Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31382e3232342e302f32302d3332203d3e2031393136.roa
File:                     3230302e31382e3232342e302f32302d3332203d3e2031393136.roa (raw, json)
Hash identifier:          WL2gnwgxwpmDN93utlHmNioSmMCuM9icSao6UuypxqQ=
Subject key identifier:   64:49:F9:54:8D:97:12:B0:A9:9E:4B:A4:8A:D3:C3:89:C9:FE:17:29
Certificate issuer:       /CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
Certificate serial:       36C06074615AACD490C0A5A1DB74D95846DF477B
Authority key identifier: 28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31382e3232342e302f32302d3332203d3e2031393136.roa
Signing time:             Wed 29 Nov 2023 17:49:07 +0000
ROA not before:           Wed 29 Nov 2023 17:44:07 +0000
ROA not after:            Wed 27 Nov 2024 17:49:07 +0000
asID:                     1916
IP address blocks:        200.18.224.0/20 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:c0:60:74:61:5a:ac:d4:90:c0:a5:a1:db:74:d9:58:46:df:47:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
        Validity
            Not Before: Nov 29 17:44:07 2023 GMT
            Not After : Nov 27 17:49:07 2024 GMT
        Subject: CN=6449F9548D9712B0A99E4BA48AD3C389C9FE1729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:16:d8:0e:ea:90:41:ed:35:7f:78:99:22:4c:
                    af:7d:b8:85:8b:3f:68:fd:b9:ed:6d:bc:1c:e0:5d:
                    b3:f4:e5:27:05:06:bc:27:44:70:1a:ca:55:41:6d:
                    27:3d:78:8b:45:e4:ef:03:f6:33:0f:a4:3c:de:46:
                    aa:f3:dd:29:b0:bd:66:a2:d4:f3:7f:10:83:89:9b:
                    15:20:05:8d:45:6d:61:51:9d:72:57:cb:19:bb:90:
                    d9:b1:10:00:2f:12:e2:52:bc:0d:f2:e9:d6:08:3b:
                    dd:89:c5:27:44:30:5a:89:00:cf:ae:8c:92:59:70:
                    72:d7:27:32:86:77:8a:d1:7f:49:44:1a:39:fa:fb:
                    92:10:96:57:50:be:a8:23:e2:67:2f:e6:2d:8a:3a:
                    48:5e:1f:a3:c9:a3:b5:75:2d:ab:47:bc:f4:b0:9c:
                    10:8d:7f:fc:99:9f:95:34:8c:3d:09:80:c0:e0:5f:
                    39:99:61:28:10:5e:31:7a:68:95:08:37:8c:89:58:
                    7e:b3:5a:db:3c:ac:4a:14:85:d9:ad:c7:56:c6:09:
                    93:e1:43:57:b4:89:be:b4:78:97:f5:68:45:ba:95:
                    75:d1:15:49:5c:3a:b3:32:57:ed:01:a8:ea:09:ef:
                    27:d3:8e:f8:5e:8f:97:d4:86:72:c0:2d:61:2f:bb:
                    79:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:49:F9:54:8D:97:12:B0:A9:9E:4B:A4:8A:D3:C3:89:C9:FE:17:29
            X509v3 Authority Key Identifier:
                keyid:28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31382e3232342e302f32302d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.18.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         16:18:64:e9:fd:4b:4c:75:9d:5c:37:7e:bc:90:c5:28:b0:7f:
