Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e31372e3137362e302f32302d3332203d3e2031393136.roa
File:                     3230302e31372e3137362e302f32302d3332203d3e2031393136.roa (raw, json)
Hash identifier:          9+1H5D5Q9Q2aj3wZyJV8wyCgXyLpKFA/CLs6hnonoSU=
Subject key identifier:   33:0D:1A:5E:8B:26:25:ED:5A:1E:A9:30:70:62:34:79:0D:D2:6A:4B
Certificate issuer:       /CN=337F0355B2973828836736A5986B11322B9C530B
Certificate serial:       68F297023B269DAAA31317B47FDFB987F0E0ADFC
Authority key identifier: 33:7F:03:55:B2:97:38:28:83:67:36:A5:98:6B:11:32:2B:9C:53:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/337F0355B2973828836736A5986B11322B9C530B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e31372e3137362e302f32302d3332203d3e2031393136.roa
Signing time:             Tue 06 Feb 2024 15:29:43 +0000
ROA not before:           Tue 06 Feb 2024 15:24:43 +0000
ROA not after:            Tue 04 Feb 2025 15:29:43 +0000
asID:                     1916
IP address blocks:        200.17.176.0/20 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:f2:97:02:3b:26:9d:aa:a3:13:17:b4:7f:df:b9:87:f0:e0:ad:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=337F0355B2973828836736A5986B11322B9C530B
        Validity
            Not Before: Feb  6 15:24:43 2024 GMT
            Not After : Feb  4 15:29:43 2025 GMT
        Subject: CN=330D1A5E8B2625ED5A1EA930706234790DD26A4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:91:b5:68:6d:25:7f:19:f9:da:ca:cf:ab:86:
                    f5:d4:7f:93:e1:31:a4:9c:68:f1:e9:2b:a4:66:4b:
                    68:08:c7:00:cd:0e:ff:a7:bf:62:d1:e2:d6:0d:9e:
                    20:85:ad:07:49:12:e1:dc:31:47:4a:76:0a:ba:81:
                    0c:d2:e1:95:69:cd:f9:07:cd:4e:a2:64:ca:db:0a:
                    72:8b:25:c0:ae:4f:b4:44:1c:f8:90:62:61:28:e4:
                    e9:4e:18:69:e7:98:5e:b6:de:5a:b3:ee:ea:37:2a:
                    1c:9d:97:49:a8:85:46:88:b0:22:75:88:39:88:9f:
                    cf:e7:80:49:a8:26:23:63:21:41:01:36:75:0c:f3:
                    5c:de:99:87:6e:4e:b3:a8:68:91:ec:eb:eb:8a:72:
                    b5:b0:69:45:86:2b:21:c2:c7:78:12:53:f4:8e:dc:
                    b8:37:53:5a:e1:23:6e:31:29:86:c3:f5:f2:cd:1c:
                    ee:32:88:6c:18:17:26:a2:63:8a:a2:03:5d:51:f2:
                    c0:09:e2:3a:af:24:48:0b:bc:66:b6:a2:34:dd:57:
                    fa:60:60:b9:8b:25:9a:58:66:99:55:62:f1:da:66:
                    14:35:04:ad:ea:fa:19:fb:bb:6a:62:5f:44:89:b4:
                    7d:05:28:60:10:9a:8e:e8:98:03:20:2f:f7:6d:37:
                    0e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:0D:1A:5E:8B:26:25:ED:5A:1E:A9:30:70:62:34:79:0D:D2:6A:4B
            X509v3 Authority Key Identifier:
                keyid:33:7F:03:55:B2:97:38:28:83:67:36:A5:98:6B:11:32:2B:9C:53:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/337F0355B2973828836736A5986B11322B9C530B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/337F0355B2973828836736A5986B11322B9C530B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e31372e3137362e302f32302d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.17.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5a:20:48:c7:a6:b3:21:19:d7:17:8a:f3:c4:0a:d5:83:ef:15:
         71:ba:fd:c6:8c:21:62:c9:15:79:a7:82:61:82:fa:a2:21:a3:
         5d:a3:e8:69:79:31:51:8a:25:3b:f2:0f:5f:11:12:28:d1:da:
         7d:a4:6e:b3:b5:bc:cf:a9:bc:ad:24:52:6f:3b:bc:9c:30:a3:
         a0:db:74:55:74:7a:ab:b6:a5:34:8a:56:a5:6e:41:43:7c:eb:
         63:ec:5c:9e:b2:da:7f:2d:0b:0e:db:fe:71:3c:b7:01:86:48:
         87:0e:d2:93:b0:3d:99:c6:d8:6a:58:85:1d:3d:db:cd:7d:b1:
         ff:2c:13:03:86:d4:59:72:78:ca:00:e5:f8:61:48:70:35:b5:
         77:6b:bc:c8:a4:f0:bc:79:f1:69:57:54:6a:75:ac:97:2c:66:
         d3:38:2d:fa:38:28:0c:79:d3:78:28:1c:a4:92:3a:a4:a5:27:
         1a:9c:a9:a1:7f:af:b4:f8:74:c2:02:d0:21:96:ea:78:64:92:
         22:ed:68:92:11:52:7c:f1:46:f3:70:65:44:00:3d:87:fa:33:
         09:e2:0a:57:18:e4:a7:c0:85:d3:92:f7:d4:49:ea:78:03:f0:
         b7:78:fc:3f:35:f5:2e:22:85:51:60:f0:58:43:08:76:1c:37:
         09:62:3f:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org