Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3233392e3132382e302f31382d3332203d3e2031393136.roa
File:                     3230302e3233392e3132382e302f31382d3332203d3e2031393136.roa (raw, json)
Hash identifier:          vcq3axbWUdVeceK2I/NPGOdqA+lFbWgB1Vx+K3L1Tf0=
Subject key identifier:   6B:21:04:42:04:0E:44:A8:48:C2:FE:43:52:E0:60:1D:D1:2B:36:89
Certificate issuer:       /CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
Certificate serial:       5A185006A02F71369613B1C17100857CBDB8DB2F
Authority key identifier: 28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3233392e3132382e302f31382d3332203d3e2031393136.roa
Signing time:             Wed 29 Nov 2023 17:49:06 +0000
ROA not before:           Wed 29 Nov 2023 17:44:06 +0000
ROA not after:            Wed 27 Nov 2024 17:49:06 +0000
asID:                     1916
IP address blocks:        200.239.128.0/18 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:18:50:06:a0:2f:71:36:96:13:b1:c1:71:00:85:7c:bd:b8:db:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
        Validity
            Not Before: Nov 29 17:44:06 2023 GMT
            Not After : Nov 27 17:49:06 2024 GMT
        Subject: CN=6B210442040E44A848C2FE4352E0601DD12B3689
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f1:64:f4:eb:ae:ba:bf:cd:df:75:76:7f:47:
                    60:fb:2a:73:ec:14:81:27:a2:72:d0:87:65:f9:18:
                    7a:3f:eb:6f:a2:a3:de:59:19:4a:0e:59:45:77:3c:
                    d9:8f:e6:33:ca:64:89:6b:76:f2:05:53:a7:d1:2a:
                    ee:53:09:af:47:6e:93:7c:e6:05:fa:bd:bf:0c:f7:
                    8d:72:62:3b:31:3f:95:a4:f2:b6:60:9d:88:ef:56:
                    2e:92:ac:4f:20:0e:8c:0e:fa:e2:0f:f3:de:e6:d2:
                    bb:5f:ea:8b:96:01:6a:13:4f:75:a1:f4:fe:6b:91:
                    c9:70:d7:0c:58:cb:1f:e1:f8:1f:08:d1:9d:45:f9:
                    01:b5:29:cc:f9:f0:e8:08:c7:42:fa:36:fe:8b:db:
                    54:0f:d9:4c:8f:17:b6:ae:d0:b0:8a:45:59:8c:e4:
                    33:a7:5f:9a:ea:11:02:64:e0:e2:28:d1:23:e6:cb:
                    a7:98:5e:41:7c:bf:2f:6c:e2:c7:95:3d:a6:d9:9b:
                    b1:d9:89:de:08:49:55:65:25:9f:0a:3a:ef:c8:36:
                    5a:c8:b5:99:f7:4d:a2:bb:f1:00:6f:d9:2e:95:2f:
                    c1:2b:29:38:37:b3:95:e4:41:86:d1:9a:f0:64:1c:
                    15:16:af:e1:7d:cf:94:41:05:fc:96:16:e8:e9:99:
                    dd:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:21:04:42:04:0E:44:A8:48:C2:FE:43:52:E0:60:1D:D1:2B:36:89
            X509v3 Authority Key Identifier:
                keyid:28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3233392e3132382e302f31382d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.239.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         98:19:68:1e:ec:80:d0:b8:84:97:76:4a:ab:2d:24:33:16:45:
         50:92:2e:2c:92:68:22:fc:76:9d:bd:0c:36:17:77:c4:79:46:
         09:44:d8:b8:58:c2:a7:99:55:4c:27:81:77:d4:a8:8d:d0:cd:
         28:e7:c1:dc:1d:86:ed:78:c7:d0:1c:b9:44:88:78:e0:d1:7f:
         33:14:3c:3d:6e:e1:82:2b:15:fe:9b:13:bc:5c:16:e7:1d:49:
         73:7a:06:14:06:60:41:76:e7:16:3f:e4:23:58:26:ba:a8:f7:
         9f:b9:59:5c:04:b7:db:a7:cd:19:07:64:75:7a:1c:9e:1f:6b:
         6d:e8:70:83:f2:32:74:18:de:d1:32:ba:37:f2:c7:4f:2d:41:
         0e:9e:c3:f1:47:05:48:2a:63:94:3c:a5:83:8c:78:e6:87:e0:
         5e:4b:b3:99:ba:ac:2e:35:4a:4d:82:a3:35:7a:43:ff:93:9e:
         7f:be:21:1a:1a:99:4e:83:7d:63:c8:c4:cc:91:73:b3:54:1c:
         0e:61:2d:14:26:d8:08:95:8e:83:5e:99:73:1d:68:c0:c8:a6:
         1b:ac:56:18:68:d6:20:dc:4f:04:92:52:72:61:bc:a5:dd:78:
         45:cf:a3:11:41:7f:0b:83:cd:97:8e:68:d4:5a:f8:ce:35:da:
         55:f0:cc:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org