Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3133382e3132312e36382e302f32322d3332203d3e2031393136.roa
File:                     3133382e3132312e36382e302f32322d3332203d3e2031393136.roa (raw, json)
Hash identifier:          k6EPpJKsTLFiiZccrJw+I3aaMBuEcDLhlnIoipBZyOU=
Subject key identifier:   C2:7A:C6:C2:40:85:D4:78:34:4F:81:32:47:1A:79:19:49:72:2B:2B
Certificate issuer:       /CN=337F0355B2973828836736A5986B11322B9C530B
Certificate serial:       559E167E8AB28EC287D1DFC0CB1C755A73A850A0
Authority key identifier: 33:7F:03:55:B2:97:38:28:83:67:36:A5:98:6B:11:32:2B:9C:53:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/337F0355B2973828836736A5986B11322B9C530B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3133382e3132312e36382e302f32322d3332203d3e2031393136.roa
Signing time:             Tue 06 Feb 2024 15:29:42 +0000
ROA not before:           Tue 06 Feb 2024 15:24:42 +0000
ROA not after:            Tue 04 Feb 2025 15:29:42 +0000
asID:                     1916
IP address blocks:        138.121.68.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:9e:16:7e:8a:b2:8e:c2:87:d1:df:c0:cb:1c:75:5a:73:a8:50:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=337F0355B2973828836736A5986B11322B9C530B
        Validity
            Not Before: Feb  6 15:24:42 2024 GMT
            Not After : Feb  4 15:29:42 2025 GMT
        Subject: CN=C27AC6C24085D478344F8132471A791949722B2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:57:83:ec:70:a0:97:62:e0:9c:fb:15:5b:a1:
                    2e:b2:15:58:1e:88:31:14:29:ad:a0:e9:88:a4:8a:
                    f3:e5:d8:66:41:20:6f:4b:24:d6:88:11:93:33:1d:
                    ba:c6:f0:59:f1:c9:71:70:a0:50:e1:65:b7:f6:20:
                    52:2a:fd:47:2f:3e:b2:c3:13:21:0b:64:50:12:95:
                    9c:7b:ce:45:23:0d:66:95:2a:d9:93:fb:a9:e7:94:
                    f8:a4:79:d1:b0:0f:5e:61:8d:82:2a:7e:82:3f:91:
                    88:b2:14:ba:d7:8c:09:d1:3d:6c:7b:04:e3:51:82:
                    94:33:52:52:46:f6:50:26:c0:b8:82:cc:a4:5a:f3:
                    25:15:28:04:29:bd:5a:f0:fc:a6:20:bb:ce:de:c9:
                    17:31:c9:5d:cc:1c:cc:82:60:57:92:2a:e8:70:2e:
                    01:f8:10:d5:aa:a3:05:72:be:bf:47:c5:88:c9:d1:
                    c5:d5:bb:d1:0e:c1:85:51:20:44:38:1f:d3:2e:60:
                    63:b2:f1:72:e7:69:ba:84:46:e2:d1:c6:11:ae:21:
                    cd:2b:2d:21:8b:03:86:67:c4:58:52:24:dc:a9:ca:
                    0b:00:b0:a7:c3:6e:49:a8:0f:8e:26:3c:53:24:ce:
                    63:75:d3:e0:7c:50:f1:5c:30:c4:b6:26:ed:ac:11:
                    4b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:7A:C6:C2:40:85:D4:78:34:4F:81:32:47:1A:79:19:49:72:2B:2B
            X509v3 Authority Key Identifier:
                keyid:33:7F:03:55:B2:97:38:28:83:67:36:A5:98:6B:11:32:2B:9C:53:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/337F0355B2973828836736A5986B11322B9C530B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/337F0355B2973828836736A5986B11322B9C530B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3133382e3132312e36382e302f32322d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         52:33:42:f7:d9:50:17:49:bc:d2:ee:08:2f:d7:b3:57:ec:d6:
         df:17:d5:9e:b9:c7:f9:b8:4d:f7:96:43:5c:61:4e:ca:c6:86:
         17:a9:12:47:d8:ab:a1:ed:cb:54:f5:a1:39:4d:8a:9f:33:ac:
         10:64:a9:48:76:f8:c9:02:d6:2a:1f:5b:e5:56:4b:d0:5e:bf:
         d9:2a:0d:67:27:e2:87:6b:24:90:7a:98:0f:fd:88:ce:d4:25:
         ea:f9:d8:08:29:03:5d:9b:1c:eb:15:2b:98:63:20:b8:6d:93:
         71:a6:83:66:eb:c2:75:3e:d9:70:29:f7:fc:47:b8:5d:c3:60:
         aa:f6:19:0c:d7:f0:37:eb:19:50:1f:0e:51:28:22:ee:61:94:
         15:99:7b:28:bb:fb:39:57:f4:3b:8c:28:69:fd:04:99:8f:31:
         08:ea:e5:3b:6e:30:d6:e7:cf:1d:14:85:36:40:e0:de:58:d4:
         65:7b:8f:10:94:06:6b:dc:4f:c1:52:50:c2:43:17:ff:31:11:
         94:a5:57:fc:23:10:78:99:af:6e:40:7e:b4:b6:d1:ed:39:06:
         3f:3b:a1:47:ba:c4:87:6e:00:d0:45:9a:d3:19:c6:d2:42:48:
         72:8a:b9:7e:00:00:3d:f5:85:60:ff:c6:8d:88:d7:3d:69:12:
         38:d4:c7:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org