Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3137302e37392e3231322e302f32322d3332203d3e2031393136.roa
File:                     3137302e37392e3231322e302f32322d3332203d3e2031393136.roa (raw, json)
Hash identifier:          JWFlEhqoYt4ZuZPtpEILZA+7egTRpucy7lFVi9zG8EE=
Subject key identifier:   B9:C6:5E:41:65:33:B5:33:7C:97:E2:8C:1C:0D:9D:7C:C8:13:03:D9
Certificate issuer:       /CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
Certificate serial:       1180CD7A76C057DDAB0DE5E16615F80F699F4420
Authority key identifier: 28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3137302e37392e3231322e302f32322d3332203d3e2031393136.roa
Signing time:             Wed 29 Nov 2023 17:49:08 +0000
ROA not before:           Wed 29 Nov 2023 17:44:08 +0000
ROA not after:            Wed 27 Nov 2024 17:49:08 +0000
asID:                     1916
IP address blocks:        170.79.212.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:80:cd:7a:76:c0:57:dd:ab:0d:e5:e1:66:15:f8:0f:69:9f:44:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
        Validity
            Not Before: Nov 29 17:44:08 2023 GMT
            Not After : Nov 27 17:49:08 2024 GMT
        Subject: CN=B9C65E416533B5337C97E28C1C0D9D7CC81303D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:57:ab:f1:90:64:bc:26:05:f9:76:2b:58:5a:
                    9b:65:7d:d4:2c:f7:18:cb:cc:f4:c5:8f:b1:14:56:
                    96:59:3a:d6:c7:c6:f2:df:a0:5a:26:65:84:a0:ea:
                    a6:2e:50:0d:11:a3:c8:cd:52:cc:99:21:fe:98:52:
                    fb:9d:95:31:5b:59:49:6a:db:3f:8c:73:95:2a:ed:
                    49:0e:c3:ac:03:71:4a:72:1f:5a:f0:11:17:60:71:
                    45:5d:4b:75:9f:ac:7e:d8:7d:4f:cd:ce:25:de:cb:
                    02:0e:b7:8f:e8:34:98:ed:5e:63:aa:54:ad:ee:f3:
                    03:06:42:dc:4e:0d:6b:01:f1:24:46:cc:1a:59:44:
                    b1:cf:50:2e:0f:2f:24:05:b3:7d:90:5d:dc:1f:0e:
                    ed:29:51:ea:39:3d:49:94:2c:70:8b:22:0c:4a:61:
                    0e:c3:06:7e:4b:fb:e2:3b:e1:3d:55:76:af:50:53:
                    5a:c3:d2:b1:f3:76:aa:17:d7:1b:e7:fd:cc:5f:27:
                    87:04:9d:39:9f:5b:15:2c:39:f9:af:e0:32:9b:37:
                    7c:35:f7:1a:dd:fc:83:68:8e:d4:d4:d3:7d:76:77:
                    80:c6:27:40:78:75:60:60:6d:50:6d:52:a1:87:6b:
                    1a:dc:ca:bf:7a:1a:82:99:1a:81:67:5a:c5:8a:9c:
                    44:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C6:5E:41:65:33:B5:33:7C:97:E2:8C:1C:0D:9D:7C:C8:13:03:D9
            X509v3 Authority Key Identifier:
                keyid:28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3137302e37392e3231322e302f32322d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.212.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:bc:c5:81:fa:05:9c:f6:15:1e:eb:07:ac:88:a5:a6:5e:2b:
         3a:61:ad:f2:f9:46:8b:19:aa:bd:3a:6c:8e:34:23:fd:2c:a5:
         14:8b:81:61:76:c4:de:42:de:bb:4d:87:56:b2:e5:20:be:24:
         98:e2:06:f5:30:8e:4b:d8:42:e4:fa:38:de:45:ac:a4:43:f9:
         a4:e6:13:bb:59:65:03:4f:39:cf:79:ef:96:63:b6:df:2b:ce:
         14:03:0c:fe:e8:e0:9d:3a:eb:30:e4:17:53:df:84:ec:21:ce:
         3f:2f:41:5b:04:94:01:56:30:7b:e3:8c:c9:7e:51:63:13:73:
         6e:4b:b0:b4:00:76:b5:3b:bb:17:39:5f:44:3b:41:5f:c0:8b:
         ff:67:7e:dc:19:76:68:c6:3d:3a:5b:8f:47:b7:fd:13:d0:2d:
         55:65:bd:8c:85:82:88:0a:a9:22:6f:57:08:94:cb:3a:73:b5:
         25:04:a5:f5:03:c8:6e:a9:e8:0c:2c:40:9f:3d:94:28:29:c5:
         82:f6:0f:79:44:74:3c:62:af:65:42:cc:b6:de:c5:25:d5:73:
         48:9d:a9:b0:63:eb:96:d1:56:f8:95:39:cf:f6:bc:21:13:df:
         db:b3:35:64:f2:dd:df:b7:7b:e7:7e:4f:dc:e4:d2:24:af:98:
         56:10:ec:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org