Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3132382e3132382e302f31382d3332203d3e2031393136.roa
File:                     3230302e3132382e3132382e302f31382d3332203d3e2031393136.roa (raw, json)
Hash identifier:          B303seJr7IYj9Mp4quP4buFUODLe+Oxh0C6x4NagZOI=
Subject key identifier:   4D:96:2B:5D:8E:9B:F0:69:FA:3E:48:91:6A:25:BD:28:95:C7:13:10
Certificate issuer:       /CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
Certificate serial:       3D764442F41700F6B44D769B5FEC5CCA4F11504C
Authority key identifier: 28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3132382e3132382e302f31382d3332203d3e2031393136.roa
Signing time:             Wed 29 Nov 2023 17:49:04 +0000
ROA not before:           Wed 29 Nov 2023 17:44:04 +0000
ROA not after:            Wed 27 Nov 2024 17:49:04 +0000
asID:                     1916
IP address blocks:        200.128.128.0/18 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:76:44:42:f4:17:00:f6:b4:4d:76:9b:5f:ec:5c:ca:4f:11:50:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
        Validity
            Not Before: Nov 29 17:44:04 2023 GMT
            Not After : Nov 27 17:49:04 2024 GMT
        Subject: CN=4D962B5D8E9BF069FA3E48916A25BD2895C71310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:27:c6:c7:a9:f4:e9:00:bd:74:a6:8f:b8:ba:
                    94:e8:c2:c2:f6:09:70:6b:4a:b7:08:45:7e:33:73:
                    59:3c:9f:fa:bd:53:ad:61:8c:4a:6d:e5:8f:51:34:
                    71:6b:e2:96:b9:1f:11:ef:b1:6d:4e:84:5e:a8:9c:
                    cb:e2:89:2c:48:b6:ef:1d:b6:fa:27:3a:5d:98:b9:
                    79:4f:01:f1:b8:9e:d2:5b:a7:95:ea:40:55:ca:e9:
                    e0:0c:72:21:fa:57:73:31:6b:30:0f:59:a3:94:45:
                    60:7a:e5:cd:3e:4f:5e:7e:60:f5:44:91:45:4e:66:
                    c8:eb:1d:0e:60:bc:59:5a:57:54:88:8d:41:0d:83:
                    29:22:49:39:81:03:9d:62:3a:90:b0:a5:69:60:2e:
                    ab:fe:fc:a3:95:83:e6:97:cb:f2:c3:d9:9c:3b:12:
                    95:1d:da:12:59:10:de:ba:d8:7f:4a:7a:18:2d:3c:
                    06:e8:d5:03:7e:c1:57:49:e2:c1:01:6e:88:38:f0:
                    4f:82:91:e0:06:e0:41:a3:49:1e:2e:bc:31:7b:19:
                    f2:50:c5:cd:d1:77:ab:3c:ee:aa:66:86:64:6e:d1:
                    23:99:28:27:9e:4b:3a:cd:ff:2f:46:bf:af:4e:ca:
                    ef:5d:26:e1:9c:e8:63:2b:f0:f2:fa:7d:31:96:cb:
                    c8:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:96:2B:5D:8E:9B:F0:69:FA:3E:48:91:6A:25:BD:28:95:C7:13:10
            X509v3 Authority Key Identifier:
                keyid:28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3132382e3132382e302f31382d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.128.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         75:96:fa:25:1e:cd:7d:df:f4:03:0b:a2:96:6c:1a:3b:18:63:
