Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/323030313a313266303a3a2f33322d3634203d3e2031393136.roa
File:                     323030313a313266303a3a2f33322d3634203d3e2031393136.roa (raw, json)
Hash identifier:          qqINf1SApMFFnEZlgqbYjhSw1J5mo4pWHtYBpnVZ34I=
Subject key identifier:   F1:C9:82:07:24:AD:B0:55:D6:C7:72:4D:DC:75:A1:FF:DF:E5:9F:99
Certificate issuer:       /CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
Certificate serial:       188CB581763A882308975BA0B59C6AD15ACAD365
Authority key identifier: 28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/323030313a313266303a3a2f33322d3634203d3e2031393136.roa
Signing time:             Wed 29 Nov 2023 17:49:06 +0000
ROA not before:           Wed 29 Nov 2023 17:44:06 +0000
ROA not after:            Wed 27 Nov 2024 17:49:06 +0000
asID:                     1916
IP address blocks:        2001:12f0::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:8c:b5:81:76:3a:88:23:08:97:5b:a0:b5:9c:6a:d1:5a:ca:d3:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
        Validity
            Not Before: Nov 29 17:44:06 2023 GMT
            Not After : Nov 27 17:49:06 2024 GMT
        Subject: CN=F1C9820724ADB055D6C7724DDC75A1FFDFE59F99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e1:3b:36:96:4f:96:23:75:be:a8:44:bd:19:
                    3e:98:65:2e:16:7c:4a:93:fe:28:62:d4:45:b1:89:
                    00:c0:e6:d2:16:bd:d8:28:6f:b3:d2:fc:1c:13:9a:
                    0d:28:e7:ea:61:93:f7:45:22:2d:02:c5:1d:a4:73:
                    f0:5d:e4:15:77:6b:c8:66:dd:e9:03:d9:f6:bf:45:
                    e3:8d:7e:2c:8e:ab:22:a6:c8:b0:76:1f:50:ed:77:
                    07:62:7b:6b:fa:89:26:73:a1:4c:fb:9a:ed:17:0e:
                    01:4f:2a:ae:b6:81:d7:9d:33:87:08:47:4f:da:5c:
                    55:c7:41:e7:eb:9c:a8:04:76:f6:b1:16:e2:11:5f:
                    18:b9:ce:e6:c0:95:05:26:de:35:7e:e0:c4:0d:fe:
                    cc:7e:d9:23:5c:e8:ff:cd:0c:a5:a1:03:35:9c:32:
                    3f:5e:c7:64:72:97:27:2a:be:0a:98:5d:1a:d0:71:
                    14:25:63:fb:36:53:75:69:b8:80:3c:56:be:48:58:
                    d7:d1:d6:b2:be:74:38:ac:e7:52:25:05:11:17:c9:
                    5b:06:21:a8:1e:7c:f9:38:64:41:41:56:a1:e5:f0:
                    ed:59:fe:49:13:6b:e9:0d:d6:ce:67:f8:76:3f:91:
                    dc:82:3e:2d:7e:de:f0:b8:20:fc:95:71:4c:0b:ec:
                    65:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C9:82:07:24:AD:B0:55:D6:C7:72:4D:DC:75:A1:FF:DF:E5:9F:99
            X509v3 Authority Key Identifier:
                keyid:28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/323030313a313266303a3a2f33322d3634203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:e0:dc:42:ed:01:81:a5:53:c1:7d:24:3b:bb:b6:42:5b:3c:
         b1:e3:fe:c5:d3:52:72:c3:8b:3c:f4:3a:2f:b2:96:97:fb:09:
         3b:64:a4:b1:09:4b:46:05:f1:1b:ce:73:f5:5a:41:2a:da:b1:
         da:98:35:d2:da:72:94:3a:f9:0b:e8:b5:9d:06:01:c7:e5:db:
         8d:79:d2:6f:31:25:98:06:9d:cd:5e:8e:70:d1:30:af:b7:a2:
         cd:40:d7:f7:2f:10:da:24:12:3f:ee:18:37:ef:26:0e:fd:d4:
         4e:05:ab:99:76:c9:47:fa:f1:10:89:2e:8a:bd:e6:10:dd:55:
         8f:b1:fd:a2:69:a6:5f:c7:80:72:72:3e:6e:2f:ce:90:69:94:
         27:6f:83:47:09:81:3b:23:05:11:b1:1f:fc:78:f4:14:e0:11:
         51:2c:46:b5:d1:3f:84:98:fb:d6:f4:e3:24:f2:0f:5d:7f:0e:
         1b:39:97:98:2f:09:4d:3e:4c:e4:1b:ae:95:74:5a:14:63:14:
         3a:8c:02:f5:6f:66:2c:6a:44:86:65:f9:c4:d8:99:19:a0:74:
         6c:08:97:e0:af:85:9f:06:c0:b7:79:07:0a:73:5d:5e:fb:2e:
         37:6f:7c:56:a2:ee:02:7d:c1:84:f0:71:64:77:ea:8f:17:02:
         04:29:37:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org