Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e31382e32302e302f32322d3332203d3e2031393136.roa
File:                     3230302e31382e32302e302f32322d3332203d3e2031393136.roa (raw, json)
Hash identifier:          uHlvG+zPWBJPQUc2kdRby+FX3ad40y21I8wf7MLBfSY=
Subject key identifier:   22:77:BA:76:79:A0:A3:92:9F:85:57:CD:F9:79:DE:BE:7F:EE:4A:6F
Certificate issuer:       /CN=337F0355B2973828836736A5986B11322B9C530B
Certificate serial:       548759E3A797BD19ABE3DE832ED8C4EEBCAA09AB
Authority key identifier: 33:7F:03:55:B2:97:38:28:83:67:36:A5:98:6B:11:32:2B:9C:53:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/337F0355B2973828836736A5986B11322B9C530B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e31382e32302e302f32322d3332203d3e2031393136.roa
Signing time:             Tue 06 Feb 2024 15:29:41 +0000
ROA not before:           Tue 06 Feb 2024 15:24:41 +0000
ROA not after:            Tue 04 Feb 2025 15:29:41 +0000
asID:                     1916
IP address blocks:        200.18.20.0/22 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:87:59:e3:a7:97:bd:19:ab:e3:de:83:2e:d8:c4:ee:bc:aa:09:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=337F0355B2973828836736A5986B11322B9C530B
        Validity
            Not Before: Feb  6 15:24:41 2024 GMT
            Not After : Feb  4 15:29:41 2025 GMT
        Subject: CN=2277BA7679A0A3929F8557CDF979DEBE7FEE4A6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:24:1b:a6:4a:6d:e1:66:a7:44:63:eb:2a:0e:
                    aa:0c:4c:7b:41:8b:1c:f8:11:6f:62:59:f1:f7:23:
                    43:4e:f8:81:47:0c:1c:97:ca:15:0a:72:a7:46:1f:
                    8e:5d:00:33:7f:45:bd:fe:23:be:8d:3e:e0:22:65:
                    0c:4d:d0:35:0d:b8:d3:e3:af:03:3f:3f:ce:f0:e2:
                    d5:3d:4b:bd:b3:37:f5:4a:e6:50:f5:10:d9:e8:8c:
                    1d:3b:78:86:17:1c:e4:eb:84:d9:14:08:05:dc:3b:
                    98:ed:80:31:b0:41:3c:e4:4a:fc:bd:b3:41:cb:a1:
                    97:41:17:87:05:12:25:c5:c6:88:b4:f8:33:2f:3d:
                    3f:63:c2:ac:02:ce:08:6b:7c:d8:c6:33:6f:3f:4f:
                    dd:b2:41:e6:a0:b5:4d:db:aa:3e:91:8d:7a:cf:37:
                    45:f0:a7:80:96:69:0f:d2:47:8f:84:6a:8d:38:42:
                    ee:7c:0f:63:c2:d9:d1:19:22:e9:6f:10:93:4a:45:
                    34:2e:57:c3:c4:1f:c1:9c:2b:9f:d2:a6:59:54:c5:
                    5e:01:a7:78:15:d9:f1:b7:dc:32:9d:23:0f:0e:75:
                    10:08:16:89:94:42:eb:24:08:0c:0b:4c:4b:43:2e:
                    d0:8e:b1:6f:ba:09:af:32:18:09:0d:72:ca:66:1e:
                    7a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:77:BA:76:79:A0:A3:92:9F:85:57:CD:F9:79:DE:BE:7F:EE:4A:6F
            X509v3 Authority Key Identifier:
                keyid:33:7F:03:55:B2:97:38:28:83:67:36:A5:98:6B:11:32:2B:9C:53:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/337F0355B2973828836736A5986B11322B9C530B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/337F0355B2973828836736A5986B11322B9C530B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e31382e32302e302f32322d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.18.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         35:ba:83:d3:5b:c1:2d:b2:22:da:6a:d1:1f:16:9d:f5:a9:01:
         8d:26:00:ef:76:9c:db:af:d0:e2:f8:4e:54:6e:c9:d3:77:62:
         4c:07:d3:a3:d3:09:24:2f:b9:19:45:07:18:6a:3a:44:4f:d0:
         84:d9:72:f3:1c:dc:12:4e:4c:b5:63:cd:15:fb:05:85:c6:57:
         fb:31:f0:a8:68:c2:76:85:6e:7d:d4:b9:9e:ee:f7:0a:5f:4b:
         28:85:c0:f0:82:3a:4b:7f:d3:f6:eb:a8:27:af:0e:87:59:65:
         2e:4a:35:fc:a5:84:0d:0b:43:4b:65:a7:ea:ba:8a:c0:b9:2f:
         10:55:a6:1f:ac:b9:49:6c:5b:d6:d3:51:df:0b:ee:b7:b6:2c:
         7b:dd:a6:59:05:cd:6f:aa:0e:3d:cf:30:9b:00:84:40:5b:ca:
         19:e9:c7:1f:93:fc:e0:19:15:91:a2:14:0e:63:7a:67:4b:32:
         c7:93:ab:9d:1c:c3:83:2e:28:94:38:b8:ab:11:18:fb:07:d1:
         eb:d4:e7:97:46:68:66:41:6e:41:f5:1b:00:ce:74:5a:a5:86:
         73:02:8b:2a:d3:41:bf:a8:1e:1a:47:c0:4a:64:bf:46:d0:95:
         c9:d8:de:d9:e7:56:84:60:cb:3b:50:d9:3c:41:68:71:56:33:
         85:22:2f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org