Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3133332e3132382e302f31382d3332203d3e2031393136.roa
File:                     3230302e3133332e3132382e302f31382d3332203d3e2031393136.roa (raw, json)
Hash identifier:          fqP/8FUDRkJOyG28aqeDtLwPCbxUHyWWJrlWxrj+Rrk=
Subject key identifier:   49:58:0B:73:C4:16:30:6C:2A:B8:6F:56:68:85:11:DC:4F:7A:DE:CD
Certificate issuer:       /CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
Certificate serial:       480A1ED8C626BA0B1B37F60F7402BC3A3DB7826B
Authority key identifier: 28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3133332e3132382e302f31382d3332203d3e2031393136.roa
Signing time:             Wed 29 Nov 2023 17:49:08 +0000
ROA not before:           Wed 29 Nov 2023 17:44:08 +0000
ROA not after:            Wed 27 Nov 2024 17:49:08 +0000
asID:                     1916
IP address blocks:        200.133.128.0/18 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:0a:1e:d8:c6:26:ba:0b:1b:37:f6:0f:74:02:bc:3a:3d:b7:82:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
        Validity
            Not Before: Nov 29 17:44:08 2023 GMT
            Not After : Nov 27 17:49:08 2024 GMT
        Subject: CN=49580B73C416306C2AB86F56688511DC4F7ADECD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c0:b5:27:94:e7:17:fb:12:d3:50:1c:e9:bf:
                    cc:15:7e:94:99:5e:16:0c:40:e8:cd:58:45:ac:23:
                    21:3e:be:4b:f2:20:d9:9f:66:d2:40:76:b0:8c:c9:
                    91:0d:a6:36:14:15:4a:d1:15:8f:5b:e9:78:64:85:
                    ac:9d:28:97:e8:21:3e:55:7b:fe:b2:86:f4:91:32:
                    43:f3:8d:bb:5a:14:a6:7e:2f:db:30:79:83:0f:d0:
                    ed:a6:fa:f8:76:11:80:ac:2b:2c:d9:a4:f8:03:bf:
                    1b:bb:fe:cf:de:7a:40:94:73:e2:1d:a6:1c:39:5b:
                    55:cb:32:48:9e:4b:e6:81:f4:04:11:1c:f3:36:88:
                    ea:5e:27:9f:83:c1:b5:15:90:fd:57:b7:cd:eb:3c:
                    57:4f:83:03:94:ec:57:12:e3:63:93:d8:a2:95:12:
                    59:20:75:8c:60:8c:eb:8a:5a:33:67:cc:af:67:8a:
                    01:b3:b2:d6:07:49:dd:72:ca:c1:31:4a:7f:a0:af:
                    8a:e4:9c:55:ac:8a:ec:c1:39:cb:01:34:89:ed:f8:
                    83:b1:96:17:c0:46:b3:af:d8:9f:bd:70:52:d7:0e:
                    5f:02:a6:fe:2e:5e:3c:f4:b6:e8:37:4f:6b:3b:3a:
                    72:03:d6:ff:60:32:27:a4:a8:9f:9a:99:e7:2c:d3:
                    b1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:58:0B:73:C4:16:30:6C:2A:B8:6F:56:68:85:11:DC:4F:7A:DE:CD
            X509v3 Authority Key Identifier:
                keyid:28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3133332e3132382e302f31382d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.133.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         90:04:28:88:65:e4:c9:c6:4b:95:2c:e4:9b:82:fe:11:6e:56:
         39:52:7c:4f:c3:14:68:3b:d3:00:3b:55:e9:84:13:23:7d:55:
         fd:4c:7e:f3:4e:6d:35:d2:10:b9:42:86:f0:0b:33:bb:00:eb:
         b0:d4:04:29:98:c3:49:7d:f8:a4:bf:1e:d2:d9:20:0a:3f:78:
         b7:24:f1:fa:d0:27:e3:82:c6:a8:2f:c8:ba:6e:56:79:95:85:
         d7:71:ed:c5:4c:d3:10:d6:d4:d9:83:7f:73:93:b1:f6:8d:ec:
         d8:b1:b3:97:ff:82:fc:20:30:21:e4:4a:77:d9:ac:2e:92:24:
         e6:11:2b:c4:be:9a:94:23:75:a3:f1:c3:70:a1:40:20:3d:34:
         22:0c:df:45:18:fe:ba:1c:4d:de:62:c3:9d:3b:a2:54:eb:23:
         79:68:50:1f:7f:71:44:dc:76:b7:8b:91:fe:c5:2e:0d:fa:c5:
         69:cb:8e:59:12:d2:1f:a2:76:fe:fa:3f:62:d8:fa:92:75:6c:
         62:90:72:77:89:27:41:45:bb:a5:4b:f3:1a:be:07:1f:2c:16:
         dc:5c:0b:bb:ec:af:f6:9b:66:be:cc:cf:3d:d6:83:6c:08:4a:
         e6:5a:cd:d8:a6:a0:cb:36:5f:a8:6e:35:40:11:b3:99:41:30:
         2b:30:c7:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org