Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3133312e302e302f31362d3332203d3e2031393136.roa
File:                     3230302e3133312e302e302f31362d3332203d3e2031393136.roa (raw, json)
Hash identifier:          fmcJOFsFd+5UUOXmBx4D/PS/kvY9xDvL2db+TSFR54U=
Subject key identifier:   28:AE:61:6C:3E:DB:E4:D9:B7:A5:11:E7:30:4D:C6:22:2C:C0:27:DB
Certificate issuer:       /CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
Certificate serial:       0D6092197AE1A41E3DC85CC232DE3DCE3181EA5A
Authority key identifier: 28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3133312e302e302f31362d3332203d3e2031393136.roa
Signing time:             Wed 29 Nov 2023 17:49:06 +0000
ROA not before:           Wed 29 Nov 2023 17:44:06 +0000
ROA not after:            Wed 27 Nov 2024 17:49:06 +0000
asID:                     1916
IP address blocks:        200.131.0.0/16 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:60:92:19:7a:e1:a4:1e:3d:c8:5c:c2:32:de:3d:ce:31:81:ea:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
        Validity
            Not Before: Nov 29 17:44:06 2023 GMT
            Not After : Nov 27 17:49:06 2024 GMT
        Subject: CN=28AE616C3EDBE4D9B7A511E7304DC6222CC027DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:73:b1:49:ce:c1:64:75:e9:96:5a:36:42:17:
                    4c:fc:f9:8f:33:6c:3b:b0:31:89:79:eb:82:ae:01:
                    8f:d7:a0:2e:3c:47:00:12:c1:7a:31:cf:e9:7d:4c:
                    a7:46:ad:2f:d1:66:4e:7e:22:d6:e5:60:c0:b9:2a:
                    08:e9:f1:2a:b3:70:ac:b2:57:dc:9b:1c:95:37:7c:
                    c5:db:d5:8b:56:02:fc:e4:ef:6e:31:f7:f9:f6:b5:
                    de:9f:d5:fd:f6:d9:ca:4a:5b:29:b1:5c:e2:0d:63:
                    81:7b:e8:42:bf:c3:aa:8c:83:86:f1:b8:35:4a:10:
                    48:4b:ff:a0:00:61:76:e9:7e:88:9e:e8:a3:dc:70:
                    09:09:b0:37:1b:ad:a5:9d:22:e2:b4:47:fe:5a:1c:
                    43:ea:6a:c5:3a:a3:bd:e2:d8:ce:ce:2a:ed:8c:e0:
                    fb:a8:82:40:32:bd:79:dc:bb:db:62:1d:05:21:07:
                    e7:70:33:5a:62:22:43:b4:25:88:44:06:b7:bb:ec:
                    bd:a9:41:68:2a:d5:cf:2c:d2:c7:93:06:e6:3f:de:
                    91:d8:e2:dc:d4:02:0e:53:ae:93:ac:84:fe:01:02:
                    54:93:f8:bd:24:5b:54:c1:19:d7:b6:76:1f:1b:54:
                    69:2f:59:9d:8d:c7:08:d0:d7:8c:f7:b6:ed:81:87:
                    32:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:AE:61:6C:3E:DB:E4:D9:B7:A5:11:E7:30:4D:C6:22:2C:C0:27:DB
            X509v3 Authority Key Identifier:
                keyid:28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3133312e302e302f31362d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.131.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0a:34:02:27:34:8e:d6:bc:fd:bf:2a:06:1a:e3:7b:63:5e:f7:
         72:9d:32:f2:d0:7a:ee:2c:89:ab:c6:7e:8a:87:0a:78:e9:6e:
         94:1b:32:d9:1c:1f:6f:0c:99:a4:51:64:b6:1c:e6:1b:5e:cd:
         25:48:bc:89:79:23:34:fa:87:28:27:78:8c:41:90:43:d2:22:
         67:d0:99:94:7c:0b:05:18:d4:2c:5b:bf:13:1e:e1:6e:5f:c2:
         08:ec:55:8a:83:dc:71:8c:b4:e3:83:08:d0:49:e6:88:96:20:
         50:07:88:78:d9:20:ff:7f:41:27:fe:5a:c2:67:1f:bd:af:8d:
         6c:a7:a0:f0:50:8a:b4:b3:07:de:7a:cf:3a:ce:60:40:e8:dd:
         3d:68:0b:81:94:b0:66:2d:45:78:d5:06:8c:bf:50:ac:87:47:
         e4:69:1e:aa:a3:f4:d7:3d:5d:13:43:5b:ae:7f:57:ea:6e:83:
         b0:ee:68:26:a8:3a:32:7e:dc:e7:d9:3d:5e:e0:e0:cd:fa:27:
         0e:46:4d:2b:3a:1d:15:bb:70:d2:8d:c8:f2:29:e9:78:e3:39:
         36:90:aa:65:d6:c2:96:a0:bc:66:c1:3c:e4:0a:0c:e8:10:73:
         20:66:a3:97:ae:70:fb:9e:0b:b3:c2:18:c8:51:04:17:0f:db:
         70:f5:46:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org