Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31382e32302e302f32322d3332203d3e2031393136.roa
File:                     3230302e31382e32302e302f32322d3332203d3e2031393136.roa (raw, json)
Hash identifier:          16DJW3jBaLfGS3ZAFXbQLkLxbqVKTUHHhoNrw8K/XYM=
Subject key identifier:   70:69:85:7A:36:3B:AF:D7:44:34:A9:FE:BD:92:26:67:8C:E8:23:6F
Certificate issuer:       /CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
Certificate serial:       5BDBBED0ACB105D954F85C6B580D605C3F152B67
Authority key identifier: 28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31382e32302e302f32322d3332203d3e2031393136.roa
Signing time:             Wed 29 Nov 2023 17:49:08 +0000
ROA not before:           Wed 29 Nov 2023 17:44:08 +0000
ROA not after:            Wed 27 Nov 2024 17:49:08 +0000
asID:                     1916
IP address blocks:        200.18.20.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:db:be:d0:ac:b1:05:d9:54:f8:5c:6b:58:0d:60:5c:3f:15:2b:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
        Validity
            Not Before: Nov 29 17:44:08 2023 GMT
            Not After : Nov 27 17:49:08 2024 GMT
        Subject: CN=7069857A363BAFD74434A9FEBD9226678CE8236F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:db:f4:c3:ac:b8:f6:ec:1e:f4:ef:8c:bf:ed:
                    59:6a:6f:04:84:21:a1:74:03:b9:68:f8:8b:27:9a:
                    29:61:48:48:35:6a:7e:ad:da:01:57:f4:fc:7c:aa:
                    80:64:91:9f:41:fc:a5:ee:87:53:78:fd:1d:68:0f:
                    22:84:3b:d6:12:fc:56:23:60:6b:4c:3f:f4:c2:dd:
                    ea:12:bc:44:74:63:af:6c:4b:de:33:a6:30:35:72:
                    fb:77:87:52:03:c7:e0:66:b5:06:00:be:ce:04:b6:
                    28:84:d4:fd:d6:5e:c0:63:5c:29:60:07:da:45:0e:
                    b5:c5:5e:1a:fe:1d:bd:87:01:1a:e6:21:bb:ad:21:
                    f9:ce:98:39:77:7a:be:03:94:61:31:94:4a:b2:9a:
                    30:7d:b4:e8:86:7c:57:13:83:23:68:83:eb:04:42:
                    a9:fb:ba:1e:98:6f:09:08:87:b4:f1:ee:b9:52:eb:
                    ea:c3:0a:22:b3:f1:40:7b:18:19:20:c9:b2:8f:20:
                    a6:73:9c:52:b2:f1:d4:c5:99:58:f2:2c:f5:45:6d:
                    e4:00:89:73:93:12:9a:f5:68:b5:21:af:9d:d3:38:
                    58:7b:ad:67:39:3b:98:43:f4:4e:29:00:fd:2a:f3:
                    4f:4b:0d:8d:fa:fc:ac:a8:34:a0:bb:2a:44:c4:ea:
                    d8:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:69:85:7A:36:3B:AF:D7:44:34:A9:FE:BD:92:26:67:8C:E8:23:6F
            X509v3 Authority Key Identifier:
                keyid:28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31382e32302e302f32322d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.18.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:6c:06:5b:6f:69:a4:b2:27:3c:b7:96:be:cf:65:67:8a:b4:
         1f:6b:b1:89:06:10:cb:85:97:db:46:e4:d8:11:b1:85:1e:ae:
         3e:d0:de:38:52:2b:f0:bb:78:40:c2:51:68:bd:bc:24:dd:72:
         4d:70:af:1c:7d:ac:c5:3f:95:f2:95:1a:c1:ee:8f:f8:40:27:
         d0:b2:cc:2c:4f:ed:2d:9a:8b:37:74:87:45:38:8a:a9:e1:ba:
         3e:18:61:46:87:16:e0:ec:6f:4c:21:6d:41:e6:d8:9e:8c:2a:
         c5:d0:ba:ca:bc:8f:4f:87:f7:b8:c4:35:7b:df:97:c8:e7:ea:
         1f:bb:06:40:2a:a8:a6:fe:3e:01:df:c0:89:6c:58:9b:da:f1:
         49:3b:61:ab:d3:d4:60:b1:8c:ed:17:95:f4:ea:84:3f:60:11:
         b8:21:a3:09:8c:b3:fc:f5:40:33:22:be:71:a7:c1:18:8e:0d:
         a1:5d:c5:92:cd:ae:54:fe:cd:97:10:40:46:70:11:43:98:be:
         cb:bd:cd:88:12:89:2e:a2:2b:13:4d:73:87:c3:e6:a8:61:e2:
         0a:5a:e0:5c:74:73:d2:4b:32:24:21:f6:a8:35:ed:32:30:31:
         1e:30:31:fd:c0:df:04:47:b5:26:3b:7d:2d:10:08:86:8a:cc:
         52:15:e6:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org