Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3133332e302e302f31372d3332203d3e2031393136.roa
File:                     3230302e3133332e302e302f31372d3332203d3e2031393136.roa (raw, json)
Hash identifier:          XxE/0Aocn0AKquihlXoLs6/YSEruTONXwOIal2Tjsnw=
Subject key identifier:   5C:43:F4:AB:82:08:D9:D8:E1:C1:91:0D:4B:F9:95:99:BD:A5:6A:D2
Certificate issuer:       /CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
Certificate serial:       1BED41F8A65174048D5C3FA324AF0106B4A1C153
Authority key identifier: 28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3133332e302e302f31372d3332203d3e2031393136.roa
Signing time:             Wed 29 Nov 2023 17:49:05 +0000
ROA not before:           Wed 29 Nov 2023 17:44:05 +0000
ROA not after:            Wed 27 Nov 2024 17:49:05 +0000
asID:                     1916
IP address blocks:        200.133.0.0/17 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:ed:41:f8:a6:51:74:04:8d:5c:3f:a3:24:af:01:06:b4:a1:c1:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
        Validity
            Not Before: Nov 29 17:44:05 2023 GMT
            Not After : Nov 27 17:49:05 2024 GMT
        Subject: CN=5C43F4AB8208D9D8E1C1910D4BF99599BDA56AD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:5a:16:ce:d0:89:ad:94:5c:72:10:aa:5b:0e:
                    ac:77:6d:8d:fb:eb:3b:0e:98:8d:b9:25:4d:ae:93:
                    59:5d:e0:1d:1e:a2:8f:f8:eb:2c:58:38:69:ea:4f:
                    e1:50:94:3c:ef:e8:ba:bc:c2:9c:e8:39:0c:f6:bc:
                    02:7a:be:e3:b1:0f:05:20:71:e9:ec:b4:98:a3:0f:
                    81:05:21:2c:9c:c3:a6:a8:65:db:b2:70:60:1b:7b:
                    06:dc:8d:1c:ab:6b:35:6d:52:16:94:41:ae:01:86:
                    d6:29:8a:94:b6:80:5e:3a:fa:cf:4f:1e:84:bd:ab:
                    d0:88:d0:7a:d3:af:ba:01:01:c1:a0:19:5d:b5:b1:
                    7c:61:df:72:1d:e6:9c:4f:30:c7:2a:61:fc:c3:dd:
                    c5:66:0c:38:27:90:73:b2:88:a4:0c:18:59:7c:82:
                    33:63:00:ca:8f:5e:6d:a3:7f:55:40:0b:fd:2d:82:
                    fe:03:57:e6:8b:28:59:da:c6:5e:ee:2a:2f:9c:99:
                    12:c4:5f:34:87:3d:8f:78:76:db:7b:31:bb:93:0f:
                    22:66:eb:6a:2b:15:f8:b5:7a:68:a5:ea:7f:46:9a:
                    cf:a1:f0:f9:80:ad:c4:50:ff:e8:64:bc:c3:7a:e5:
                    35:89:60:a6:6b:7a:a4:56:bb:43:01:d1:b1:e9:6d:
                    21:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:43:F4:AB:82:08:D9:D8:E1:C1:91:0D:4B:F9:95:99:BD:A5:6A:D2
            X509v3 Authority Key Identifier:
                keyid:28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3133332e302e302f31372d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.133.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         40:02:8c:7a:67:53:a1:05:84:90:22:94:7b:df:43:d8:1e:82:
         b4:d7:68:7f:d9:90:f9:49:88:0e:c0:db:70:30:90:c5:24:5d:
         fb:e1:62:94:a3:90:ca:2c:45:0b:bd:4b:bb:aa:09:8e:b4:f1:
         79:95:79:1f:3c:ee:91:c9:d2:29:ee:20:0b:d7:a3:6b:39:02:
         38:54:19:a1:73:f5:e2:2a:d2:48:5e:1b:56:20:a5:af:7b:bb:
         56:2a:e0:fa:57:42:61:b6:92:8c:c9:3e:1a:c4:07:98:73:36:
         9d:51:a9:01:9d:cc:f4:67:31:10:00:3b:42:3c:a1:79:1c:a9:
         74:e6:43:4f:75:6e:81:06:af:3a:97:48:2d:40:4f:9f:fc:c4:
         fe:2f:b4:fb:d9:a2:a9:0c:95:0e:dd:e4:f8:33:0f:95:b6:55:
         26:2c:51:71:24:32:b5:b4:65:13:66:c8:3b:e4:ef:2b:bd:b2:
         dc:19:9b:26:e4:df:8b:51:1a:f3:3e:3f:03:63:72:46:b5:b4:
         ac:fd:51:ed:d2:c5:e4:c6:eb:44:0a:b8:34:8e:24:f5:f6:24:
         6a:2e:2e:89:ae:c1:69:59:fe:bb:47:ba:5d:95:9f:a8:0d:2a:
         e5:82:f9:c1:de:9f:8f:6d:b5:0b:84:4a:6c:b9:a4:cf:1f:1b:
         62:a7:75:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org