         c1:49:02:ab:01:ee:92:86:14:33:3a:b5:cf:97:75:34:a3:09:
         7f:1e:a6:59:c8:94:9b:31:b6:c5:af:60:88:cf:19:25:cd:97:
         79:b2:2d:ca:e6:1a:c5:93:3c:43:f6:95:26:c0:27:94:56:b2:
         d7:22:0f:a5:c8:a6:b4:cd:03:0e:ed:a0:82:9a:ea:1f:93:1c:
         97:73:b1:0c:f8:fe:bf:b5:ea:5f:9d:e6:3e:0b:9a:fc:7c:95:
         8e:42:50:ec:c7:e6:f7:b9:3c:9a:b5:51:2d:b3:25:22:19:40:
         0e:46:db:19:15:e2:ff:da:53:a8:80:dc:9a:4c:ec:2e:73:d4:
         59:10:36:20:75:6b:b8:4c:4e:5b:4a:40:b6:8c:cc:dd:3c:b8:
         a9:b8:39:f2:87:00:0d:ad:c1:93:7e:68:23:06:85:38:e3:2c:
         80:86:2a:b3:2f:6c:f6:40:d4:47:25:3b:16:eb:53:4a:51:1f:
         65:fb:34:a6:ee:6e:d0:03:89:ac:1e:04:04:00:cf:ab:bc:db:
         4f:55:02:fd:4c:99:84:54:48:db:b2:77:e7:0b:72:4c:81:91:
         bd:a6:8d:9f:be:56:f6:87:0e:66:6c:61:88:d8:98:4c:41:97:
         4b:b6:e2:57
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUPXZEQvQXAPa0TXabX+xcyk8RUEwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjhEMDNBRDY1OUFBNDgwRUY1QTNENUJEQzkzNzUzQTRC
RjYxNDgxRDAeFw0yMzExMjkxNzQ0MDRaFw0yNDExMjcxNzQ5MDRaMDMxMTAvBgNV
BAMTKDREOTYyQjVEOEU5QkYwNjlGQTNFNDg5MTZBMjVCRDI4OTVDNzEzMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKJ8bHqfTpAL10po+4upTowsL2
CXBrSrcIRX4zc1k8n/q9U61hjEpt5Y9RNHFr4pa5HxHvsW1OhF6onMviiSxItu8d
tvonOl2YuXlPAfG4ntJbp5XqQFXK6eAMciH6V3MxazAPWaOURWB65c0+T15+YPVE
kUVOZsjrHQ5gvFlaV1SIjUENgykiSTmBA51iOpCwpWlgLqv+/KOVg+aXy/LD2Zw7
EpUd2hJZEN662H9KehgtPAbo1QN+wVdJ4sEBbog48E+CkeAG4EGjSR4uvDF7GfJQ
xc3Rd6s87qpmhmRu0SOZKCeeSzrN/y9Gv69Oyu9dJuGc6GMr8PL6fTGWy8jHAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUTZYrXY6b8Gn6PkiRaiW9KJXHExAwHwYDVR0j
BBgwFoAUKNA61lmqSA71o9W9yTdTpL9hSB0wDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkgyYW00SDNUYUdEcGlUZHdpaDZKeXc3SGZwZ1VwTWl6TDhpOU14Vk1V
dWQvMC8yOEQwM0FENjU5QUE0ODBFRjVBM0Q1QkRDOTM3NTNBNEJGNjE0ODFELmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzI4RDAzQUQ2NTlBQTQ4MEVG
NUEzRDVCREM5Mzc1M0E0QkY2MTQ4MUQuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJIMmFtNEgzVGFHRHBpVGR3aWg2Snl3N0hmcGdVcE1pekw4aTlNeFZNVXVkLzAv
MzIzMDMwMmUzMTMyMzgyZTMxMzIzODJlMzAyZjMxMzgyZDMzMzIyMDNkM2UyMDMx
MzkzMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQGyICAMA0GCSqGSIb3DQEBCwUAA4IBAQB1lvolHs19
3/QDC6KWbBo7GGPBSQKrAe6ShhQzOrXPl3U0owl/HqZZyJSbMbbFr2CIzxklzZd5
si3K5hrFkzxD9pUmwCeUVrLXIg+lyKa0zQMO7aCCmuofkxyXc7EM+P6/tepfneY+
C5r8fJWOQlDsx+b3uTyatVEtsyUiGUAORtsZFeL/2lOogNyaTOwuc9RZEDYgdWu4
TE5bSkC2jMzdPLipuDnyhwANrcGTfmgjBoU44yyAhiqzL2z2QNRHJTsW61NKUR9l
+zSm7m7QA4msHgQEAM+rvNtPVQL9TJmEVEjbsnfnC3JMgZG9po2fvlb2hw5mbGGI
2JhMQZdLtuJX
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org