Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e3133332e302e302f31372d3332203d3e2031393136.roa
File:                     3230302e3133332e302e302f31372d3332203d3e2031393136.roa (raw, json)
Hash identifier:          +vzpGaVSYRbNyiBwpqD6m8pwCB2HmfSIQymZP1EbUII=
Subject key identifier:   E1:F2:52:39:67:FE:C2:AF:BD:9E:6C:70:EC:11:C3:68:33:6B:8D:AB
Certificate issuer:       /CN=337F0355B2973828836736A5986B11322B9C530B
Certificate serial:       495219811556AE085CD279CE16A77DCFB5F52C1D
Authority key identifier: 33:7F:03:55:B2:97:38:28:83:67:36:A5:98:6B:11:32:2B:9C:53:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/337F0355B2973828836736A5986B11322B9C530B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e3133332e302e302f31372d3332203d3e2031393136.roa
Signing time:             Tue 06 Feb 2024 15:29:40 +0000
ROA not before:           Tue 06 Feb 2024 15:24:40 +0000
ROA not after:            Tue 04 Feb 2025 15:29:40 +0000
asID:                     1916
IP address blocks:        200.133.0.0/17 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:52:19:81:15:56:ae:08:5c:d2:79:ce:16:a7:7d:cf:b5:f5:2c:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=337F0355B2973828836736A5986B11322B9C530B
        Validity
            Not Before: Feb  6 15:24:40 2024 GMT
            Not After : Feb  4 15:29:40 2025 GMT
        Subject: CN=E1F2523967FEC2AFBD9E6C70EC11C368336B8DAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:f1:8a:d1:73:a7:9c:84:4e:7c:e6:65:70:8a:
                    d3:16:09:5f:bc:5e:bf:16:47:f7:87:c6:d3:99:e6:
                    66:36:3c:3a:92:c0:1d:8d:39:6b:7d:f9:e5:ba:c2:
                    56:73:72:b1:7c:bc:ef:3f:5d:06:80:51:d4:2b:c9:
                    bf:26:a4:83:b8:ab:f3:c1:18:9f:28:bc:a9:74:ec:
                    c6:30:1c:3d:9f:41:5e:b7:b3:59:14:63:57:2c:fa:
                    c7:26:6e:5d:54:c9:bc:ff:e3:5f:dc:b7:79:8c:f6:
                    ba:c5:4d:fd:1a:6c:4b:d1:2f:1f:db:84:01:a6:63:
                    3e:4e:b3:9f:ae:1b:28:e7:b7:9e:77:51:03:c5:7b:
                    a1:72:e1:94:fb:a2:e4:90:38:58:12:5f:7d:ff:86:
                    f2:8d:2f:f0:8b:2b:cc:a1:4b:a5:38:ba:7e:f4:8b:
                    fb:db:06:1d:cc:82:e0:0e:db:25:35:6e:a7:c3:b3:
                    cc:10:04:4f:77:70:a4:9b:58:5a:99:3c:b4:0a:f9:
                    51:a2:7f:a3:3c:a1:31:f0:fc:2d:3f:57:09:7f:7c:
                    8e:41:da:05:77:79:5a:1a:1d:b9:32:a3:40:07:54:
                    98:79:e2:f3:07:a5:db:be:b7:35:e3:c8:b8:9c:9d:
                    c4:2e:60:ff:3f:a8:e0:74:9a:8b:15:bc:9a:2f:dc:
                    20:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:F2:52:39:67:FE:C2:AF:BD:9E:6C:70:EC:11:C3:68:33:6B:8D:AB
            X509v3 Authority Key Identifier:
