Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3132392e302e302f31362d3332203d3e2031393136.roa
File:                     3230302e3132392e302e302f31362d3332203d3e2031393136.roa (raw, json)
Hash identifier:          dcEnYhd82oBore9C/hzi5qlYErBjl7cUkcokQyi0Es8=
Subject key identifier:   FF:D0:65:07:3F:6C:11:47:0F:22:68:5F:A2:E1:B4:6B:70:A8:99:88
Certificate issuer:       /CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
Certificate serial:       1C736CAB2B755FDCA36AA547917CA215CFB6713E
Authority key identifier: 28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3132392e302e302f31362d3332203d3e2031393136.roa
Signing time:             Wed 29 Nov 2023 17:49:05 +0000
ROA not before:           Wed 29 Nov 2023 17:44:05 +0000
ROA not after:            Wed 27 Nov 2024 17:49:05 +0000
asID:                     1916
IP address blocks:        200.129.0.0/16 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:73:6c:ab:2b:75:5f:dc:a3:6a:a5:47:91:7c:a2:15:cf:b6:71:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
        Validity
            Not Before: Nov 29 17:44:05 2023 GMT
            Not After : Nov 27 17:49:05 2024 GMT
        Subject: CN=FFD065073F6C11470F22685FA2E1B46B70A89988
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:01:30:36:3a:30:c8:0f:e9:d1:12:2d:0d:15:
                    c3:fb:b1:90:4e:2a:6a:11:0c:f8:97:bb:f2:aa:ae:
                    a2:34:db:9a:d4:28:95:5c:f7:8c:83:f8:f7:61:58:
                    eb:7b:9e:ca:35:94:59:9b:9a:a4:b9:80:24:94:95:
                    85:3a:3e:aa:75:6b:d0:22:db:22:25:59:3c:4b:5a:
                    6e:91:ca:c5:07:81:0d:30:56:0d:30:86:e6:53:63:
                    a2:cb:7a:a7:db:e9:76:8c:37:cf:15:b8:69:0a:a6:
                    bd:a8:23:dc:a4:10:6f:4a:ab:b4:11:52:c2:67:63:
                    01:e3:73:95:c5:a1:e0:c6:0e:be:3d:33:d5:bd:20:
                    03:fe:37:84:cb:55:3e:1f:3e:e5:1e:04:4b:f0:6c:
                    46:6f:9c:80:92:4f:28:07:d5:3d:30:77:8e:d8:99:
                    31:88:ad:c6:62:e7:02:14:f3:00:ac:07:8b:17:64:
                    fa:e9:04:f7:6f:ef:87:35:55:a5:95:82:b1:e0:06:
                    11:28:16:29:6c:36:1b:fb:f9:25:c4:a6:41:d4:c0:
                    46:5d:7b:9c:15:85:bb:dc:52:c4:0d:14:ca:1e:1c:
                    1f:95:d3:8e:c5:46:76:91:f8:a8:e9:b8:e1:b4:d2:
                    92:f4:28:b7:83:a8:1a:6c:1b:3e:f8:02:2a:69:ba:
                    5f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:D0:65:07:3F:6C:11:47:0F:22:68:5F:A2:E1:B4:6B:70:A8:99:88
            X509v3 Authority Key Identifier:
                keyid:28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3132392e302e302f31362d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.129.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3b:26:62:57:48:ef:03:91:0a:2f:25:47:6a:e1:e9:3d:69:55:
         93:3f:76:fb:df:be:2d:40:48:5c:e1:a7:0a:69:8d:a0:50:8e:
         74:d0:f9:3c:f5:c7:6b:43:64:32:fb:79:e4:e0:70:3b:c7:b0:
         d4:3c:05:68:cf:cf:0e:69:db:58:b3:0a:eb:80:99:ea:af:b3:
         72:dc:91:3b:8d:53:d0:2d:34:e6:3d:d1:32:73:cf:d9:fe:be:
         f2:36:67:d4:f5:bc:5e:f6:9f:3a:52:5d:34:89:a5:96:d5:52:
         2b:21:12:19:7f:cc:a1:4d:78:e6:d2:fd:b3:4d:10:f5:22:c4:
         fe:04:34:81:de:22:b5:a1:77:21:06:65:c1:b0:b5:dc:e5:a9:
         d2:0e:c7:04:3c:06:d5:ae:8d:d7:d3:de:e2:d8:68:5d:1a:a6:
         bc:21:cd:4d:ae:21:d8:8f:ee:de:06:1b:6e:38:d3:24:d5:f2:
         06:ec:e8:8b:42:e0:ea:50:f8:b1:a4:92:3d:f6:8b:e9:11:1d:
         cd:d4:2a:8d:45:a6:8b:e8:8c:50:d8:9a:8d:6f:9b:31:0d:0e:
         15:4e:b9:85:4f:2d:6e:1f:44:aa:ad:30:74:a2:54:d6:99:26:
         54:2e:3f:8b:e3:45:23:94:d6:f7:d0:bd:f7:6b:0c:e6:b3:87:
         f0:5e:21:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org