Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31372e3137362e302f32302d3332203d3e2031393136.roa
File:                     3230302e31372e3137362e302f32302d3332203d3e2031393136.roa (raw, json)
Hash identifier:          0FiEuiHg8Z9PnXFIGGaC0LOMsftCK4ya8qF96BdSE7w=
Subject key identifier:   E4:BF:B7:95:0F:FA:1A:3A:14:E4:A3:D0:BF:63:EC:72:3A:DB:EF:9A
Certificate issuer:       /CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
Certificate serial:       05BE770B0E7C71794667E0BD66636AFDB697412D
Authority key identifier: 28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31372e3137362e302f32302d3332203d3e2031393136.roa
Signing time:             Wed 29 Nov 2023 17:49:07 +0000
ROA not before:           Wed 29 Nov 2023 17:44:07 +0000
ROA not after:            Wed 27 Nov 2024 17:49:07 +0000
asID:                     1916
IP address blocks:        200.17.176.0/20 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:be:77:0b:0e:7c:71:79:46:67:e0:bd:66:63:6a:fd:b6:97:41:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
        Validity
            Not Before: Nov 29 17:44:07 2023 GMT
            Not After : Nov 27 17:49:07 2024 GMT
        Subject: CN=E4BFB7950FFA1A3A14E4A3D0BF63EC723ADBEF9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:de:1a:09:b3:6a:fa:e1:f3:1b:b2:f5:9e:d0:
                    78:76:79:0f:51:3d:0a:07:bb:c4:4b:9b:33:be:38:
                    f2:78:08:48:a2:70:40:19:39:95:2d:13:28:83:6e:
                    ab:4f:59:06:1e:ce:88:eb:11:d8:74:3c:cf:f5:36:
                    20:52:e2:e0:d4:d1:ef:cc:8e:57:8d:94:d0:1f:58:
                    b1:cf:18:c9:a4:ba:99:5e:1b:ad:11:cb:fd:61:f2:
                    28:b7:86:bb:a9:94:cf:7a:27:d2:10:fe:cf:b3:46:
                    d3:d6:d0:96:1d:fa:ff:be:0d:54:15:ed:24:d2:c1:
                    a1:7c:fb:d2:09:db:76:be:ed:48:4c:06:f8:74:f2:
                    81:85:78:f2:e8:63:0c:fd:02:57:32:72:f2:8f:16:
                    c6:12:1a:28:87:d0:36:55:da:79:d4:ed:fa:a5:e8:
                    ec:5f:6a:06:bd:16:86:87:cb:50:5e:2f:52:78:4e:
                    54:e9:3f:d8:ea:47:e9:6a:4b:14:96:b7:97:4d:04:
                    5c:14:33:23:1c:ea:5a:43:15:e6:c8:b1:41:6c:9f:
                    1a:20:2c:58:53:f1:a3:63:ae:fd:0c:20:3f:7d:54:
                    d3:84:ae:98:31:e2:ae:19:59:77:52:28:78:ec:2b:
                    a1:15:4f:8e:29:96:24:88:46:93:ac:aa:1a:05:f7:
                    c2:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:BF:B7:95:0F:FA:1A:3A:14:E4:A3:D0:BF:63:EC:72:3A:DB:EF:9A
            X509v3 Authority Key Identifier:
                keyid:28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31372e3137362e302f32302d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.17.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         25:d1:a0:4a:0a:41:04:32:62:15:b0:b1:54:52:33:90:5a:f3:
         99:73:64:44:2a:8d:20:5c:c0:28:c5:21:bc:53:f8:5a:a2:f8:
         ea:a0:44:66:79:b8:fa:ce:f0:fc:ac:38:f9:c7:93:65:1b:36:
         59:b8:8e:22:fa:73:5f:73:17:2e:a5:52:9f:ad:62:43:10:21:
         43:70:a2:33:7b:2d:50:f5:2e:da:a8:dd:40:97:f3:3c:ff:a8:
         4b:5c:02:98:80:cf:4b:82:99:f9:46:8b:16:26:bb:51:1d:ff:
         4a:4a:5f:19:c3:b5:e5:ea:b4:99:e8:35:43:bc:51:81:db:17:
         98:f6:15:9e:16:d2:04:6f:2e:06:cf:82:67:4c:d6:3c:0c:b0:
         bf:b8:27:01:b6:b3:88:c4:d1:bd:ab:5f:ab:a0:a1:23:9f:f6:
         cc:1d:24:3f:eb:85:12:f3:c2:a9:0f:1d:0b:07:d3:f1:17:e7:
         d7:7a:fb:4a:2c:cc:03:e5:4e:04:48:ef:4d:fa:49:5d:6d:db:
         21:96:71:44:8e:cc:aa:c8:d6:b2:bf:2a:ff:86:9b:4d:00:8b:
         d3:79:1a:14:f6:28:6c:ae:39:0a:2a:b7:c6:39:27:17:af:30:
         c6:7a:1a:4b:d7:fe:63:a8:e2:23:a4:17:83:c1:16:fc:1e:da:
         0d:b9:19:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org