Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31382e3139322e302f31392d3332203d3e2031393136.roa
File:                     3230302e31382e3139322e302f31392d3332203d3e2031393136.roa (raw, json)
Hash identifier:          E18WAfSbCFnb3mcM3eEp8jJ6h2h9wSOwDpt4eQbKYls=
Subject key identifier:   3E:43:C2:DC:EE:69:ED:B6:94:C6:50:54:86:90:88:76:11:87:A1:7B
Certificate issuer:       /CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
Certificate serial:       1D19940AD136217BB87A508F8F25E7E0F3FBA4F7
Authority key identifier: 28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31382e3139322e302f31392d3332203d3e2031393136.roa
Signing time:             Wed 29 Nov 2023 17:49:06 +0000
ROA not before:           Wed 29 Nov 2023 17:44:06 +0000
ROA not after:            Wed 27 Nov 2024 17:49:06 +0000
asID:                     1916
IP address blocks:        200.18.192.0/19 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:19:94:0a:d1:36:21:7b:b8:7a:50:8f:8f:25:e7:e0:f3:fb:a4:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
        Validity
            Not Before: Nov 29 17:44:06 2023 GMT
            Not After : Nov 27 17:49:06 2024 GMT
        Subject: CN=3E43C2DCEE69EDB694C65054869088761187A17B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:66:4c:d4:9e:bc:dc:9b:83:82:6f:ab:e4:c8:
                    df:50:79:38:ab:9f:9f:88:b9:f9:02:18:e4:51:8b:
                    31:ba:b9:e3:59:a9:10:6c:13:fd:8f:af:70:23:40:
                    90:08:65:1a:ea:c5:e5:ac:3f:79:29:b7:4d:75:21:
                    1f:2e:52:63:a7:00:d8:0b:79:1c:99:40:94:12:35:
                    3d:5e:98:2c:1b:ce:c9:c6:86:2f:3f:73:31:de:cb:
                    d4:9a:d7:7b:64:df:c7:ac:32:95:9d:64:d1:10:e5:
                    05:b8:dc:44:6f:7a:7b:b9:02:14:59:76:4e:da:81:
                    d6:e0:8c:99:cc:7b:97:a4:d3:53:1c:25:e3:17:b1:
                    9e:16:f3:21:49:04:d1:3a:ac:f3:2f:2a:0f:9e:73:
                    05:2b:72:57:3a:ef:91:ad:b7:c0:21:b7:db:d2:3c:
                    2b:95:9f:a8:60:8b:4b:ff:47:66:53:b4:ae:8e:5d:
                    ec:1f:d9:93:43:2a:56:27:5d:f5:cd:ad:1b:c9:ad:
                    ac:51:95:ee:5a:7d:58:40:32:64:f2:ef:ea:0b:41:
                    bc:ee:a1:d6:a0:6a:c4:7b:44:b7:b2:ae:5b:35:78:
                    60:41:71:19:93:64:5f:04:0d:2c:9c:94:de:e2:1c:
                    53:cd:a4:fb:c6:0e:33:55:09:2d:99:1c:88:99:fb:
                    d8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:43:C2:DC:EE:69:ED:B6:94:C6:50:54:86:90:88:76:11:87:A1:7B
            X509v3 Authority Key Identifier:
                keyid:28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31382e3139322e302f31392d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.18.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         22:c7:d2:62:1e:58:79:48:48:53:67:79:7b:2e:4d:b2:43:47:
         1c:06:69:b8:0b:ea:a6:fc:47:88:db:5e:a8:1d:e1:83:12:95:
         a4:3c:af:9b:54:ca:e4:39:0c:49:5b:a1:5f:42:1c:7b:13:2b:
         71:6a:0f:c0:21:1e:ee:b9:ce:b6:10:3c:43:48:03:08:9d:a0:
         08:4c:b4:fd:66:37:9a:8d:af:bb:e2:d6:cd:7d:ba:a1:a4:60:
         23:0a:ca:d0:34:be:32:db:4c:1b:43:02:4d:70:10:f6:2c:48:
         b2:7c:1b:ba:3d:54:ba:a7:e6:2b:1d:66:12:4a:63:d2:18:57:
         06:ee:56:b1:8c:80:57:44:61:d2:a7:f5:2c:b5:cd:d3:c3:f0:
         e5:58:4c:20:d3:b5:70:0f:bd:fb:51:26:64:d1:6b:9d:5f:0d:
         33:6f:3b:46:3c:e7:d3:d0:bc:86:6e:bf:9b:21:59:51:cf:69:
         4f:66:d8:e7:7b:9e:f4:14:d2:c7:32:37:6b:7e:76:36:56:2c:
         31:02:69:a8:57:04:a3:39:1d:70:cd:b4:e7:84:dc:02:26:ba:
         28:9e:6c:76:95:cd:34:45:aa:44:bc:d3:18:9b:6a:a4:0a:df:
         89:bb:6e:0c:93:5f:4a:12:06:a7:d0:32:15:22:6e:8e:d8:2b:
         1b:e3:00:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org