Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3135302e3136352e302e302f31362d3332203d3e2031393136.roa
File:                     3135302e3136352e302e302f31362d3332203d3e2031393136.roa (raw, json)
Hash identifier:          v/0F7ow/lfLQb9IAVXDwWf5592qTnwvKebOg98YvLz4=
Subject key identifier:   CD:8F:E1:28:9E:E8:79:69:81:81:C2:23:57:80:25:E2:A4:CE:0B:D3
Certificate issuer:       /CN=337F0355B2973828836736A5986B11322B9C530B
Certificate serial:       3F679B298072FD6D93FDB8CFD98E2608B2442100
Authority key identifier: 33:7F:03:55:B2:97:38:28:83:67:36:A5:98:6B:11:32:2B:9C:53:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/337F0355B2973828836736A5986B11322B9C530B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3135302e3136352e302e302f31362d3332203d3e2031393136.roa
Signing time:             Tue 06 Feb 2024 15:29:43 +0000
ROA not before:           Tue 06 Feb 2024 15:24:43 +0000
ROA not after:            Tue 04 Feb 2025 15:29:43 +0000
asID:                     1916
IP address blocks:        150.165.0.0/16 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:67:9b:29:80:72:fd:6d:93:fd:b8:cf:d9:8e:26:08:b2:44:21:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=337F0355B2973828836736A5986B11322B9C530B
        Validity
            Not Before: Feb  6 15:24:43 2024 GMT
            Not After : Feb  4 15:29:43 2025 GMT
        Subject: CN=CD8FE1289EE879698181C223578025E2A4CE0BD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:dc:f6:75:f3:02:2f:9c:02:16:7f:fd:0f:d1:
                    d4:fc:74:a5:b1:3d:06:82:47:78:f0:91:d1:5e:ee:
                    44:c2:0e:87:3a:dc:26:1c:9f:c0:ec:9b:03:0a:94:
                    5e:99:50:b7:78:53:88:36:48:0a:e9:0d:f0:7c:6a:
                    ba:b9:ae:47:c6:73:52:da:4b:94:b6:c2:19:60:72:
                    e2:ed:5d:51:dd:b3:1e:d8:93:f7:80:19:95:19:8c:
                    aa:2e:2e:53:51:fa:5f:01:f0:a0:5d:f0:67:fa:95:
                    ec:c4:98:59:26:db:91:ad:42:f8:ee:a7:6d:41:f2:
                    5e:1c:9c:3f:94:b7:60:33:c1:9e:c1:b9:27:58:06:
                    c0:7b:3d:50:8e:f4:1b:87:6d:22:e1:90:d0:4c:07:
                    70:4c:07:0a:39:22:05:16:64:07:ba:f0:9e:68:6d:
                    68:74:ce:bc:3e:f9:7c:94:5d:05:68:47:ae:2b:a5:
                    73:36:f1:7b:ee:03:0f:a1:47:f4:48:78:2a:c6:3d:
                    37:38:a7:7e:4f:9c:c2:eb:9c:e2:06:9e:7e:8e:9c:
                    6b:05:00:46:be:eb:ce:74:c7:6e:c1:05:24:7d:1e:
                    26:48:8b:64:cd:94:c9:3b:c7:0e:f8:74:76:36:95:
                    fb:cb:00:f2:2d:c0:9b:6b:1b:d8:03:48:3b:a9:22:
                    a8:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:8F:E1:28:9E:E8:79:69:81:81:C2:23:57:80:25:E2:A4:CE:0B:D3
            X509v3 Authority Key Identifier:
                keyid:33:7F:03:55:B2:97:38:28:83:67:36:A5:98:6B:11:32:2B:9C:53:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/337F0355B2973828836736A5986B11322B9C530B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/337F0355B2973828836736A5986B11322B9C530B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3135302e3136352e302e302f31362d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.165.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8c:8b:49:a6:6c:a2:27:c4:e6:7d:3e:65:99:da:e7:22:15:cd:
         0b:1b:fe:87:4d:2b:d7:e7:e5:75:99:fb:74:8e:42:77:f6:9a:
         79:36:87:7d:09:a1:6c:0e:42:a6:5d:21:a0:75:68:5a:22:ed:
         d9:3f:c7:1b:36:42:2a:cc:c0:ec:72:c8:cb:62:2d:ca:af:90:
         0a:cc:0b:e1:8c:70:a7:5d:60:21:80:82:56:33:99:30:fc:47:
         f8:c2:51:b3:c4:66:7f:78:56:65:28:4c:33:a1:53:a5:94:19:
         37:0c:df:e8:d5:74:04:c0:29:ef:c4:cb:57:7e:fd:74:87:ee:
         29:51:51:5d:36:65:d4:d7:40:40:20:74:f3:02:a2:0d:2f:22:
         33:8e:40:ca:97:34:d6:39:30:37:7e:23:3e:50:42:6d:0b:d1:
         a5:41:aa:cd:30:c3:11:da:46:71:16:c7:dd:f1:7d:cc:87:22:
         1f:56:be:1a:ba:96:11:e8:b9:21:68:63:65:12:e1:a0:82:4a:
         e1:61:a7:97:0d:0a:64:4a:3b:2b:42:d6:76:1d:6e:c5:fd:69:
         cc:44:8f:96:ed:86:c8:5d:6b:c9:1f:ef:a0:09:65:37:90:40:
         65:fb:b8:8b:0f:9c:63:3c:ab:72:e7:37:4a:75:4e:59:96:5a:
         68:d7:d9:47
-----BEGIN CERTIFICATE-----
MIIFQDCCBCigAwIBAgIUP2ebKYBy/W2T/bjP2Y4mCLJEIQAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzM3RjAzNTVCMjk3MzgyODgzNjczNkE1OTg2QjExMzIy
QjlDNTMwQjAeFw0yNDAyMDYxNTI0NDNaFw0yNTAyMDQxNTI5NDNaMDMxMTAvBgNV
BAMTKENEOEZFMTI4OUVFODc5Njk4MTgxQzIyMzU3ODAyNUUyQTRDRTBCRDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC33PZ18wIvnAIWf/0P0dT8dKWx
PQaCR3jwkdFe7kTCDoc63CYcn8DsmwMKlF6ZULd4U4g2SArpDfB8arq5rkfGc1La
S5S2whlgcuLtXVHdsx7Yk/eAGZUZjKouLlNR+l8B8KBd8Gf6lezEmFkm25GtQvju
p21B8l4cnD+Ut2AzwZ7BuSdYBsB7PVCO9BuHbSLhkNBMB3BMBwo5IgUWZAe68J5o
bWh0zrw++XyUXQVoR64rpXM28XvuAw+hR/RIeCrGPTc4p35PnMLrnOIGnn6OnGsF
AEa+6850x27BBSR9HiZIi2TNlMk7xw74dHY2lfvLAPItwJtrG9gDSDupIqjXAgMB
AAGjggJKMIICRjAdBgNVHQ4EFgQUzY/hKJ7oeWmBgcIjV4Al4qTOC9MwHwYDVR0j
BBgwFoAUM38DVbKXOCiDZzalmGsRMiucUwswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkgyYW00SDNUYUdEcGlUZHdpaDZKeXc3SGZwZ1VwTWl6TDhpOU14Vk1V
dWQvMS8zMzdGMDM1NUIyOTczODI4ODM2NzM2QTU5ODZCMTEzMjJCOUM1MzBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMzN0YwMzU1QjI5NzM4Mjg4
MzY3MzZBNTk4NkIxMTMyMkI5QzUzMEIuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJIMmFtNEgzVGFHRHBpVGR3aWg2Snl3N0hmcGdVcE1pekw4aTlNeFZNVXVkLzEv
MzEzNTMwMmUzMTM2MzUyZTMwMmUzMDJmMzEzNjJkMzMzMjIwM2QzZTIwMzEzOTMx
MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8E
DzANMAsEAgABMAUDAwCWpTANBgkqhkiG9w0BAQsFAAOCAQEAjItJpmyiJ8TmfT5l
mdrnIhXNCxv+h00r1+fldZn7dI5Cd/aaeTaHfQmhbA5Cpl0hoHVoWiLt2T/HGzZC
KszA7HLIy2Ityq+QCswL4Yxwp11gIYCCVjOZMPxH+MJRs8Rmf3hWZShMM6FTpZQZ
Nwzf6NV0BMAp78TLV379dIfuKVFRXTZl1NdAQCB08wKiDS8iM45Aypc01jkwN34j
PlBCbQvRpUGqzTDDEdpGcRbH3fF9zIciH1a+GrqWEei5IWhjZRLhoIJK4WGnlw0K
ZEo7K0LWdh1uxf1pzESPlu2GyF1ryR/voAllN5BAZfu4iw+cYzyrcuc3SnVOWZZa
aNfZRw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org