Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e3134332e3139322e302f31382d3332203d3e2031393136.roa
File:                     3230302e3134332e3139322e302f31382d3332203d3e2031393136.roa (raw, json)
Hash identifier:          DM65/ftA9exbetAYyu+u79cagu1F4WfbVKF6u+LdRXU=
Subject key identifier:   B1:BB:F0:1B:4F:0D:B3:B1:35:9D:85:CB:01:87:F5:5F:66:BD:5A:7D
Certificate issuer:       /CN=337F0355B2973828836736A5986B11322B9C530B
Certificate serial:       608BA881945E1E0A31236634249B874A14222077
Authority key identifier: 33:7F:03:55:B2:97:38:28:83:67:36:A5:98:6B:11:32:2B:9C:53:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/337F0355B2973828836736A5986B11322B9C530B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e3134332e3139322e302f31382d3332203d3e2031393136.roa
Signing time:             Tue 06 Feb 2024 15:29:41 +0000
ROA not before:           Tue 06 Feb 2024 15:24:41 +0000
ROA not after:            Tue 04 Feb 2025 15:29:41 +0000
asID:                     1916
IP address blocks:        200.143.192.0/18 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:8b:a8:81:94:5e:1e:0a:31:23:66:34:24:9b:87:4a:14:22:20:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=337F0355B2973828836736A5986B11322B9C530B
        Validity
            Not Before: Feb  6 15:24:41 2024 GMT
            Not After : Feb  4 15:29:41 2025 GMT
        Subject: CN=B1BBF01B4F0DB3B1359D85CB0187F55F66BD5A7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:76:3d:1a:60:e4:72:14:a3:dd:7b:67:ea:a6:
                    e1:16:23:4b:c7:d2:c8:ae:16:df:5d:2f:66:e3:3e:
                    60:34:70:5c:ed:5d:a0:d5:e1:47:1d:e0:49:f8:3e:
                    0c:6c:b6:26:85:51:69:fd:bc:25:af:66:18:c9:7c:
                    69:ed:87:23:5a:df:73:37:a0:d1:f0:a2:d3:90:b5:
                    ec:77:bc:fa:38:41:33:2e:2a:e9:9b:de:bd:e6:0b:
                    83:b5:b5:86:08:88:02:95:6e:b2:eb:24:61:51:d9:
                    3c:d1:1e:f9:c9:b7:be:fd:c5:b5:47:59:6d:b6:cc:
                    32:0f:c8:98:19:26:b7:b2:ab:f0:d2:f6:60:a4:3d:
                    64:e4:7d:c6:a8:0c:78:ca:8a:8e:89:83:a2:32:b1:
                    dd:33:c8:e5:08:52:59:60:da:10:70:20:12:c4:d5:
                    38:54:0d:b0:58:f3:52:2f:33:b2:c6:3a:b8:81:3c:
                    9f:ec:62:46:3e:f3:e2:ef:e6:5d:54:04:e4:a1:83:
                    70:f1:0a:59:65:11:0a:79:42:d2:4c:b0:de:12:4d:
                    d2:ee:41:5d:8b:40:a2:3b:56:aa:7f:ee:82:fc:24:
                    a5:44:3a:ed:5d:6e:6c:22:8b:d6:7f:b0:0f:8d:4d:
                    70:bc:45:da:44:b9:7b:bc:1e:ae:c2:57:4b:99:ee:
                    36:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:BB:F0:1B:4F:0D:B3:B1:35:9D:85:CB:01:87:F5:5F:66:BD:5A:7D
            X509v3 Authority Key Identifier:
                keyid:33:7F:03:55:B2:97:38:28:83:67:36:A5:98:6B:11:32:2B:9C:53:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/337F0355B2973828836736A5986B11322B9C530B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/337F0355B2973828836736A5986B11322B9C530B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e3134332e3139322e302f31382d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.143.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         c1:5b:bf:fd:cf:b0:6c:7b:a5:e0:44:e3:54:8d:52:be:ef:56:
         24:3f:a4:a4:36:cf:e7:b7:1a:1d:4d:de:63:07:4a:7f:ac:18:
         5d:2a:80:17:16:c4:d3:06:36:7e:c0:f2:48:b3:91:ac:55:24:
         85:ae:0e:6e:4f:f0:56:60:76:1b:ad:84:d6:67:fc:32:33:d3:
         06:3c:54:82:b1:d0:2e:1c:71:00:3f:1e:d9:f6:90:dc:d9:a7:
         cc:09:32:73:88:30:e7:ef:0b:e7:5d:c3:5a:1e:f1:a8:48:f1:
         70:c9:03:98:f1:4d:df:34:38:d1:43:75:55:4c:a8:3b:e4:e3:
         79:d9:c8:10:0d:5a:4a:c0:bd:5f:ca:d6:79:95:cf:67:89:81:
         21:9e:03:a8:e8:5a:fd:91:07:06:4d:01:fe:c4:c4:f7:67:a2:
         ba:02:6a:24:28:2b:ea:70:50:ec:b4:29:57:32:c5:ab:24:68:
         7c:c5:27:34:16:67:05:6c:96:cf:7b:3c:e0:56:c3:a6:76:45:
         18:68:80:82:08:12:42:13:19:cd:1e:59:d0:af:b1:e0:9e:2e:
         86:5e:8a:95:f9:1c:2c:61:fd:4e:f3:f7:00:94:aa:43:e9:cc:
         26:7e:ef:68:40:96:eb:2f:7b:83:ba:1a:3d:63:d4:d0:07:38:
         ef:e8:fd:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org