Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3134332e3139322e302f31382d3332203d3e2031393136.roa
File:                     3230302e3134332e3139322e302f31382d3332203d3e2031393136.roa (raw, json)
Hash identifier:          S+HT5GrhJDE21K74uZV3OSrJqJhoJXLu23sO39llJsY=
Subject key identifier:   06:D0:86:69:3C:1E:9A:F6:BC:E5:45:54:D5:7D:ED:A6:E8:20:6C:AF
Certificate issuer:       /CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
Certificate serial:       0104F67BC67BDCDAC83BDE3128DF0792A227EB8F
Authority key identifier: 28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3134332e3139322e302f31382d3332203d3e2031393136.roa
Signing time:             Wed 29 Nov 2023 17:49:07 +0000
ROA not before:           Wed 29 Nov 2023 17:44:07 +0000
ROA not after:            Wed 27 Nov 2024 17:49:07 +0000
asID:                     1916
IP address blocks:        200.143.192.0/18 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:04:f6:7b:c6:7b:dc:da:c8:3b:de:31:28:df:07:92:a2:27:eb:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
        Validity
            Not Before: Nov 29 17:44:07 2023 GMT
            Not After : Nov 27 17:49:07 2024 GMT
        Subject: CN=06D086693C1E9AF6BCE54554D57DEDA6E8206CAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:49:f2:db:1d:3c:bd:d6:d9:8d:67:4a:e5:59:
                    83:54:67:af:9a:ac:31:35:1a:a5:c6:a9:62:61:82:
                    bc:9a:c9:da:20:9a:7b:ea:18:66:dc:9c:c2:26:3a:
                    c4:40:06:e0:92:13:09:b8:02:82:c3:b9:12:a4:85:
                    1b:98:37:cc:17:04:64:5a:82:7d:70:f9:2e:3e:93:
                    95:8b:fd:f4:38:d5:e8:70:6f:63:5f:b7:8e:43:15:
                    f0:7e:0a:c8:32:63:0f:6a:6a:88:9c:47:c3:11:e5:
                    80:f4:93:91:83:89:c4:5f:c9:11:5f:22:21:87:2b:
                    d4:b2:73:7f:20:23:1f:73:76:b1:31:51:04:34:49:
                    5f:50:7e:95:46:9e:85:07:1f:b7:c8:63:21:5c:9d:
                    41:de:b5:8a:2c:57:7b:21:a1:70:27:e5:64:37:3a:
                    ba:db:be:d9:14:f2:ed:99:d1:b7:59:75:75:4d:28:
                    3e:16:e9:46:69:6a:ec:fc:5a:2d:e3:b3:78:51:84:
                    20:48:e5:6c:67:6a:4d:84:a7:e0:a5:1a:38:06:9e:
                    1a:9b:53:7f:88:3c:eb:2c:27:a5:d9:06:89:34:8e:
                    ea:2a:88:82:0e:66:91:74:3b:ad:bc:48:a9:c7:10:
                    be:bd:54:f6:ae:09:75:23:52:b7:9a:c5:6c:70:c5:
                    4b:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D0:86:69:3C:1E:9A:F6:BC:E5:45:54:D5:7D:ED:A6:E8:20:6C:AF
            X509v3 Authority Key Identifier:
                keyid:28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3134332e3139322e302f31382d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.143.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         90:62:f5:15:f4:df:1e:26:bd:13:2b:6a:16:b2:5c:77:43:74:
         3d:df:14:52:5d:a1:53:fb:8c:30:20:72:a3:b4:c0:13:41:33:
         9e:c7:91:df:a7:05:77:c1:d9:da:e7:c5:cb:ab:ce:34:15:7d:
         1e:f9:63:47:08:eb:98:c3:8c:74:a0:6d:a6:18:80:53:c3:d9:
         ae:3f:a7:36:98:6c:bb:2a:6b:b0:8b:00:a4:f7:ed:74:0f:4a:
         da:1d:d7:9a:89:69:28:30:fc:ea:e6:40:c0:85:79:c6:e5:18:
         ee:c0:be:5d:8f:09:86:75:24:4a:b5:97:65:91:11:d8:83:28:
         f3:7f:73:d7:7f:5d:64:ba:e6:f7:5f:99:67:06:06:8d:11:85:
         0f:4c:bc:78:bc:e0:42:f3:32:71:73:95:a0:79:b8:1d:dc:2d:
         3a:40:b6:27:bd:48:ce:ff:da:37:d3:8f:2d:3d:9d:e2:45:07:
         5f:a2:72:62:5a:ba:c0:bd:27:24:71:47:1b:e7:28:52:00:45:
         7d:ae:09:1c:b8:7d:08:96:98:f6:c0:0e:fd:84:b5:24:03:c0:
         35:97:9c:04:90:f5:72:fb:71:38:16:a7:ed:23:67:5a:93:20:
         d4:cd:5b:08:50:08:d2:f8:48:89:11:6b:44:f4:21:69:58:72:
         4c:a4:d2:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org