Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e31382e32342e302f32312d3332203d3e2031393136.roa
File:                     3230302e31382e32342e302f32312d3332203d3e2031393136.roa (raw, json)
Hash identifier:          pKJ6OsUJ1yDFamFqW0Lqdwe1C9Zd9ptlSa5lsDhJVio=
Subject key identifier:   EF:27:33:7B:3A:06:FC:B8:F7:6C:2D:37:5A:84:01:91:A6:F3:DD:86
Certificate issuer:       /CN=337F0355B2973828836736A5986B11322B9C530B
Certificate serial:       65981CE129030DABCE902A653ED14D9F596E383F
Authority key identifier: 33:7F:03:55:B2:97:38:28:83:67:36:A5:98:6B:11:32:2B:9C:53:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/337F0355B2973828836736A5986B11322B9C530B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e31382e32342e302f32312d3332203d3e2031393136.roa
Signing time:             Tue 06 Feb 2024 15:29:41 +0000
ROA not before:           Tue 06 Feb 2024 15:24:41 +0000
ROA not after:            Tue 04 Feb 2025 15:29:41 +0000
asID:                     1916
IP address blocks:        200.18.24.0/21 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:98:1c:e1:29:03:0d:ab:ce:90:2a:65:3e:d1:4d:9f:59:6e:38:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=337F0355B2973828836736A5986B11322B9C530B
        Validity
            Not Before: Feb  6 15:24:41 2024 GMT
            Not After : Feb  4 15:29:41 2025 GMT
        Subject: CN=EF27337B3A06FCB8F76C2D375A840191A6F3DD86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:b6:2c:62:0d:e7:35:00:8b:e5:2a:1d:5b:77:
                    22:d2:8f:65:ac:61:65:2c:94:ee:0b:9c:1a:ce:91:
                    6a:6e:55:2d:7b:72:0b:c6:b5:06:ab:48:e6:c2:63:
                    50:e8:01:a1:79:41:8b:5a:39:e6:e3:f0:08:c4:3f:
                    ee:4b:68:05:93:1e:ff:18:b0:97:f6:66:df:ec:54:
                    0a:79:2c:72:4c:81:f3:5b:1d:97:29:42:4c:27:42:
                    25:0b:7b:da:91:46:02:60:4f:04:3f:9c:9f:f7:a4:
                    94:26:9a:93:a5:3a:9d:9d:e0:9a:b6:e8:4e:28:e7:
                    2d:43:b0:ed:cd:3d:f7:30:42:6e:a5:5c:dc:e2:7a:
                    f5:35:6e:70:58:d5:fe:f8:49:d2:6a:23:18:6c:59:
                    41:84:42:f8:19:0c:94:31:7c:44:0e:10:69:7d:dd:
                    46:29:00:e1:11:28:9b:74:03:4a:10:49:75:65:48:
                    c4:72:ae:4e:d3:7a:fa:14:56:fb:5a:71:41:de:95:
                    11:90:86:ed:b0:3a:78:c6:24:de:86:69:9e:2b:82:
                    fa:be:49:4e:c9:b3:65:dd:5e:7c:37:d2:ad:d4:c6:
                    ae:62:15:5a:56:e5:10:69:03:4f:a5:14:4f:c5:6e:
                    61:d5:81:28:c6:b6:bb:7a:81:6c:5b:0d:b9:d3:13:
                    c3:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:27:33:7B:3A:06:FC:B8:F7:6C:2D:37:5A:84:01:91:A6:F3:DD:86
            X509v3 Authority Key Identifier:
                keyid:33:7F:03:55:B2:97:38:28:83:67:36:A5:98:6B:11:32:2B:9C:53:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/337F0355B2973828836736A5986B11322B9C530B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/337F0355B2973828836736A5986B11322B9C530B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e31382e32342e302f32312d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.18.24.0/21

    Signature Algorithm: sha256WithRSAEncryption
         03:4b:cf:76:e1:8d:c6:1c:87:07:35:2a:b5:f4:5c:a1:06:a0:
         95:b6:2a:96:61:e2:57:01:a5:2d:98:5f:45:70:36:d9:8d:c6:
         4f:43:c1:21:c2:5b:a5:0e:1f:a6:c0:1d:23:c2:53:51:58:00:
         e6:2f:52:cb:93:16:a5:43:dc:b3:3e:96:16:9f:e4:fe:6f:ae:
         c9:4a:1e:5f:b0:27:9d:a1:59:2f:15:8c:5b:a2:4a:27:02:18:
         44:dc:b0:92:05:5e:a2:82:32:ee:a9:da:43:53:47:ca:16:2a:
         43:79:6c:2b:d3:ad:7c:b8:3a:f0:fe:3e:55:6d:83:1a:53:d3:
         7c:f7:a7:ef:20:88:0e:0f:d6:8b:68:58:c3:7f:ce:25:4c:92:
         e8:92:82:64:56:25:ed:3c:8c:db:af:28:c2:35:ea:f7:a0:bb:
         56:5b:fa:17:69:88:8f:c7:89:fc:59:b3:46:d3:8b:0c:5f:4f:
         c3:b1:2e:a7:c1:6d:b3:79:37:32:5c:0e:01:8b:ce:87:75:f9:
         b6:2a:c6:9f:e0:00:24:42:7a:b3:09:d7:d4:b8:30:75:33:d0:
         27:2a:71:90:0d:68:f0:37:dc:e6:fe:6c:20:db:cd:b2:36:61:
         1f:b2:03:29:5e:96:8f:85:ef:ad:6b:9a:5b:83:ae:6a:08:52:
         ca:34:61:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org