Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e31392e3131322e302f32302d3332203d3e2031393136.roa
File:                     3230302e31392e3131322e302f32302d3332203d3e2031393136.roa (raw, json)
Hash identifier:          PIUjc+Q9tg2gLgMVir1hat823H21sXrkczhxEDTVsoI=
Subject key identifier:   73:E7:D8:36:8B:91:6C:E3:BE:D0:B3:7E:4A:CE:00:5B:F6:DD:DA:56
Certificate issuer:       /CN=337F0355B2973828836736A5986B11322B9C530B
Certificate serial:       21F613B4CC7C9C10A61C718A1A2F891B12EDC919
Authority key identifier: 33:7F:03:55:B2:97:38:28:83:67:36:A5:98:6B:11:32:2B:9C:53:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/337F0355B2973828836736A5986B11322B9C530B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e31392e3131322e302f32302d3332203d3e2031393136.roa
Signing time:             Tue 06 Feb 2024 15:29:40 +0000
ROA not before:           Tue 06 Feb 2024 15:24:40 +0000
ROA not after:            Tue 04 Feb 2025 15:29:40 +0000
asID:                     1916
IP address blocks:        200.19.112.0/20 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:f6:13:b4:cc:7c:9c:10:a6:1c:71:8a:1a:2f:89:1b:12:ed:c9:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=337F0355B2973828836736A5986B11322B9C530B
        Validity
            Not Before: Feb  6 15:24:40 2024 GMT
            Not After : Feb  4 15:29:40 2025 GMT
        Subject: CN=73E7D8368B916CE3BED0B37E4ACE005BF6DDDA56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:e8:ca:0e:a3:24:a9:48:ac:b0:a7:e9:42:73:
                    79:4b:8d:be:fb:01:ef:dc:3b:52:0c:8f:16:6c:7e:
                    38:50:da:c8:82:bc:33:b4:b8:86:a6:7d:6a:b5:3c:
                    83:6c:f3:36:e0:32:97:fd:30:ed:c6:59:30:81:d3:
                    24:82:fb:72:64:2a:cd:5b:66:cc:6e:74:1f:79:fe:
                    b9:61:a1:c6:7a:e1:31:49:ba:c3:1c:68:fb:5c:6f:
                    3c:a7:f4:77:aa:aa:83:fd:37:93:a8:bd:3f:98:7e:
                    31:65:26:76:81:d3:24:3c:29:51:e9:86:c1:d5:59:
                    2b:de:db:b2:6e:3c:c7:2e:dd:af:44:13:77:a8:4c:
                    d8:fb:50:eb:66:f8:cf:d3:d8:49:91:f3:77:6e:08:
                    a5:53:a0:12:87:63:50:37:eb:a5:a5:d2:d1:34:45:
                    e3:03:b7:fb:04:d1:58:a4:ba:00:35:96:63:a4:b1:
                    94:d4:82:2a:f6:de:21:14:db:c4:0b:5c:b0:c7:0a:
                    16:c6:5e:b6:19:91:55:cd:78:b2:55:65:d5:39:51:
                    5f:88:fb:a1:7b:3c:bd:14:ae:3d:e1:5f:fe:9f:b4:
                    45:d1:bc:ea:23:a3:48:81:a2:9d:e3:1f:c9:da:31:
                    89:49:d5:ae:fe:c1:14:f9:6e:c9:07:53:06:a3:ae:
                    47:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:E7:D8:36:8B:91:6C:E3:BE:D0:B3:7E:4A:CE:00:5B:F6:DD:DA:56
            X509v3 Authority Key Identifier:
                keyid:33:7F:03:55:B2:97:38:28:83:67:36:A5:98:6B:11:32:2B:9C:53:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/337F0355B2973828836736A5986B11322B9C530B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/337F0355B2973828836736A5986B11322B9C530B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e31392e3131322e302f32302d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         87:18:65:0f:34:86:47:5f:a1:f4:7a:60:28:71:5d:ef:2a:d1:
         a8:71:c4:23:ef:1d:75:8b:94:83:b8:6b:30:07:e4:76:60:ad:
         1a:32:db:33:06:83:b8:80:b4:63:bf:39:03:38:e3:20:17:40:
         dc:5e:52:a5:09:70:e3:a0:07:d1:9e:42:cd:71:fe:94:44:c0:
         08:c0:9b:f8:62:31:6b:00:3e:27:88:f4:b0:42:51:a7:bf:b7:
         3e:bb:06:1d:da:1e:d1:7e:2f:34:6b:ef:46:a9:62:ce:60:a5:
         b6:b0:44:30:d2:30:1e:15:e6:43:77:b3:ca:5f:7a:1d:a4:42:
         3a:61:6c:c1:35:8f:b4:bf:9f:d9:4a:be:2a:69:5c:2d:91:4d:
         1b:ec:e4:ae:af:dc:90:15:32:9e:37:32:9f:e0:40:91:c4:9e:
         b0:f2:e3:3e:68:37:25:9a:a1:20:f5:e0:c9:2d:94:e8:de:e2:
         92:23:5e:fb:45:f5:e2:8c:15:fd:fa:b0:d8:33:da:97:1b:a7:
         36:f8:58:ea:fa:6e:a5:b4:a1:19:9b:d1:80:11:f6:bb:03:ed:
         bb:59:48:5d:a5:1a:6f:c8:0d:89:9e:07:c6:ee:db:f1:1f:4a:
         3c:c6:69:d5:bc:14:ca:55:17:a6:d4:0d:1c:74:01:6e:83:15:
         53:e7:74:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org