Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31392e3132382e302f31382d3332203d3e2031393136.roa
File:                     3230302e31392e3132382e302f31382d3332203d3e2031393136.roa (raw, json)
Hash identifier:          /kJqs0U1BPc0UbTQgHv9ZhqepnlWovVTe7rrpfkWiWE=
Subject key identifier:   95:E5:51:7E:02:6D:71:EE:D8:39:88:71:44:0A:FC:CB:C5:40:9E:64
Certificate issuer:       /CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
Certificate serial:       49C86A04B8CD5B6CE6D2F3B99A620F8F0B4C4DFA
Authority key identifier: 28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31392e3132382e302f31382d3332203d3e2031393136.roa
Signing time:             Wed 29 Nov 2023 17:49:04 +0000
ROA not before:           Wed 29 Nov 2023 17:44:04 +0000
ROA not after:            Wed 27 Nov 2024 17:49:04 +0000
asID:                     1916
IP address blocks:        200.19.128.0/18 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:c8:6a:04:b8:cd:5b:6c:e6:d2:f3:b9:9a:62:0f:8f:0b:4c:4d:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
        Validity
            Not Before: Nov 29 17:44:04 2023 GMT
            Not After : Nov 27 17:49:04 2024 GMT
        Subject: CN=95E5517E026D71EED8398871440AFCCBC5409E64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:17:26:3b:0e:01:1e:94:1b:73:e0:60:8f:68:
                    ed:95:92:1a:63:d5:44:5f:c8:6f:8f:2e:32:b6:78:
                    b2:df:12:f2:5d:a9:aa:ed:f1:8e:22:6b:13:db:95:
                    98:89:28:b8:5c:cb:e4:ab:b5:84:64:9f:af:af:d4:
                    90:62:9b:0c:66:8b:50:80:2a:e8:29:30:4b:be:4f:
                    f6:a7:3a:79:a5:1e:5b:9e:94:5b:44:df:79:f6:57:
                    d1:33:a5:75:1a:82:cf:02:42:99:54:cd:7f:7d:ec:
                    40:6a:fa:72:d3:0d:46:ca:42:67:a6:42:eb:96:4b:
                    34:83:71:97:ba:7d:1f:d8:1c:31:c8:5d:b0:01:f5:
                    d6:e8:43:93:1e:8f:66:2b:4b:b1:46:d7:67:4f:49:
                    b7:67:90:61:13:ee:2b:68:78:d1:30:c9:3e:2f:93:
                    0f:87:85:1b:73:60:99:9a:31:fe:3a:89:8c:1b:1b:
                    83:2c:f2:16:58:85:60:b4:ca:e9:ea:55:7f:01:65:
                    28:05:d5:bd:f3:b4:7c:2e:3d:a7:17:43:22:55:07:
                    17:9f:bb:06:6b:44:c7:05:77:4f:62:e8:10:7c:21:
                    1f:90:bb:de:b9:a1:91:3c:33:56:40:df:b3:bd:91:
                    6d:9c:01:32:8e:f1:ef:8f:f6:cb:69:df:55:78:7b:
                    ad:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:E5:51:7E:02:6D:71:EE:D8:39:88:71:44:0A:FC:CB:C5:40:9E:64
            X509v3 Authority Key Identifier:
                keyid:28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31392e3132382e302f31382d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         85:de:03:36:03:13:5a:cf:5d:7b:fa:68:19:4a:7b:b1:89:c5:
         49:44:de:1d:a7:d2:66:33:eb:f7:ca:c1:a2:ec:51:4c:30:17:
         d7:e7:47:f5:24:e0:a9:f9:3c:9a:76:c5:e1:20:56:c4:71:89:
         fe:4d:a9:08:93:37:e4:84:15:2b:cd:41:03:f2:01:da:ff:f7:
         21:85:6c:3d:e7:01:6b:09:1c:f0:71:1f:b2:91:7e:84:28:2a:
         d9:e3:b8:2d:69:60:3a:da:95:9e:f1:5e:97:2b:3f:3b:67:65:
         2a:a3:d8:44:b9:12:86:a1:e8:42:1d:93:5d:c7:18:6a:05:d2:
         bc:60:7b:2f:00:04:a1:c7:92:7d:11:6a:7a:7b:f8:95:12:34:
         18:4e:4c:48:33:6e:21:f2:75:b0:41:03:24:96:a8:a4:81:4f:
         09:69:54:72:8a:53:80:73:b4:27:47:fc:23:4e:ed:f5:de:43:
         a6:5e:24:a9:67:34:e4:6a:dc:2a:85:d6:72:b9:09:c1:8f:9c:
         87:0d:90:be:39:49:34:16:14:a3:4b:f1:12:a4:5e:e3:00:30:
         fe:ac:0b:77:9f:3c:18:cd:ce:66:a3:df:d5:b6:11:f3:39:47:
         3d:89:7c:ad:17:bc:9c:ba:d7:59:44:7b:b3:49:f0:0c:37:e3:
         74:be:c5:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org