Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31392e3131322e302f32302d3332203d3e2031393136.roa
File:                     3230302e31392e3131322e302f32302d3332203d3e2031393136.roa (raw, json)
Hash identifier:          C/tqxrTeSvIOys18oHAi1T8WvUFdpMrnfOZsbIqC4Zk=
Subject key identifier:   69:FF:62:7D:70:4D:73:F3:29:56:8C:4F:04:87:D7:4D:C6:A7:21:6F
Certificate issuer:       /CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
Certificate serial:       0E3428C817597DC48CC8815E63567FF260974A0A
Authority key identifier: 28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31392e3131322e302f32302d3332203d3e2031393136.roa
Signing time:             Wed 29 Nov 2023 17:49:08 +0000
ROA not before:           Wed 29 Nov 2023 17:44:08 +0000
ROA not after:            Wed 27 Nov 2024 17:49:08 +0000
asID:                     1916
IP address blocks:        200.19.112.0/20 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:34:28:c8:17:59:7d:c4:8c:c8:81:5e:63:56:7f:f2:60:97:4a:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
        Validity
            Not Before: Nov 29 17:44:08 2023 GMT
            Not After : Nov 27 17:49:08 2024 GMT
        Subject: CN=69FF627D704D73F329568C4F0487D74DC6A7216F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:9b:96:38:8c:e8:05:a7:59:9a:56:91:ec:7d:
                    fa:8e:34:23:a5:80:54:3f:ef:b7:9d:43:2d:63:73:
                    56:6e:29:0d:a2:a2:d3:2f:bd:5a:93:36:c2:7e:10:
                    ea:54:a0:aa:79:ea:fb:c5:4c:38:60:24:db:cf:0c:
                    5f:5a:69:5b:f6:8b:c8:80:c3:14:0c:b0:62:c2:80:
                    6d:74:96:c2:0c:be:b8:ac:ff:3b:54:87:d9:50:f0:
                    c8:36:3b:f3:35:dd:10:a5:13:c8:6c:99:0a:49:3b:
                    cf:42:e0:66:16:51:ed:b3:3b:12:41:4d:c7:00:9f:
                    58:62:9b:e2:b0:32:23:c4:42:1b:c3:53:d4:3f:90:
                    31:eb:de:2e:b2:71:9b:b0:04:f5:5f:6e:1b:28:8a:
                    a5:9d:88:81:ab:ab:8e:47:70:31:dc:3a:88:a9:8c:
                    a4:eb:6a:8a:17:ed:4f:5e:6a:2e:17:ab:ce:70:ba:
                    89:4e:c6:45:8e:64:9f:f1:b2:a5:6c:11:f9:fa:82:
                    7c:e2:86:e0:57:83:16:d8:f5:dd:d8:61:47:97:2b:
                    84:0f:64:2a:40:c2:67:13:e4:85:ca:d6:c0:79:fb:
                    dd:37:e9:69:ec:3c:05:f7:7f:db:12:96:d0:31:43:
                    bc:e2:03:b0:0e:f9:86:52:4e:c1:6e:24:bb:04:bb:
                    03:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:FF:62:7D:70:4D:73:F3:29:56:8C:4F:04:87:D7:4D:C6:A7:21:6F
            X509v3 Authority Key Identifier:
                keyid:28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31392e3131322e302f32302d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         ae:4f:c9:d2:07:34:82:71:23:8e:80:17:f1:f3:1f:4c:c0:02:
