Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31372e3132382e302f31392d3332203d3e2031393136.roa
File:                     3230302e31372e3132382e302f31392d3332203d3e2031393136.roa (raw, json)
Hash identifier:          Oq2yXu3DJ+VKGRSu42y1kd9Y9x8y74JQM6lxZ6OMrXY=
Subject key identifier:   1F:BD:37:54:C7:84:EF:1B:87:91:B6:74:02:BA:DB:59:B3:82:C9:36
Certificate issuer:       /CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
Certificate serial:       4DF3E0EE9FD30AC861313495551C323B3B45C7A3
Authority key identifier: 28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31372e3132382e302f31392d3332203d3e2031393136.roa
Signing time:             Wed 29 Nov 2023 17:49:06 +0000
ROA not before:           Wed 29 Nov 2023 17:44:06 +0000
ROA not after:            Wed 27 Nov 2024 17:49:06 +0000
asID:                     1916
IP address blocks:        200.17.128.0/19 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:f3:e0:ee:9f:d3:0a:c8:61:31:34:95:55:1c:32:3b:3b:45:c7:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
        Validity
            Not Before: Nov 29 17:44:06 2023 GMT
            Not After : Nov 27 17:49:06 2024 GMT
        Subject: CN=1FBD3754C784EF1B8791B67402BADB59B382C936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a5:01:2a:91:4a:ac:e5:5a:75:74:ed:0b:c9:
                    39:3f:c4:8d:8c:d3:ad:19:72:00:3d:2c:49:a5:9f:
                    72:0f:39:84:47:9d:40:f2:05:46:10:2a:c5:ea:40:
                    e2:5e:e5:5b:86:1b:56:b4:f6:da:ad:c7:81:4b:7f:
                    46:2e:67:12:28:e8:0e:e5:c6:c9:cf:db:4c:a0:f9:
                    dc:2f:53:9d:28:d3:04:33:a5:a7:fe:1b:57:8c:c1:
                    af:12:cc:65:65:35:60:59:18:22:36:70:e1:4b:d9:
                    7e:b4:8a:9a:c1:9f:21:dc:8c:92:b1:b1:f5:ac:64:
                    24:50:1f:f8:ef:8d:dd:58:44:c1:e0:f1:f9:4d:98:
                    3d:84:62:f9:35:fc:60:e3:ae:32:9a:6a:0d:08:74:
                    32:84:28:da:9e:a6:6e:35:9e:52:be:25:dc:1e:8c:
                    30:f4:6b:75:2e:97:55:b0:4f:78:08:54:8f:37:4c:
                    09:c0:cb:e2:0b:75:68:79:ee:66:3c:01:ef:da:b2:
                    3c:dd:af:cb:6a:0b:12:c4:8b:07:5b:03:b7:b4:06:
                    cf:ad:51:fa:9e:51:2d:cf:e7:1d:2b:fc:8b:83:dd:
                    18:4b:e5:71:50:84:96:3d:e9:e1:49:ca:52:77:22:
                    b7:b9:01:d1:3f:8f:12:81:12:14:cf:e0:d2:c2:6a:
                    cc:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:BD:37:54:C7:84:EF:1B:87:91:B6:74:02:BA:DB:59:B3:82:C9:36
            X509v3 Authority Key Identifier:
                keyid:28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31372e3132382e302f31392d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.17.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         58:75:9b:ec:f4:1b:00:80:0a:5f:7f:9c:9e:ec:8c:e0:4e:ce:
         09:0e:45:78:0a:f5:52:83:1d:ae:b9:7f:ee:18:59:79:15:65:
         48:a9:c7:11:87:af:a0:a0:2a:4d:84:4a:f1:9f:89:8e:03:c7:
         c6:6e:e3:e6:77:b3:3b:25:ec:97:2f:fa:21:18:e7:a1:5f:cd:
         07:75:9a:8f:f9:21:79:07:36:bb:11:27:51:ba:a4:aa:58:04:
         c2:27:e1:8b:75:16:62:df:76:92:c5:2a:83:59:3d:90:af:66:
         3d:b2:cc:9c:ea:22:4a:51:dc:ce:fe:08:16:ad:e5:5f:bc:35:
         e2:60:78:3b:06:f6:b5:be:3f:cd:f6:39:de:7c:dd:75:74:3e:
         54:34:b6:be:aa:66:cc:4e:c2:c3:8c:38:e7:0c:95:bc:87:ce:
         93:70:3f:c0:ae:e0:5e:7f:a5:cc:f8:01:89:fe:83:4d:5c:19:
         ad:d6:e7:39:a7:98:7c:95:ca:c5:38:e6:58:86:f9:ac:6d:54:
         63:75:b9:fe:5a:48:fa:43:64:b5:30:da:f0:c5:02:bf:09:ec:
         f9:6c:9b:6b:2e:f2:94:fb:e7:f6:b3:3e:6c:9f:37:9c:97:df:
         c7:ef:ea:4b:af:d4:ab:72:67:c2:71:9d:43:ed:4e:7a:f2:42:
         d3:45:ec:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org