Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e31382e38302e302f32302d3332203d3e2031393136.roa
File:                     3230302e31382e38302e302f32302d3332203d3e2031393136.roa (raw, json)
Hash identifier:          Ob/mSG24PShdGeOR8IUjNiI3pJe1e6yjv5K+ARXzPs8=
Subject key identifier:   50:74:8D:A5:96:BF:CB:4D:DB:53:46:46:6D:5E:A1:E2:A1:1F:6F:C2
Certificate issuer:       /CN=337F0355B2973828836736A5986B11322B9C530B
Certificate serial:       673EBBFBD3DAEFE786E4A101E031AAC5F844A9F4
Authority key identifier: 33:7F:03:55:B2:97:38:28:83:67:36:A5:98:6B:11:32:2B:9C:53:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/337F0355B2973828836736A5986B11322B9C530B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e31382e38302e302f32302d3332203d3e2031393136.roa
Signing time:             Tue 06 Feb 2024 15:29:43 +0000
ROA not before:           Tue 06 Feb 2024 15:24:43 +0000
ROA not after:            Tue 04 Feb 2025 15:29:43 +0000
asID:                     1916
IP address blocks:        200.18.80.0/20 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:3e:bb:fb:d3:da:ef:e7:86:e4:a1:01:e0:31:aa:c5:f8:44:a9:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=337F0355B2973828836736A5986B11322B9C530B
        Validity
            Not Before: Feb  6 15:24:43 2024 GMT
            Not After : Feb  4 15:29:43 2025 GMT
        Subject: CN=50748DA596BFCB4DDB5346466D5EA1E2A11F6FC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2d:5b:bd:1f:aa:86:e1:ac:b4:c4:cc:49:89:
                    38:48:5d:d3:51:ee:a1:e0:ab:79:3d:9e:8f:1c:e0:
                    1b:ed:86:0e:f4:da:73:ae:b9:b5:4e:48:9a:e1:ad:
                    65:be:d6:d2:bb:af:a7:b2:88:09:ba:24:9d:e9:e6:
                    c7:2a:eb:19:2f:e8:0c:ef:03:e2:c8:88:61:27:e2:
                    94:6d:02:1d:0e:2c:f3:78:81:9f:d1:84:4e:39:d9:
                    38:87:ce:4c:5c:6e:7c:33:23:38:c7:8f:9c:5a:e0:
                    a1:fa:a2:2d:6e:90:53:2d:64:04:58:7a:86:d4:99:
                    10:98:52:de:c1:a9:53:7c:d4:67:9e:42:95:02:bc:
                    db:3e:0c:c2:06:e3:15:bc:b2:77:f2:90:f1:52:76:
                    34:b3:6e:c8:17:5f:08:62:3e:d1:4d:2e:ab:1c:8b:
                    9e:d0:8a:db:3f:fb:e6:a2:86:60:45:b6:29:45:fe:
                    92:49:6a:d1:b5:83:0e:52:9a:57:01:55:6d:82:7c:
                    42:03:ba:43:00:09:b1:88:c6:93:b4:64:b4:94:cc:
                    85:be:0c:67:15:9f:e3:cc:6c:c7:24:af:bd:85:e5:
                    81:6e:f2:f2:a8:ae:4a:82:10:99:e8:3e:55:67:9c:
                    ce:9c:43:51:12:bd:c6:6d:7e:c9:77:35:de:ef:34:
                    ae:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:74:8D:A5:96:BF:CB:4D:DB:53:46:46:6D:5E:A1:E2:A1:1F:6F:C2
            X509v3 Authority Key Identifier:
                keyid:33:7F:03:55:B2:97:38:28:83:67:36:A5:98:6B:11:32:2B:9C:53:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/337F0355B2973828836736A5986B11322B9C530B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/337F0355B2973828836736A5986B11322B9C530B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e31382e38302e302f32302d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.18.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5f:90:40:ac:e5:07:d8:45:9c:83:47:c2:e5:0b:f3:f5:d9:5b:
         2d:fa:a1:d8:d3:43:b7:dd:20:23:c0:1e:08:74:5a:5e:f9:16:
         f8:42:3b:2d:12:1b:d1:57:19:93:c7:be:9c:11:a2:53:be:fd:
         b3:63:71:b0:f4:90:52:91:f4:fb:68:26:af:2b:84:fe:93:40:
         28:d3:f5:1d:00:43:c3:d7:e9:fd:2a:72:bd:0d:84:b1:9f:3c:
         39:9c:22:a1:a4:6f:8b:63:7c:85:a1:87:c7:1e:e0:c5:5a:ee:
         f0:b1:cf:47:b3:5d:25:5c:55:5a:4c:46:2c:1e:3a:cf:38:df:
         c8:fc:37:14:55:51:f5:25:7a:b1:36:f7:ee:1c:4a:d7:93:b1:
         de:f6:29:4c:a1:71:ae:54:6a:14:66:35:be:04:09:fe:95:a0:
         f8:f0:f1:29:ae:70:81:9c:c2:d9:c4:8f:da:15:6b:2d:67:2d:
         04:29:da:82:19:35:df:2c:e9:ff:93:85:dc:77:02:06:8d:78:
         c0:70:94:4b:54:c0:24:2d:a0:78:63:bf:59:47:c1:73:d3:91:
         ef:db:d6:23:1d:0d:1c:ba:a1:09:81:84:b0:ff:03:e4:41:23:
         6f:bc:b8:93:25:0e:32:28:25:a1:64:71:43:c6:73:fe:7d:dc:
         c8:8d:47:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org