         ce:82:46:47:e1:a1:8d:f2:ce:1e:54:4e:c7:ce:9d:74:64:a8:
         7a:71:b7:f9:c9:e7:cd:09:56:25:b6:7f:80:54:71:7e:ff:89:
         d6:c8:b7:24:9f:25:e0:61:00:e2:89:41:b0:b1:87:20:62:13:
         1c:0d:ae:e3:d0:52:83:b5:2d:e7:ec:c0:32:6f:6a:1b:05:4a:
         d3:47:eb:3c:fe:ac:3d:81:94:ab:98:df:1e:d0:d2:87:ae:b6:
         a9:1f:23:d3:16:83:7b:96:e8:83:b9:e0:3d:de:b5:3e:85:fb:
         5e:77:8e:00:28:70:ad:ef:2d:7e:05:af:a7:99:c8:b7:92:1d:
         2f:32:dd:ba:78:12:92:6c:fc:b3:45:6e:7c:4d:6e:b6:bc:00:
         4a:ab:53:a3:d2:37:42:ec:fa:dc:49:14:0a:5a:09:3a:77:f9:
         7e:6e:a9:b0:c5:bb:79:7f:9c:89:b8:7e:d9:e3:b3:56:33:08:
         4e:85:a4:2b:fc:c3:eb:11:3c:c6:79:9b:94:a9:f6:02:de:3c:
         4f:4e:c3:a8:9f:cb:b6:e0:97:89:41:02:04:a8:28:1a:6c:0e:
         2d:d1:8b:fc:c4:61:fa:df:c9:a7:80:be:eb:02:36:67:1b:d2:
         76:0c:7a:6a
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUNsBgdGFarNSQwKWh23TZWEbfR3swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhEMDNBRDY1OUFBNDgwRUY1QTNENUJEQzkzNzUzQTRC
RjYxNDgxRDAeFw0yMzExMjkxNzQ0MDdaFw0yNDExMjcxNzQ5MDdaMDMxMTAvBgNV
BAMTKDY0NDlGOTU0OEQ5NzEyQjBBOTlFNEJBNDhBRDNDMzg5QzlGRTE3MjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9FtgO6pBB7TV/eJkiTK99uIWL
P2j9ue1tvBzgXbP05ScFBrwnRHAaylVBbSc9eItF5O8D9jMPpDzeRqrz3SmwvWai
1PN/EIOJmxUgBY1FbWFRnXJXyxm7kNmxEAAvEuJSvA3y6dYIO92JxSdEMFqJAM+u
jJJZcHLXJzKGd4rRf0lEGjn6+5IQlldQvqgj4mcv5i2KOkheH6PJo7V1LatHvPSw
nBCNf/yZn5U0jD0JgMDgXzmZYSgQXjF6aJUIN4yJWH6zWts8rEoUhdmtx1bGCZPh
Q1e0ib60eJf1aEW6lXXRFUlcOrMyV+0BqOoJ7yfTjvhej5fUhnLALWEvu3kVAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUZEn5VI2XErCpnkukitPDicn+FykwHwYDVR0j
BBgwFoAUKNA61lmqSA71o9W9yTdTpL9hSB0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkgyYW00SDNUYUdEcGlUZHdpaDZKeXc3SGZwZ1VwTWl6TDhpOU14Vk1V
dWQvMC8yOEQwM0FENjU5QUE0ODBFRjVBM0Q1QkRDOTM3NTNBNEJGNjE0ODFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI4RDAzQUQ2NTlBQTQ4MEVG
NUEzRDVCREM5Mzc1M0E0QkY2MTQ4MUQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJIMmFtNEgzVGFHRHBpVGR3aWg2Snl3N0hmcGdVcE1pekw4aTlNeFZNVXVkLzAv
MzIzMDMwMmUzMTM4MmUzMjMyMzQyZTMwMmYzMjMwMmQzMzMyMjAzZDNlMjAzMTM5
MzEzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBMgS4DANBgkqhkiG9w0BAQsFAAOCAQEAFhhk6f1LTHWd
XDd+vJDFKLB/zoJGR+GhjfLOHlROx86ddGSoenG3+cnnzQlWJbZ/gFRxfv+J1si3
JJ8l4GEA4olBsLGHIGITHA2u49BSg7Ut5+zAMm9qGwVK00frPP6sPYGUq5jfHtDS
h662qR8j0xaDe5bog7ngPd61PoX7XneOAChwre8tfgWvp5nIt5IdLzLdungSkmz8
s0VufE1utrwASqtTo9I3Quz63EkUCloJOnf5fm6psMW7eX+cibh+2eOzVjMIToWk
K/zD6xE8xnmblKn2At48T07DqJ/LtuCXiUECBKgoGmwOLdGL/MRh+t/Jp4C+6wI2
ZxvSdgx6ag==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org