Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3133332e3139322e302f31392d3332203d3e2031393136.roa
File:                     3230302e3133332e3139322e302f31392d3332203d3e2031393136.roa (raw, json)
Hash identifier:          N6PhyOQtEkaXC5XU+utNxmVDqv3Zl1iZ1iynybRw0+4=
Subject key identifier:   94:58:8E:A3:AF:86:B8:28:0F:9D:7D:C4:E7:5A:1E:9F:83:A2:FE:8B
Certificate issuer:       /CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
Certificate serial:       3E1ACB9699CF4EB5E1626549C1659CE8EA6CB71C
Authority key identifier: 28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3133332e3139322e302f31392d3332203d3e2031393136.roa
Signing time:             Wed 29 Nov 2023 17:49:06 +0000
ROA not before:           Wed 29 Nov 2023 17:44:06 +0000
ROA not after:            Wed 27 Nov 2024 17:49:06 +0000
asID:                     1916
IP address blocks:        200.133.192.0/19 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:1a:cb:96:99:cf:4e:b5:e1:62:65:49:c1:65:9c:e8:ea:6c:b7:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
        Validity
            Not Before: Nov 29 17:44:06 2023 GMT
            Not After : Nov 27 17:49:06 2024 GMT
        Subject: CN=94588EA3AF86B8280F9D7DC4E75A1E9F83A2FE8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:af:80:c7:39:f3:0d:33:71:89:a2:38:f8:4c:
                    78:b2:0d:e8:a6:3f:dd:31:d4:e5:b2:ce:d7:08:77:
                    b4:3f:a6:94:02:d2:00:d2:55:13:c4:6b:9d:4b:e4:
                    f1:82:bb:f8:57:89:65:c1:15:45:59:94:cb:81:f0:
                    46:6f:73:e0:d2:1b:d4:44:27:06:d6:e2:9c:7c:ce:
                    06:32:aa:8b:75:df:18:62:6a:c0:f5:94:fb:cb:19:
                    39:1a:a5:a0:e6:90:a4:f3:78:26:95:65:1b:15:86:
                    a9:a2:c6:59:fc:58:c8:fe:be:86:64:80:ab:fa:02:
                    7b:4b:42:33:14:43:16:8b:44:57:79:d2:61:d5:b3:
                    90:d7:59:04:eb:4a:2f:66:93:a0:50:e1:c7:2b:0d:
                    95:80:10:e7:18:76:a3:0c:a1:76:ed:a9:5e:20:22:
                    b8:e6:a2:cb:69:5a:1b:60:c4:b0:6a:0b:27:ff:7f:
                    3a:9f:5f:49:e3:6b:6a:01:be:71:fc:04:27:da:11:
                    b2:5d:c4:a4:29:42:ae:ab:e5:74:b0:de:16:56:ac:
                    94:ef:9d:e2:ca:fd:d8:b0:40:1d:fe:5d:72:05:3a:
                    f4:c6:37:a1:b7:ab:9e:41:75:ba:84:b5:f5:68:77:
                    b4:44:ce:28:d7:77:85:55:31:98:f8:4a:b5:e5:cd:
                    31:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:58:8E:A3:AF:86:B8:28:0F:9D:7D:C4:E7:5A:1E:9F:83:A2:FE:8B
            X509v3 Authority Key Identifier:
                keyid:28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3133332e3139322e302f31392d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.133.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         95:63:9f:19:7d:70:7a:ca:45:98:00:54:e9:52:d2:be:59:86:
         f0:55:8a:71:c4:de:b8:15:38:87:50:49:03:e6:94:91:04:6a:
         45:56:f3:e1:57:f4:b4:c8:82:bf:69:c6:31:46:78:e3:73:20:
         10:04:8b:c8:af:3a:c8:e7:7d:56:06:61:8e:4c:d1:67:18:3e:
         dc:a6:c9:95:99:62:a5:98:03:b2:03:b7:94:8c:5f:58:e3:95:
         57:d7:96:07:2d:dc:7e:18:8b:9e:66:c3:a8:ed:97:d5:75:c0:
         b0:4d:18:0e:b6:7d:f2:94:24:ed:29:6e:04:7c:bf:ad:c8:9d:
         cf:5a:07:47:13:5d:c9:b8:f2:41:21:69:09:4b:aa:08:54:17:
         94:c2:3b:13:33:5f:90:f0:e9:27:34:94:cb:e6:4c:7e:51:46:
         0a:dc:77:2d:36:03:e9:c5:7a:f3:69:02:a9:67:0c:83:e8:3b:
         6b:57:a9:8e:4a:b9:2d:67:6d:85:19:82:96:db:e6:0c:40:d4:
         ce:b5:ad:c4:72:11:18:d0:db:13:53:71:31:4e:22:14:89:8e:
         29:b2:1f:9e:9d:c4:ae:ec:2e:ed:ea:da:ac:fc:40:89:26:07:
         c5:65:45:fc:74:05:28:ba:45:b9:82:4a:1f:99:fd:fc:d1:53:
         f8:2d:0b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org