Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31382e3132382e302f31382d3332203d3e2031393136.roa
File:                     3230302e31382e3132382e302f31382d3332203d3e2031393136.roa (raw, json)
Hash identifier:          LA3oVwo5ABOb5cYMn6YK3/oV7wZ9L+MjrFNN76pOXVE=
Subject key identifier:   C8:81:FB:F4:24:63:F7:2F:7A:BD:97:04:49:79:9E:C2:AD:AC:54:65
Certificate issuer:       /CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
Certificate serial:       14FB4E8912BBEBBF77B4950A7DDE636C9259F136
Authority key identifier: 28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31382e3132382e302f31382d3332203d3e2031393136.roa
Signing time:             Wed 29 Nov 2023 17:49:05 +0000
ROA not before:           Wed 29 Nov 2023 17:44:05 +0000
ROA not after:            Wed 27 Nov 2024 17:49:05 +0000
asID:                     1916
IP address blocks:        200.18.128.0/18 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:fb:4e:89:12:bb:eb:bf:77:b4:95:0a:7d:de:63:6c:92:59:f1:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
        Validity
            Not Before: Nov 29 17:44:05 2023 GMT
            Not After : Nov 27 17:49:05 2024 GMT
        Subject: CN=C881FBF42463F72F7ABD970449799EC2ADAC5465
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b6:2e:97:ea:41:fe:ca:7f:83:76:5a:da:06:
                    64:23:9a:c1:29:01:5b:16:c0:19:d9:98:4e:0d:02:
                    b9:94:c1:c9:e9:55:47:02:26:cc:9c:eb:08:68:cb:
                    87:2e:5c:c1:fa:65:5c:e4:e1:9a:a2:48:2f:b8:dd:
                    eb:95:cd:17:26:41:a1:3a:9e:57:33:fe:f9:64:07:
                    f5:3c:42:83:89:13:b0:ee:b8:1c:ce:ba:c8:86:d7:
                    98:c6:c7:15:85:26:a0:ef:15:80:7b:fe:a6:8d:36:
                    45:cf:e0:4d:ae:28:bd:53:b5:95:53:dd:19:27:5c:
                    ca:45:ba:45:10:f5:85:83:82:44:fb:bc:0a:e6:27:
                    68:cc:20:8e:a9:12:f7:fa:98:ed:f6:2a:82:52:b2:
                    29:37:61:41:c2:32:d9:69:92:f7:17:cd:19:93:54:
                    86:c6:36:a2:e3:ba:46:8c:41:4c:db:fe:c9:0e:65:
                    e9:28:fc:de:48:9e:d7:b6:34:d4:94:8d:44:d1:ec:
                    e1:25:7e:68:a1:3d:63:31:52:14:7d:92:5d:40:48:
                    ed:0e:8d:17:fa:76:ce:d5:ab:9b:06:37:12:31:b8:
                    f3:79:bb:5d:9a:da:23:64:8a:62:46:6d:f5:47:42:
                    fe:55:0d:3e:26:49:81:a0:4b:b8:fa:58:9d:9d:bb:
                    91:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:81:FB:F4:24:63:F7:2F:7A:BD:97:04:49:79:9E:C2:AD:AC:54:65
            X509v3 Authority Key Identifier:
                keyid:28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31382e3132382e302f31382d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.18.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         29:26:f6:ac:a3:2e:6b:69:59:ce:2b:a4:96:4c:4d:17:f5:c6:
         d3:dd:b3:42:d0:a9:d5:d1:e9:0b:3c:ea:87:43:36:3f:e0:c9:
         94:9a:83:1c:2f:30:09:0d:14:fa:be:f2:f6:da:37:73:f0:3e:
         6e:19:3a:65:c7:44:13:d2:01:9b:6c:36:e4:2d:6e:3a:6e:4a:
         be:0d:40:01:27:9e:53:10:35:57:08:60:f3:18:25:15:3e:45:
         49:49:e7:c9:73:fa:de:f6:ca:06:b1:f9:bb:f6:48:24:a8:e5:
         4a:ea:28:67:7c:6f:dc:51:ff:78:11:f7:58:0a:02:6b:1b:5e:
         a6:bc:5b:59:56:b0:b1:77:e3:0f:4a:1c:e8:9d:88:b8:e3:50:
         d2:55:af:4a:09:78:f9:74:94:05:ea:aa:da:e4:c3:36:8c:03:
         2e:f6:6b:eb:8b:42:3f:81:f7:36:90:85:ad:2e:a6:b7:57:f2:
         1c:14:db:f1:a1:65:48:ed:b1:4b:01:c9:45:12:6a:d9:43:95:
         06:ea:ff:bf:50:90:10:f3:16:33:4d:f5:7c:40:85:e8:a1:6f:
         08:c4:f1:ed:45:62:ca:25:cb:8e:de:6a:f3:97:8b:4b:7a:36:
         b8:40:31:76:c9:f6:f2:4e:ee:24:32:7d:55:50:2b:e3:b1:ff:
         17:8e:93:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org