Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e3132382e3139322e302f31392d3332203d3e2031393136.roa
File:                     3230302e3132382e3139322e302f31392d3332203d3e2031393136.roa (raw, json)
Hash identifier:          ugU7mXPZqP0jkaOh5PwQ4Vj5oM1U1SKmAaoCq5PDeTs=
Subject key identifier:   D0:45:BB:E3:62:8F:1C:C8:48:6D:48:F7:33:5B:FC:7C:14:86:96:61
Certificate issuer:       /CN=337F0355B2973828836736A5986B11322B9C530B
Certificate serial:       447AD35BFEB142E379E9C6367295F12EE19F96E9
Authority key identifier: 33:7F:03:55:B2:97:38:28:83:67:36:A5:98:6B:11:32:2B:9C:53:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/337F0355B2973828836736A5986B11322B9C530B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e3132382e3139322e302f31392d3332203d3e2031393136.roa
Signing time:             Tue 06 Feb 2024 15:29:43 +0000
ROA not before:           Tue 06 Feb 2024 15:24:43 +0000
ROA not after:            Tue 04 Feb 2025 15:29:43 +0000
asID:                     1916
IP address blocks:        200.128.192.0/19 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:7a:d3:5b:fe:b1:42:e3:79:e9:c6:36:72:95:f1:2e:e1:9f:96:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=337F0355B2973828836736A5986B11322B9C530B
        Validity
            Not Before: Feb  6 15:24:43 2024 GMT
            Not After : Feb  4 15:29:43 2025 GMT
        Subject: CN=D045BBE3628F1CC8486D48F7335BFC7C14869661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:da:6f:45:55:b7:b6:aa:4f:58:dd:e0:65:58:
                    9f:fb:de:51:17:f1:72:f7:79:7c:1f:7c:68:e1:47:
                    03:59:d4:54:21:7b:4a:dc:04:ef:d5:51:f9:e9:d7:
                    9b:5c:9a:31:bd:5b:3a:cd:10:00:8f:d2:d1:2e:9e:
                    af:4a:7d:13:03:6f:4b:93:13:56:5c:de:6e:04:0b:
                    b8:a0:f2:f4:6b:7b:16:95:95:ab:72:9c:9e:fd:42:
                    00:1e:ba:19:ac:0b:59:42:60:e9:6e:03:5c:05:e7:
                    39:38:34:0c:54:86:0c:f1:16:40:13:c5:30:54:7b:
                    c4:84:e2:e4:18:49:94:b6:0c:39:08:23:53:2e:fc:
                    fc:3d:94:21:34:a4:cc:f0:a5:88:59:b2:e3:67:c3:
                    ef:cd:c2:3c:4f:53:16:f4:35:fe:4f:89:1a:31:bb:
                    b4:29:59:74:16:d8:78:de:fa:c0:c7:eb:74:89:47:
                    c9:d4:cd:2d:29:fd:02:64:18:35:44:f8:b4:3e:1b:
                    3d:e9:07:d5:45:93:02:74:43:c1:08:a5:e8:85:0f:
                    d1:80:6c:0d:fa:4d:c4:9b:e9:3d:b4:a1:1c:e6:dd:
                    a5:0e:89:dc:be:c9:55:05:4d:09:81:00:8b:7e:e4:
                    4e:f2:d6:f7:4f:ec:1a:e5:e5:b8:6a:0d:c2:b8:0e:
                    09:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:45:BB:E3:62:8F:1C:C8:48:6D:48:F7:33:5B:FC:7C:14:86:96:61
            X509v3 Authority Key Identifier:
                keyid:33:7F:03:55:B2:97:38:28:83:67:36:A5:98:6B:11:32:2B:9C:53:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/337F0355B2973828836736A5986B11322B9C530B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/337F0355B2973828836736A5986B11322B9C530B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e3132382e3139322e302f31392d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.128.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         63:f7:cf:5f:62:60:9c:4f:a3:e8:41:31:a7:82:75:e7:fd:7e:
         0b:fc:e2:5e:0f:67:3d:4d:04:e7:58:d3:f6:cf:97:01:12:75:
         cc:38:17:15:72:15:1f:96:92:d0:09:5c:26:34:27:51:91:f6:
         dd:e1:f1:e7:c4:8f:ca:5f:89:ee:26:d7:79:8e:e2:38:eb:7b:
         09:5b:13:84:8b:1d:f2:28:6e:8f:95:48:79:37:14:79:33:2b:
         10:60:64:cf:f5:82:d9:4f:04:8d:c7:ac:9f:9c:91:12:fc:85:
         b4:db:3f:9a:33:c1:15:dc:02:e7:41:09:97:1c:38:a8:4b:ab:
         44:84:3f:f6:45:01:3b:40:f1:01:82:68:e6:de:7b:88:c3:41:
         8f:55:45:c5:b0:2b:7b:fb:db:24:ee:19:93:2e:55:9e:dc:12:
         1f:77:81:0c:85:e2:17:cf:22:9e:8c:17:50:88:36:6d:72:cb:
         4e:b7:49:45:36:8c:23:01:83:dc:32:f2:e5:be:fa:e9:08:16:
         bb:6e:92:85:f0:81:51:be:de:ed:1a:9c:8a:fc:5a:1d:1d:bf:
         fb:93:d1:6d:59:79:4a:32:58:31:e0:64:8c:c5:49:a0:33:07:
         8e:bd:c0:ec:b6:04:c2:d3:5f:9d:7b:f4:fb:c8:ce:4e:35:cb:
         18:4c:ec:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org