Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3133302e302e302f31362d3332203d3e2031393136.roa
File:                     3230302e3133302e302e302f31362d3332203d3e2031393136.roa (raw, json)
Hash identifier:          Kwq+DUhkbKocFEzPCH6aMcS82lcmejCXIV2rbMhkDSo=
Subject key identifier:   72:FA:26:5D:D8:52:67:73:0B:A5:61:8E:9D:33:52:05:97:EB:B4:29
Certificate issuer:       /CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
Certificate serial:       5F35593D4EBE91AD9E64DEA6F87E8E0B8BF61F19
Authority key identifier: 28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3133302e302e302f31362d3332203d3e2031393136.roa
Signing time:             Wed 29 Nov 2023 17:49:08 +0000
ROA not before:           Wed 29 Nov 2023 17:44:08 +0000
ROA not after:            Wed 27 Nov 2024 17:49:08 +0000
asID:                     1916
IP address blocks:        200.130.0.0/16 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:35:59:3d:4e:be:91:ad:9e:64:de:a6:f8:7e:8e:0b:8b:f6:1f:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
        Validity
            Not Before: Nov 29 17:44:08 2023 GMT
            Not After : Nov 27 17:49:08 2024 GMT
        Subject: CN=72FA265DD85267730BA5618E9D33520597EBB429
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:40:dd:ca:6c:66:ae:97:0b:63:f3:42:7f:68:
                    68:ac:90:17:69:40:93:29:9e:18:3d:e6:ce:04:ad:
                    41:3e:e3:88:67:c5:6b:60:3b:f9:f1:01:a4:68:34:
                    43:60:48:b3:2f:64:18:40:87:47:04:5b:09:ea:a5:
                    9f:f5:33:12:bc:ae:23:db:b9:93:a3:4e:08:2d:34:
                    19:80:a4:ea:2b:55:67:7c:a5:c5:59:1f:02:d3:3b:
                    7d:5a:3f:2a:ba:06:66:60:d7:6a:1f:68:43:7a:62:
                    f1:59:d0:9f:02:49:01:a2:a3:97:61:25:b8:18:d4:
                    20:c0:b6:e6:c5:ad:ba:cb:67:08:b4:e6:35:d3:fb:
                    95:2f:ae:b6:0f:e4:31:e2:49:72:c6:5b:21:9d:f9:
                    70:ea:75:31:31:8b:17:36:aa:d6:c9:74:64:73:bd:
                    b2:3a:19:a1:79:23:c2:ff:2c:2c:d9:db:d1:e0:52:
                    54:1b:14:65:f5:6c:97:39:1f:0c:5a:45:25:73:57:
                    a1:46:17:61:9e:75:58:05:e7:74:a1:09:76:e7:35:
                    f5:0d:25:ce:16:f0:9f:62:a9:a1:e8:31:8b:57:e5:
                    04:bd:01:e7:7e:87:95:11:39:36:6f:72:18:c1:0c:
                    f4:01:fe:8f:a7:83:9c:40:28:f6:28:ad:ce:f8:12:
                    aa:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:FA:26:5D:D8:52:67:73:0B:A5:61:8E:9D:33:52:05:97:EB:B4:29
            X509v3 Authority Key Identifier:
                keyid:28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3133302e302e302f31362d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.130.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5e:ed:2d:24:89:a0:20:b3:2e:ca:17:a9:a3:5d:94:4e:c6:d8:
         cb:d7:d9:91:67:d2:79:93:ae:57:fd:51:d1:62:a7:bd:46:95:
         ec:1b:a0:5f:5c:d0:5e:5e:b7:a5:25:d0:26:e1:c9:98:ed:4b:
         07:27:ff:a7:70:34:ba:c0:d5:39:6e:84:e9:46:13:2b:8d:db:
         bb:a3:63:db:bc:0f:a1:19:43:61:59:d5:a4:e1:82:ae:91:da:
         de:10:87:43:8b:68:80:dc:f8:f6:97:fd:22:9a:83:85:db:da:
         5e:62:6b:42:c7:ce:5c:d7:61:85:c5:c1:49:3e:2b:cd:93:12:
         36:54:99:c3:bb:62:e2:6b:81:4b:d5:01:b6:05:11:56:e6:b8:
         1d:5d:52:5d:55:e6:c9:1c:c9:13:b8:db:45:43:76:f7:04:d3:
         37:ba:68:a3:42:e9:42:65:ac:3a:59:d0:eb:93:0e:95:1f:52:
         e7:a2:21:9f:d0:51:a1:d1:5a:7f:2e:db:bc:7e:a8:24:01:5f:
         75:bf:59:69:e5:b3:5a:2e:dd:33:b3:a6:21:f4:c4:21:2e:f7:
         6b:0b:a3:75:4b:d2:f4:cd:3e:18:70:7e:c9:6d:39:f9:25:84:
         e6:f9:10:47:9c:9e:89:eb:51:8d:42:8d:04:f5:79:92:80:9f:
         63:2d:11:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org