Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31382e38302e302f32302d3332203d3e2031393136.roa
File:                     3230302e31382e38302e302f32302d3332203d3e2031393136.roa (raw, json)
Hash identifier:          eg/eAOJMVMvnW9nHp9RyTNQ2miKRT2G48UKTf+bTKj8=
Subject key identifier:   6C:DD:8E:E8:48:B8:95:85:45:C8:48:7F:45:08:D2:1F:3B:C6:67:AA
Certificate issuer:       /CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
Certificate serial:       45ADA0DC6A7BE9949FFC8B01AF2939C2505D3EA6
Authority key identifier: 28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31382e38302e302f32302d3332203d3e2031393136.roa
Signing time:             Wed 29 Nov 2023 17:49:06 +0000
ROA not before:           Wed 29 Nov 2023 17:44:06 +0000
ROA not after:            Wed 27 Nov 2024 17:49:06 +0000
asID:                     1916
IP address blocks:        200.18.80.0/20 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:ad:a0:dc:6a:7b:e9:94:9f:fc:8b:01:af:29:39:c2:50:5d:3e:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
        Validity
            Not Before: Nov 29 17:44:06 2023 GMT
            Not After : Nov 27 17:49:06 2024 GMT
        Subject: CN=6CDD8EE848B8958545C8487F4508D21F3BC667AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ac:e4:b7:63:81:6c:d9:64:02:3a:90:29:37:
                    1e:75:4d:cf:dd:8d:a3:3d:d7:0e:9f:39:ba:3f:4d:
                    96:8f:6c:51:45:94:ba:ad:66:25:14:1e:1e:06:c5:
                    72:a1:e7:4b:67:ab:e2:4d:e6:05:b9:ff:61:fc:ea:
                    e0:49:a2:40:4a:60:a4:22:ea:b9:91:2e:86:f9:f7:
                    8c:5e:01:0f:d3:23:a8:f1:e7:15:b3:a4:15:ce:67:
                    9e:3c:37:4f:e6:eb:25:e2:d3:69:f5:50:2f:1e:33:
                    8f:cd:80:cc:81:7a:c4:2c:b8:ee:59:2d:43:a7:63:
                    dd:da:19:62:61:c3:32:fd:53:98:79:7c:84:82:85:
                    64:42:43:64:8b:8e:1a:1a:ef:f0:b2:c6:8e:48:1a:
                    e0:c6:04:e1:24:a0:10:be:3e:29:c6:d9:61:ff:05:
                    d4:f5:0c:78:a2:33:44:71:63:b3:ff:7d:bd:a8:26:
                    2f:57:8c:d6:d7:69:14:64:09:2b:11:3d:99:be:90:
                    9f:7b:46:3c:18:c0:79:aa:38:3c:54:37:c8:3d:c9:
                    c8:51:d8:47:23:10:f3:3d:3c:b2:ac:c4:3f:33:8d:
                    c0:b1:35:08:15:81:72:c4:5e:00:e7:af:51:8d:30:
                    35:82:66:e5:ac:57:34:fb:5a:e1:92:e5:70:71:79:
                    44:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:DD:8E:E8:48:B8:95:85:45:C8:48:7F:45:08:D2:1F:3B:C6:67:AA
            X509v3 Authority Key Identifier:
                keyid:28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31382e38302e302f32302d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.18.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8f:9f:a1:47:8d:e4:00:c9:2e:2b:fe:dc:5c:41:b3:c0:96:e4:
         32:da:21:05:59:30:0c:f3:34:f5:8d:b5:b4:42:6d:d7:7a:db:
         bf:a5:cd:94:48:e5:92:a0:c9:83:b0:56:d4:9f:eb:6b:57:db:
         88:5f:70:07:82:c7:88:40:f4:99:e6:e8:78:e4:78:e7:63:fb:
         ce:78:4d:ca:41:5b:c1:30:11:cd:dc:e6:66:71:11:6b:ad:c7:
         62:3a:7f:b1:d0:99:3a:0d:d2:2f:66:be:85:e0:9b:0f:74:5f:
         c5:77:99:3f:fe:2b:29:b6:14:fd:f9:66:3b:fe:b0:c2:58:7e:
         61:2f:39:d9:8f:9a:57:e6:d6:08:bf:90:72:b2:0f:6b:03:94:
         e2:97:10:98:84:24:25:71:f3:f0:32:26:2d:8e:7f:b6:09:ed:
         c5:2f:7b:24:6b:d6:88:d1:33:dd:ed:bf:fb:1c:77:f7:49:ad:
         98:8c:7b:c2:30:91:2a:7c:2d:4c:10:36:09:da:6f:40:44:e6:
         e3:33:c9:ca:9b:b5:87:64:2f:21:63:3b:6a:1e:77:a9:82:5c:
         99:c4:78:6d:26:76:1a:46:ba:77:e0:ef:24:5d:dd:93:e2:04:
         a5:f7:6b:da:9a:1c:d0:3d:94:ec:0f:f5:ea:22:1e:5b:ad:6c:
         23:16:4c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org