:d7:5f:19:d3:4f:ab:10:e9:b0:df:89:e0:a5:3f:
                    ff:12:ea:7b:e6:e9:95:e3:df:a0:e0:19:34:b5:c7:
                    e9:4a:e8:24:73:13:73:27:87:27:37:bb:45:88:99:
                    52:2a:3b:f9:4a:9b:6f:b6:8f:ed:71:92:de:26:2c:
                    d4:69:70:78:d0:48:de:ca:03:f1:ae:25:46:f8:cc:
                    de:64:00:bc:91:a3:00:cb:8e:d0:7c:ef:73:6f:53:
                    14:85:30:48:6e:01:dd:e8:19:70:9d:4a:62:40:a0:
                    5c:fa:8e:2d:79:b2:fe:2a:b8:6a:52:d7:3d:d7:98:
                    ed:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:82:7A:A3:5B:FB:40:38:83:3C:A4:6B:73:9A:0D:A9:47:78:C6:A2
            X509v3 Authority Key Identifier:
                keyid:5D:76:76:64:39:71:6D:D9:A6:1C:47:17:DE:96:AF:E5:31:A8:AC:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5D76766439716DD9A61C4717DE96AFE531A8AC3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Cp2kuxWYwCD2ZuPFbiLUtJPhAm9b822VrCMXr3MEN4mY/0/3230302e3135322e39352e302f32342d3234203d3e203232373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.152.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:13:f9:ff:e3:9e:c4:62:0a:fc:9a:fc:b8:4b:0e:45:6b:98:
         ef:95:b5:05:de:a0:79:26:80:38:45:89:7c:67:50:95:e5:99:
         d3:44:bf:d3:c8:ae:87:37:b1:3e:9e:58:6f:b8:6b:b0:54:db:
         60:b8:3f:05:83:02:94:e9:b0:20:e4:54:29:f0:74:7e:44:04:
         04:7a:38:ae:81:70:d2:c2:41:30:80:a9:ef:fe:11:ad:97:4f:
         a3:e1:86:5b:c6:e7:d7:03:6c:d2:53:50:4c:19:3b:9a:b7:b1:
         42:34:d8:a0:2d:63:6e:af:d9:e7:ef:9e:22:a4:96:e9:54:92:
         a8:cd:f2:9a:f5:7f:da:0b:87:43:0b:86:a1:42:7a:07:7c:60:
         fb:91:a8:c6:5b:c2:5e:f6:20:53:0b:e6:81:51:26:2c:0a:37:
         74:5f:8a:a7:45:a6:01:9f:57:72:2d:9a:22:09:76:e5:c9:07:
         49:d7:a3:c7:ce:c4:e2:2e:7d:fe:da:fa:68:6e:d9:41:e5:5e:
         90:96:c8:84:1a:01:6a:55:77:66:26:fe:2f:be:12:c6:bb:59:
         10:a3:cd:60:11:90:c7:f2:b1:34:1f:90:05:c3:d0:03:60:97:
         a0:e6:da:1a:c8:ac:1f:90:19:a3:e5:d2:60:68:10:e1:8f:2f:
         f3:52:8d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org