Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31372e33322e302f31392d3332203d3e2031393136.roa
File:                     3230302e31372e33322e302f31392d3332203d3e2031393136.roa (raw, json)
Hash identifier:          3l9ALnAvmen7M3iat7brouO2fM1M5L1yI66QMdH40kE=
Subject key identifier:   57:00:B9:AB:FB:F0:A8:22:63:F9:9E:18:EF:4A:04:39:E5:1E:FD:EF
Certificate issuer:       /CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
Certificate serial:       050C5A738B17C701A194E567B60111B9282D2A85
Authority key identifier: 28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31372e33322e302f31392d3332203d3e2031393136.roa
Signing time:             Wed 29 Nov 2023 17:49:08 +0000
ROA not before:           Wed 29 Nov 2023 17:44:08 +0000
ROA not after:            Wed 27 Nov 2024 17:49:08 +0000
asID:                     1916
IP address blocks:        200.17.32.0/19 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:0c:5a:73:8b:17:c7:01:a1:94:e5:67:b6:01:11:b9:28:2d:2a:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
        Validity
            Not Before: Nov 29 17:44:08 2023 GMT
            Not After : Nov 27 17:49:08 2024 GMT
        Subject: CN=5700B9ABFBF0A82263F99E18EF4A0439E51EFDEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:32:18:e5:ab:8a:b1:29:b8:3c:50:98:71:8c:
                    ab:1e:8f:e4:be:c2:4c:3c:51:20:54:77:0e:ed:18:
                    de:6f:53:61:23:28:86:30:d2:76:ae:c5:75:49:62:
                    fc:18:f9:39:2a:6d:14:66:bc:c6:a8:93:22:a9:9d:
                    82:81:8b:f6:af:dd:af:f4:92:57:60:e7:3c:4e:43:
                    e8:c4:0c:9d:87:f0:27:8b:c6:af:df:45:2d:a9:c6:
                    8d:87:fe:ef:26:42:11:f8:d2:de:56:60:6c:f6:3d:
                    0d:fb:d7:4c:a7:71:d8:e2:00:32:c7:5a:22:fa:fe:
                    1c:0e:b6:a3:d3:47:f7:46:07:7a:7a:b0:d1:98:e6:
                    3f:e8:b7:c2:86:10:a3:d3:3e:71:8a:c8:fd:ef:ba:
                    47:27:ab:12:b5:22:33:e1:ab:93:99:e2:7b:da:e7:
                    2d:6b:e3:1a:a8:2b:70:61:06:53:c8:2c:ae:62:5c:
                    90:11:24:06:ee:01:b1:ea:c8:d5:96:db:24:09:9b:
                    16:b5:d4:57:8a:e7:ee:27:90:e1:fa:51:85:e6:08:
                    69:52:51:27:e8:6c:1c:68:cb:6f:10:9f:09:3f:68:
                    df:f8:3a:1d:25:61:46:d1:78:b8:f8:ca:6f:15:cf:
                    d5:87:be:20:b6:08:c3:8a:f5:1b:b2:3d:76:10:6e:
                    56:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:00:B9:AB:FB:F0:A8:22:63:F9:9E:18:EF:4A:04:39:E5:1E:FD:EF
            X509v3 Authority Key Identifier:
                keyid:28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31372e33322e302f31392d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.17.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         20:f0:90:fa:6f:9c:83:1f:ff:57:d4:62:2b:84:50:9b:5d:22:
         24:cf:17:93:7e:35:fa:e6:c8:09:56:56:5f:a1:49:f0:99:94:
         eb:ee:e9:12:26:1d:d8:19:95:25:24:fb:10:69:96:ed:6a:d2:
         d3:76:97:d4:88:7b:68:eb:fe:b4:a7:08:40:b9:8e:86:38:36:
         bc:8c:03:e8:e7:33:55:14:e6:d6:68:f7:3d:e1:55:60:04:9b:
         a4:5a:49:92:d0:1c:74:ab:eb:aa:30:7c:76:27:b7:f8:6c:64:
         52:4e:95:1d:35:e5:26:1f:5f:b1:83:eb:3c:70:c3:04:cc:f1:
         c1:8b:f9:d0:9c:9e:10:bb:a8:e8:4f:ce:a9:76:d9:3a:8d:9a:
         2a:5b:e7:c3:0d:ba:46:ad:5c:3e:c1:32:c4:81:77:4b:0c:76:
         63:e3:ef:38:31:bd:94:fb:c1:1b:c9:0a:f3:b3:62:f6:c6:52:
         cf:21:f4:df:68:f6:f0:45:09:25:38:89:de:33:e0:86:c4:5f:
         f2:a2:73:d6:e3:f5:d4:d6:73:21:84:f3:ff:44:c6:38:3c:62:
         75:03:b3:c7:77:ec:be:99:ea:5f:a5:ad:34:d3:1f:b3:5e:8c:
         33:18:f3:65:15:ae:75:45:7d:a2:5c:c3:58:10:9b:25:94:d6:
         2f:38:35:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org