                keyid:33:7F:03:55:B2:97:38:28:83:67:36:A5:98:6B:11:32:2B:9C:53:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/337F0355B2973828836736A5986B11322B9C530B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/337F0355B2973828836736A5986B11322B9C530B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e3133332e302e302f31372d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.133.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         0e:e2:4b:9a:d5:be:9e:d8:8f:ce:54:5c:c9:dc:7f:bf:b6:73:
         b7:56:51:3e:ed:ab:a2:34:c5:dd:d6:81:67:45:4a:52:b7:91:
         cd:6f:c5:b5:29:d4:9b:e0:9c:0b:5f:df:35:0f:47:bc:cc:94:
         05:af:3b:aa:c9:05:b1:59:0e:44:41:da:81:17:64:2a:39:51:
         99:50:d6:49:13:dd:db:d0:26:1c:43:02:dd:7f:85:62:83:e4:
         ca:e8:4c:65:88:80:f9:7a:60:bf:b2:4c:27:59:79:77:f4:70:
         3c:02:73:f8:57:26:dd:d7:bd:ab:68:69:17:47:a6:2f:99:ef:
         b9:fb:a2:c4:16:76:68:f5:45:17:a7:a2:49:77:e3:5f:54:65:
         f5:2c:3c:47:a3:d1:e7:d4:0c:80:9b:d9:e6:f8:6a:0b:44:f6:
         be:2e:31:b0:4d:5b:05:86:3d:1b:96:db:43:7c:a2:34:02:8c:
         74:34:07:2f:74:1b:e1:b9:60:de:b8:6a:eb:e6:31:17:e4:a3:
         5e:20:8a:9b:72:48:71:39:f1:3b:93:c8:06:95:8c:37:2a:ba:
         a3:9b:d1:b3:27:4d:cb:4c:b9:75:35:fb:80:66:c0:57:1d:50:
         73:9c:e0:7b:f3:01:a8:9d:0f:0f:09:f7:12:0a:22:26:36:00:
         5d:8e:a9:cb
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUSVIZgRVWrghc0nnOFqd9z7X1LB0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzM3RjAzNTVCMjk3MzgyODgzNjczNkE1OTg2QjExMzIy
QjlDNTMwQjAeFw0yNDAyMDYxNTI0NDBaFw0yNTAyMDQxNTI5NDBaMDMxMTAvBgNV
BAMTKEUxRjI1MjM5NjdGRUMyQUZCRDlFNkM3MEVDMTFDMzY4MzM2QjhEQUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr8YrRc6echE585mVwitMWCV+8
Xr8WR/eHxtOZ5mY2PDqSwB2NOWt9+eW6wlZzcrF8vO8/XQaAUdQryb8mpIO4q/PB
GJ8ovKl07MYwHD2fQV63s1kUY1cs+scmbl1Uybz/41/ct3mM9rrFTf0abEvRLx/b
hAGmYz5Os5+uGyjnt553UQPFe6Fy4ZT7ouSQOFgSX33/hvKNL/CLK8yhS6U4un70
i/vbBh3MguAO2yU1bqfDs8wQBE93cKSbWFqZPLQK+VGif6M8oTHw/C0/Vwl/fI5B
2gV3eVoaHbkyo0AHVJh54vMHpdu+tzXjyLicncQuYP8/qOB0mosVvJov3CAVAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQU4fJSOWf+wq+9nmxw7BHDaDNrjaswHwYDVR0j
BBgwFoAUM38DVbKXOCiDZzalmGsRMiucUwswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkgyYW00SDNUYUdEcGlUZHdpaDZKeXc3SGZwZ1VwTWl6TDhpOU14Vk1V
dWQvMS8zMzdGMDM1NUIyOTczODI4ODM2NzM2QTU5ODZCMTEzMjJCOUM1MzBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMzN0YwMzU1QjI5NzM4Mjg4
MzY3MzZBNTk4NkIxMTMyMkI5QzUzMEIuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJIMmFtNEgzVGFHRHBpVGR3aWg2Snl3N0hmcGdVcE1pekw4aTlNeFZNVXVkLzEv
MzIzMDMwMmUzMTMzMzMyZTMwMmUzMDJmMzEzNzJkMzMzMjIwM2QzZTIwMzEzOTMx
MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBAfIhQAwDQYJKoZIhvcNAQELBQADggEBAA7iS5rVvp7Yj85U
XMncf7+2c7dWUT7tq6I0xd3WgWdFSlK3kc1vxbUp1JvgnAtf3zUPR7zMlAWvO6rJ
BbFZDkRB2oEXZCo5UZlQ1kkT3dvQJhxDAt1/hWKD5MroTGWIgPl6YL+yTCdZeXf0
cDwCc/hXJt3XvatoaRdHpi+Z77n7osQWdmj1RRenokl3419UZfUsPEej0efUDICb
2eb4agtE9r4uMbBNWwWGPRuW20N8ojQCjHQ0By90G+G5YN64auvmMRfko14gipty
SHE58TuTyAaVjDcquqOb0bMnTctMuXU1+4BmwFcdUHOc4HvzAaidDw8J9xIKIiY2
AF2Oqcs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org