Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3135392e3234302e302f32302d3332203d3e2031393136.roa
File:                     3230302e3135392e3234302e302f32302d3332203d3e2031393136.roa (raw, json)
Hash identifier:          Z0UuPlVhJ242XULgh/ddER+P5J10sNgejN6PfA+YmnM=
Subject key identifier:   BE:A4:5D:6F:62:C2:6E:55:43:8E:96:9A:8D:1A:78:8C:3B:17:23:86
Certificate issuer:       /CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
Certificate serial:       51FC259D627680067B8AD9C4B281A4EE0B4A9CE5
Authority key identifier: 28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3135392e3234302e302f32302d3332203d3e2031393136.roa
Signing time:             Wed 29 Nov 2023 17:49:06 +0000
ROA not before:           Wed 29 Nov 2023 17:44:06 +0000
ROA not after:            Wed 27 Nov 2024 17:49:06 +0000
asID:                     1916
IP address blocks:        200.159.240.0/20 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:fc:25:9d:62:76:80:06:7b:8a:d9:c4:b2:81:a4:ee:0b:4a:9c:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
        Validity
            Not Before: Nov 29 17:44:06 2023 GMT
            Not After : Nov 27 17:49:06 2024 GMT
        Subject: CN=BEA45D6F62C26E55438E969A8D1A788C3B172386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:2c:7a:8d:d5:70:ec:48:0b:40:c4:0c:93:c4:
                    2e:5d:ed:cf:8b:01:fc:a7:23:ea:53:b9:26:ee:2c:
                    86:f2:2b:15:fb:30:a4:03:15:c1:d7:b2:22:3f:0a:
                    c6:ea:d3:7f:8b:76:1c:ed:98:c2:78:77:f9:24:ba:
                    8e:7e:36:e8:49:8e:3e:2d:55:39:4c:ee:41:19:7a:
                    8d:f9:69:db:02:3c:dd:95:d5:dd:dc:a6:cd:83:71:
                    4e:5c:d6:4b:a4:d0:bc:9a:63:13:73:4f:f6:ff:79:
                    cd:dd:f5:ef:0b:3a:f4:a5:ee:a5:4e:7b:ed:55:5e:
                    e6:0b:a6:8b:ba:2a:52:69:9d:e8:b0:b7:ad:ac:f7:
                    5a:0d:0f:c5:d3:4a:37:41:c2:82:ad:7f:78:27:56:
                    4e:6b:0c:04:e0:1b:50:ba:95:e7:0f:fb:b7:1a:5e:
                    81:96:91:c8:57:ee:80:52:3b:a9:fb:ee:53:02:de:
                    30:d8:49:ff:31:d2:e3:37:60:b5:d3:16:2f:a9:5b:
                    e5:f5:09:68:7b:e8:f1:b7:1d:db:3a:07:1d:f8:16:
                    66:19:c8:f8:0e:d0:4b:eb:34:b8:15:76:dc:82:f5:
                    e5:d9:83:00:6f:6c:b8:f1:79:da:4a:0e:36:a1:87:
                    d1:5c:36:c7:8e:59:e7:54:2a:25:7c:c4:61:f7:d2:
                    b9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:A4:5D:6F:62:C2:6E:55:43:8E:96:9A:8D:1A:78:8C:3B:17:23:86
            X509v3 Authority Key Identifier:
                keyid:28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e3135392e3234302e302f32302d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.159.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8e:19:b6:8b:c1:06:f3:47:8b:05:04:28:7b:63:ce:ca:8d:7e:
         0d:ae:ef:83:a0:9f:79:bc:1c:8b:9c:2b:1e:b9:3d:69:29:71:
         a2:a7:3b:af:4e:8a:18:d8:af:7d:95:d3:ed:75:fc:94:f9:fe:
         4d:52:73:1b:f4:56:e1:77:c5:6f:55:09:79:55:f6:0a:4c:bd:
         9e:99:ed:cc:02:c3:64:5a:12:c8:9a:a7:36:d5:7a:a6:cb:2c:
         a9:f9:89:2b:f4:b0:25:80:cb:92:0a:7c:11:33:c5:65:2a:71:
         09:ad:82:80:34:bd:2f:61:1b:c6:3e:79:03:b2:99:2d:63:74:
         09:55:f2:f0:67:bd:5e:45:ec:ea:ca:d0:de:17:f5:96:13:3c:
         b7:b0:f6:1b:f8:1c:97:86:45:2f:1a:d1:2a:0d:41:a6:ea:bf:
         95:7d:96:10:58:e8:d2:2b:83:59:1f:81:a1:a7:5a:e2:43:a6:
         3c:ef:54:f9:5b:70:fe:31:78:15:60:36:76:8f:1f:b5:e3:46:
         17:6f:6e:7e:77:57:0b:76:fa:a6:af:fa:e3:16:b6:a9:a1:bb:
         e6:8d:4d:08:3e:84:91:e6:fa:de:15:18:d8:24:eb:5a:8a:00:
         d8:7a:2c:2c:6d:2a:66:bf:9f:33:e3:e1:0e:a7:c0:5d:53:2f:
         b1:93:6e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org