Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31392e31362e302f32302d3332203d3e2031393136.roa
File:                     3230302e31392e31362e302f32302d3332203d3e2031393136.roa (raw, json)
Hash identifier:          iBYeCM923N1vVDS3sPOw5V0nCINsI1/GR4yIjgDkCO8=
Subject key identifier:   2C:1D:BC:1D:3C:CF:70:54:0C:FA:21:BB:8A:C6:60:9D:1E:73:66:B1
Certificate issuer:       /CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
Certificate serial:       36DBC5F3B90A6CEF77ACA9D4F42FCA342A584FD4
Authority key identifier: 28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31392e31362e302f32302d3332203d3e2031393136.roa
Signing time:             Wed 29 Nov 2023 17:49:06 +0000
ROA not before:           Wed 29 Nov 2023 17:44:06 +0000
ROA not after:            Wed 27 Nov 2024 17:49:06 +0000
asID:                     1916
IP address blocks:        200.19.16.0/20 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:db:c5:f3:b9:0a:6c:ef:77:ac:a9:d4:f4:2f:ca:34:2a:58:4f:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28D03AD659AA480EF5A3D5BDC93753A4BF61481D
        Validity
            Not Before: Nov 29 17:44:06 2023 GMT
            Not After : Nov 27 17:49:06 2024 GMT
        Subject: CN=2C1DBC1D3CCF70540CFA21BB8AC6609D1E7366B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f5:d8:83:ea:90:e1:20:2b:89:a6:96:78:1b:
                    88:77:ae:c6:e7:71:ad:af:95:cd:81:90:74:16:e5:
                    0e:83:81:ca:fd:b4:8c:e9:84:f4:8f:e8:48:05:3f:
                    b4:d7:64:8f:5d:61:36:1e:79:5c:58:17:ca:a3:38:
                    db:76:de:7a:93:6f:27:e3:a2:a2:df:48:e4:03:b9:
                    09:b9:04:5f:bb:c5:59:38:14:5a:68:c3:c1:e1:06:
                    5a:8b:ff:68:dd:b4:91:74:3b:d2:83:33:5c:2d:5f:
                    49:26:87:d1:3e:c6:48:58:b4:17:d4:e2:c9:53:58:
                    2e:73:34:57:03:58:19:60:c1:65:86:44:9c:31:9f:
                    19:5f:39:d0:7a:a2:a8:4d:89:5f:86:71:63:da:96:
                    fe:c4:d1:9d:18:fa:70:83:83:72:53:81:51:c3:d5:
                    44:e2:2f:58:fc:e7:03:22:0d:f2:fe:ea:13:b0:50:
                    f1:d4:eb:2c:c8:1b:56:8e:e2:40:61:cb:51:f2:e3:
                    9c:23:86:55:4d:b3:e7:c6:fc:e4:3b:71:ca:50:46:
                    c4:41:bf:e5:8c:57:85:c2:ad:f9:82:66:80:7a:bf:
                    4c:11:46:c3:91:b6:13:fd:3e:1b:d5:ff:46:6b:91:
                    f2:26:f1:25:4a:5e:3c:06:46:93:5b:63:11:c3:56:
                    7b:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:1D:BC:1D:3C:CF:70:54:0C:FA:21:BB:8A:C6:60:9D:1E:73:66:B1
            X509v3 Authority Key Identifier:
                keyid:28:D0:3A:D6:59:AA:48:0E:F5:A3:D5:BD:C9:37:53:A4:BF:61:48:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/28D03AD659AA480EF5A3D5BDC93753A4BF61481D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/0/3230302e31392e31362e302f32302d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         59:94:6b:e5:ef:ed:00:53:24:b9:90:75:5c:07:92:8a:e5:f9:
         97:8c:ec:a6:29:69:1f:fd:9e:9c:ce:f0:70:0d:fb:d5:2a:0d:
         16:04:8c:cf:36:8c:e6:34:0c:e9:39:36:8c:f0:2b:9b:b1:be:
         30:a4:61:b9:0f:a3:6d:16:38:bc:84:d3:ab:9d:84:08:f1:0b:
         95:e4:95:b0:83:4c:bb:39:38:98:35:09:b8:d7:b0:eb:f5:ab:
         b5:a2:25:b3:84:76:f5:73:b2:fe:70:b4:61:06:83:0e:42:f4:
         2a:c3:8e:96:10:b3:09:5e:25:35:48:c0:a9:1f:8e:4e:56:c6:
         fb:13:37:d2:02:8d:6c:22:8e:59:ca:7d:3c:40:34:9d:c8:45:
         f0:12:25:2e:eb:5d:28:05:0e:dc:8f:1c:71:34:93:53:fd:51:
         95:ac:b8:f2:e2:9c:5e:e6:ab:49:46:b3:7f:03:02:26:d6:76:
         98:ec:73:f4:b2:84:3b:ac:ff:d7:2e:8a:80:f1:a8:b7:08:66:
         31:fe:12:a5:f0:87:a3:4c:1d:46:b9:1b:2f:ed:92:09:27:f8:
         40:5b:8c:df:de:2d:bc:b8:8d:68:4e:35:3d:47:45:c8:9e:24:
         d2:cc:12:a5:b3:56:a5:f5:56:c0:5f:7e:54:09:b4:3d:b1:ef:
         ad:d6:1f:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org