Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3135302e3136352e302e302f31362d3332203d3e2031393136.roa
File:                     3135302e3136352e302e302f31362d3332203d3e2031393136.roa (raw, json)
Hash identifier:          2StbvtueOsGI9TP/OBa02m1zxQjq+VoAVFwmY1+Im7A=
Subject key identifier:   6B:EC:1D:EA:F5:0B:76:65:B1:DC:29:3F:09:4E:98:90:23:BB:77:9B
Certificate issuer:       /CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
Certificate serial:       6CBFE01A1EF50925F440C3F4BE90A2688441B603
Authority key identifier: 28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3135302e3136352e302e302f31362d3332203d3e2031393136.roa
Signing time:             Wed 29 Nov 2023 17:49:08 +0000
ROA not before:           Wed 29 Nov 2023 17:44:08 +0000
ROA not after:            Wed 27 Nov 2024 17:49:08 +0000
asID:                     1916
IP address blocks:        150.165.0.0/16 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:bf:e0:1a:1e:f5:09:25:f4:40:c3:f4:be:90:a2:68:84:41:b6:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
        Validity
            Not Before: Nov 29 17:44:08 2023 GMT
            Not After : Nov 27 17:49:08 2024 GMT
        Subject: CN=6BEC1DEAF50B7665B1DC293F094E989023BB779B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ce:0d:1a:5e:c8:1b:dc:8c:6c:65:ea:2d:cb:
                    31:95:7d:a6:9b:ea:a6:f2:4f:fd:5d:a7:5c:a3:f1:
                    f7:57:57:40:6f:f3:40:6f:1b:9c:42:e7:0b:ca:83:
                    3b:b7:20:7e:e8:c8:df:20:c5:5a:99:9b:0f:aa:62:
                    86:26:99:2d:be:e7:66:0a:96:c3:a1:ce:c2:99:85:
                    9b:ff:00:3d:e7:9d:08:9e:9d:14:a4:fd:24:e6:8f:
                    e2:10:be:52:dc:06:8c:be:38:44:60:9b:fc:44:26:
                    0a:39:a1:5e:02:cc:6a:a6:01:04:5e:fe:f4:b2:1b:
                    52:d6:3a:fa:54:78:6a:b9:7d:07:fa:74:bc:e1:8c:
                    13:8d:28:40:f6:3d:8b:32:97:02:07:51:f7:5e:16:
                    30:26:e5:e2:4d:99:37:a5:d0:99:b7:85:e1:5c:08:
                    00:bb:58:e0:67:72:41:0e:88:85:cc:c8:14:a3:ad:
                    bd:95:01:6c:d8:4a:90:2a:50:60:f9:b6:f7:8f:47:
                    f7:b3:fc:59:2f:93:fd:08:a8:e1:51:57:d1:b4:0c:
                    64:27:c5:7e:d0:20:c5:2f:c6:e2:e4:88:d6:61:21:
                    c9:14:13:e5:f8:f7:fb:ad:a3:44:c4:68:44:12:1c:
                    42:d5:63:7c:6e:88:5e:27:26:9e:02:96:09:b7:8c:
                    cd:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:EC:1D:EA:F5:0B:76:65:B1:DC:29:3F:09:4E:98:90:23:BB:77:9B
            X509v3 Authority Key Identifier:
                keyid:28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3135302e3136352e302e302f31362d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.165.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ae:5a:93:2b:36:2d:7b:73:68:cb:6b:cc:a9:c1:1f:af:38:34:
         e3:9b:76:dc:de:d9:fc:2a:f2:a6:82:90:92:c9:47:35:be:59:
         1c:96:4e:fd:a1:2b:4f:53:d0:3c:14:d7:46:6e:f4:d2:e4:fc:
         43:ee:c1:8c:ce:5d:17:40:f3:5f:5a:d6:9a:ed:35:4a:92:35:
         f9:b7:e9:72:e3:81:e1:4e:46:bf:4a:37:48:fd:b5:54:eb:39:
         73:a8:6a:c2:8b:80:28:5a:af:ba:ea:5f:3d:3f:66:d5:1b:cc:
         8d:60:f3:b6:c3:8a:f2:b9:c9:49:d2:9e:3b:5a:59:2f:f6:78:
         e0:f7:63:9e:08:b1:6b:bd:58:f4:dd:31:b8:fa:1c:dc:52:c3:
         ce:76:db:89:2b:84:95:18:81:61:e3:c7:2e:d3:23:d0:62:16:
         a6:a3:81:d7:75:d7:7a:9d:dd:d1:ca:24:52:f0:ed:1a:19:3f:
         19:b7:b9:b3:f6:8a:b6:ec:13:b7:83:27:2a:1e:4e:ba:9f:6a:
         eb:db:0a:ef:fa:50:66:1a:55:34:5d:e1:c5:a3:cd:a3:f5:5c:
         e0:49:22:ec:bd:50:5b:d5:15:78:ec:f5:4d:18:06:11:ae:78:
         16:20:f5:88:b6:ba:ac:2e:e0:86:cb:69:99:db:a9:e7:aa:a8:
         e1:0e:b0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org