         47:9a:97:73:6e:14:cd:bb:a4:44:3b:03:28:56:6d:73:9e:5a:
         9d:98:6a:b1:6f:52:f1:bd:51:db:8f:91:1c:b6:dd:6a:72:d7:
         a5:82:58:ec:db:4a:e8:e1:c4:7b:69:f4:e1:80:05:06:fc:8d:
         8a:58:1e:f9:42:7d:e6:9b:9c:c2:ea:a8:66:3f:23:ba:ac:59:
         5c:11:29:ff:f5:40:66:86:3d:1d:4d:15:b4:2b:05:d7:dd:aa:
         33:cf:77:32:be:16:30:0a:d8:e8:11:5a:55:91:c9:f1:78:56:
         a6:0f:99:13:1e:b8:c5:57:1e:17:6d:f7:8f:e3:aa:76:40:d2:
         c1:ac:c8:55:c3:fa:f2:97:09:6c:ce:b4:0d:6d:15:76:22:e2:
         ae:74:aa:a6:46:b5:16:d0:c9:59:ec:ce:63:a6:f5:af:f9:59:
         7e:30:7f:58:88:05:c6:43:d1:4f:88:08:f3:c3:28:19:99:9e:
         f7:81:5d:7d:1c:03:6c:48:c1:ca:a5:d3:b1:05:f8:a5:f7:37:
         58:73:41:67:96:a8:32:ca:21:f8:5a:42:bc:dc:26:77:d5:03:
         d8:67:3c:aa:ab:5b:96:de:42:95:b9:4a:20:28:75:59:2a:1f:
         ff:1d:b7:b4
-----BEGIN CERTIFICATE-----
MIIFQzCCBCugAwIBAgIUDjQoyBdZfcSMyIFeY1Z/8mCXSgowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhEMDNBRDY1OUFBNDgwRUY1QTNENUJEQzkzNzUzQTRC
RjYxNDgxRDAeFw0yMzExMjkxNzQ0MDhaFw0yNDExMjcxNzQ5MDhaMDMxMTAvBgNV
BAMTKDY5RkY2MjdENzA0RDczRjMyOTU2OEM0RjA0ODdENzREQzZBNzIxNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfm5Y4jOgFp1maVpHsffqONCOl
gFQ/77edQy1jc1ZuKQ2iotMvvVqTNsJ+EOpUoKp56vvFTDhgJNvPDF9aaVv2i8iA
wxQMsGLCgG10lsIMvris/ztUh9lQ8Mg2O/M13RClE8hsmQpJO89C4GYWUe2zOxJB
TccAn1him+KwMiPEQhvDU9Q/kDHr3i6ycZuwBPVfbhsoiqWdiIGrq45HcDHcOoip
jKTraooX7U9eai4Xq85wuolOxkWOZJ/xsqVsEfn6gnzihuBXgxbY9d3YYUeXK4QP
ZCpAwmcT5IXK1sB5+9036WnsPAX3f9sSltAxQ7ziA7AO+YZSTsFuJLsEuwNLAgMB
AAGjggJNMIICSTAdBgNVHQ4EFgQUaf9ifXBNc/MpVoxPBIfXTcanIW8wHwYDVR0j
BBgwFoAUKNA61lmqSA71o9W9yTdTpL9hSB0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkgyYW00SDNUYUdEcGlUZHdpaDZKeXc3SGZwZ1VwTWl6TDhpOU14Vk1V
dWQvMC8yOEQwM0FENjU5QUE0ODBFRjVBM0Q1QkRDOTM3NTNBNEJGNjE0ODFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI4RDAzQUQ2NTlBQTQ4MEVG
NUEzRDVCREM5Mzc1M0E0QkY2MTQ4MUQuY2VyMIGqBggrBgEFBQcBCwSBnTCBmjCB
lwYIKwYBBQUHMAuGgYpyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJIMmFtNEgzVGFHRHBpVGR3aWg2Snl3N0hmcGdVcE1pekw4aTlNeFZNVXVkLzAv
MzIzMDMwMmUzMTM5MmUzMTMxMzIyZTMwMmYzMjMwMmQzMzMyMjAzZDNlMjAzMTM5
MzEzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB
/wQQMA4wDAQCAAEwBgMEBMgTcDANBgkqhkiG9w0BAQsFAAOCAQEArk/J0gc0gnEj
joAX8fMfTMACR5qXc24UzbukRDsDKFZtc55anZhqsW9S8b1R24+RHLbdanLXpYJY
7NtK6OHEe2n04YAFBvyNilge+UJ95pucwuqoZj8juqxZXBEp//VAZoY9HU0VtCsF
192qM893Mr4WMArY6BFaVZHJ8XhWpg+ZEx64xVceF233j+OqdkDSwazIVcP68pcJ
bM60DW0VdiLirnSqpka1FtDJWezOY6b1r/lZfjB/WIgFxkPRT4gI88MoGZme94Fd
fRwDbEjByqXTsQX4pfc3WHNBZ5aoMsoh+FpCvNwmd9UD2Gc8qqtblt5ClblKICh1
WSof/x23tA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org