Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3132382e3139322e302f31392d3332203d3e2031393136.roa
File:                     3230302e3132382e3139322e302f31392d3332203d3e2031393136.roa (raw, json)
Hash identifier:          kWjqh2o/1XdNbKOEnaVkUMrJpE8r/jIbpQO6KxK5XvA=
Subject key identifier:   60:34:46:86:3F:31:10:63:16:D0:93:08:59:6A:63:AF:13:7A:A9:F7
Certificate issuer:       /CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
Certificate serial:       4572AD7B4D3A15864162FEDEF4E2B7035BCC1B22
Authority key identifier: 28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3132382e3139322e302f31392d3332203d3e2031393136.roa
Signing time:             Wed 29 Nov 2023 17:49:06 +0000
ROA not before:           Wed 29 Nov 2023 17:44:06 +0000
ROA not after:            Wed 27 Nov 2024 17:49:06 +0000
asID:                     1916
IP address blocks:        200.128.192.0/19 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:72:ad:7b:4d:3a:15:86:41:62:fe:de:f4:e2:b7:03:5b:cc:1b:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
        Validity
            Not Before: Nov 29 17:44:06 2023 GMT
            Not After : Nov 27 17:49:06 2024 GMT
        Subject: CN=603446863F31106316D09308596A63AF137AA9F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:42:e0:fe:73:a9:8d:46:ef:e8:77:68:ef:ad:
                    63:bc:d9:56:d1:ff:2c:77:7a:4a:bf:b2:db:05:a2:
                    af:e8:6f:8e:9d:3a:74:d1:8c:f5:c5:fc:56:a7:8e:
                    64:47:8b:80:64:2c:85:01:4b:7b:81:27:22:b3:c7:
                    d7:a8:53:d2:0c:9b:0a:4e:ad:eb:c9:14:8f:7d:44:
                    6b:73:3e:87:ca:32:d9:59:5f:3e:ae:4a:4c:9e:58:
                    7d:8a:8e:d5:1f:eb:9e:26:58:c9:e4:a4:d5:f4:69:
                    9a:46:e9:a6:0b:07:c0:08:d6:69:f6:6a:4c:c2:82:
                    e4:1d:64:f5:16:8b:e3:1d:21:13:dd:ba:4e:c4:9b:
                    9f:25:a5:4c:86:e2:90:ee:7b:c7:98:e4:8f:fb:49:
                    41:e1:26:99:14:9c:9b:05:3a:03:09:b9:ac:0a:23:
                    8a:8c:b1:ba:03:0b:50:05:1d:59:71:58:f1:94:0c:
                    ac:4d:7c:23:72:e0:7c:f0:7f:61:20:0e:5d:2a:43:
                    94:4e:b3:56:b1:88:4b:59:72:c9:e5:2f:a8:79:40:
                    40:1a:a0:8e:87:8a:4c:d1:49:53:ea:f3:55:51:ca:
                    f2:4d:70:9d:7f:e0:f5:38:b7:0f:6c:30:1d:0f:d0:
                    fc:a4:32:32:f8:2a:f7:c8:b9:bb:2b:0e:a7:e0:7c:
                    b9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:34:46:86:3F:31:10:63:16:D0:93:08:59:6A:63:AF:13:7A:A9:F7
            X509v3 Authority Key Identifier:
                keyid:28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3132382e3139322e302f31392d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.128.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4a:93:ff:50:d1:17:39:0d:82:8f:e7:ba:56:59:30:7c:de:14:
         c6:c5:5f:af:9e:ea:c1:a2:21:3f:d2:00:6b:9f:c4:d8:eb:b2:
         1f:3f:7e:97:11:a1:bc:38:ee:09:62:44:5c:6a:59:81:79:4b:
         d8:5a:f6:e1:c6:97:1e:bc:a9:8f:ae:73:fc:8c:d7:9f:36:91:
         4a:6c:5a:80:c8:d7:96:8a:8e:61:2c:21:f4:a1:68:10:2d:c1:
         f0:f3:ec:51:1b:90:80:ba:1f:c9:0a:ac:26:8c:e6:60:da:da:
         0a:cd:20:8b:fb:51:e9:9c:20:e6:0a:6c:09:60:5c:5f:39:7a:
         25:3b:1e:2b:b1:0c:95:50:d5:f3:5b:7f:90:cb:f8:53:ed:51:
         aa:72:a6:9c:f3:47:8e:f4:51:27:ac:d8:4d:1e:47:a8:4f:e1:
         6a:23:4d:67:cc:68:a0:ff:2a:30:5c:04:57:12:f2:d5:db:5c:
         c0:03:f3:71:d8:c5:6c:0c:0d:27:28:b4:7a:95:61:63:f2:65:
         04:92:9a:db:2a:80:23:86:51:27:cd:d5:61:88:06:6a:df:5c:
         34:39:6e:58:b0:d1:85:0f:ce:80:fc:b2:a8:83:e3:fd:db:08:
         25:1d:c0:e2:4b:7f:0d:3b:e2:01:92:80:01:8b:41:84:d1:63:
         36:e0:5c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org