Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e3233392e3132382e302f31382d3332203d3e2031393136.roa
File:                     3230302e3233392e3132382e302f31382d3332203d3e2031393136.roa (raw, json)
Hash identifier:          0/kMo4COHmf0ZpmylzMyo7HjYMwfC06dcvtyfL3ATms=
Subject key identifier:   9C:57:41:7A:4D:F4:74:0B:FC:8B:FD:1F:A1:08:7C:76:50:03:65:98
Certificate issuer:       /CN=337F0355B2973828836736A5986B11322B9C530B
Certificate serial:       0732D8ECB1C2D23D608C6FA1A6CA78250EE19D37
Authority key identifier: 33:7F:03:55:B2:97:38:28:83:67:36:A5:98:6B:11:32:2B:9C:53:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/337F0355B2973828836736A5986B11322B9C530B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e3233392e3132382e302f31382d3332203d3e2031393136.roa
Signing time:             Tue 06 Feb 2024 15:29:41 +0000
ROA not before:           Tue 06 Feb 2024 15:24:41 +0000
ROA not after:            Tue 04 Feb 2025 15:29:41 +0000
asID:                     1916
IP address blocks:        200.239.128.0/18 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:32:d8:ec:b1:c2:d2:3d:60:8c:6f:a1:a6:ca:78:25:0e:e1:9d:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=337F0355B2973828836736A5986B11322B9C530B
        Validity
            Not Before: Feb  6 15:24:41 2024 GMT
            Not After : Feb  4 15:29:41 2025 GMT
        Subject: CN=9C57417A4DF4740BFC8BFD1FA1087C7650036598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7c:b9:cc:8b:48:9e:38:c3:53:5e:23:70:ac:
                    4a:f9:54:6e:1c:b5:8d:3e:f0:b3:a5:e5:d1:97:9e:
                    45:ef:ec:b6:29:32:6f:6e:23:6d:3c:34:51:93:9c:
                    70:a0:22:1f:93:6c:1d:95:20:c7:b5:3c:26:7c:bb:
                    e7:7c:e8:8b:0a:4b:fc:57:74:24:77:9b:ca:b3:c3:
                    d1:c2:03:47:cd:e1:b1:07:eb:66:ab:20:8d:53:f1:
                    f9:4f:85:21:6a:04:9b:f0:ba:0e:10:76:33:1a:40:
                    cd:bc:a1:7b:46:5c:a6:8e:fd:8a:79:41:6b:24:5a:
                    eb:95:fe:a7:89:78:11:73:86:a2:87:88:6a:d8:51:
                    be:fd:b3:53:3e:5f:9d:fb:50:48:25:ba:99:86:ee:
                    e0:64:26:b7:4b:7f:41:23:b6:de:2c:7f:51:93:b2:
                    94:61:c0:4f:c0:c0:d8:91:57:e6:9a:1d:0f:b7:74:
                    cc:de:4e:63:b4:19:a8:33:7e:4f:7a:49:8a:14:e8:
                    f0:7c:0d:de:c1:27:4d:6d:fc:b9:01:e4:26:bd:dd:
                    bf:a0:c2:bd:9a:da:0c:9e:b1:7d:09:22:58:32:4f:
                    4a:5a:87:ec:f4:0c:22:89:af:ce:21:7f:d2:78:a7:
                    52:85:f7:67:36:cb:e1:04:62:e9:bf:c5:e2:08:c5:
                    d5:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:57:41:7A:4D:F4:74:0B:FC:8B:FD:1F:A1:08:7C:76:50:03:65:98
            X509v3 Authority Key Identifier:
                keyid:33:7F:03:55:B2:97:38:28:83:67:36:A5:98:6B:11:32:2B:9C:53:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/337F0355B2973828836736A5986B11322B9C530B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/337F0355B2973828836736A5986B11322B9C530B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e3233392e3132382e302f31382d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.239.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         20:9b:b0:ec:f9:8d:b3:cc:91:8c:c0:6c:ed:d6:d9:02:64:98:
         a1:01:63:7b:eb:cf:37:12:36:af:b1:44:88:3b:d2:34:a5:67:
         19:b0:03:24:82:03:9a:e6:f0:5b:02:70:96:59:d9:2e:23:6a:
         61:cc:74:eb:51:7d:c1:77:78:bd:5a:16:32:d1:d3:12:27:37:
         1b:5d:15:28:49:6f:f1:9c:9a:75:d8:72:c8:16:eb:8b:0a:01:
         89:7e:8e:d9:b1:80:fd:f0:c4:76:d7:9e:16:24:5c:50:0d:41:
         1e:94:e1:4c:e9:c8:10:5c:d5:7e:84:35:0b:36:94:94:89:7e:
         1c:84:2c:7a:69:cc:20:db:9f:6e:5a:c9:50:61:00:3a:2b:79:
         a3:0b:3c:b0:ab:87:d4:bc:78:8b:fa:28:3a:5b:c2:36:23:bf:
         12:e6:48:4b:bf:6d:df:4a:d7:1e:4b:c5:18:03:7b:28:49:8c:
         0c:26:ba:f5:85:f7:90:94:18:18:c9:82:73:72:eb:12:5a:bb:
         1c:39:96:7e:9e:9a:01:13:93:06:37:80:a0:a7:77:2d:84:08:
         99:df:c9:54:ac:43:27:84:24:f8:fb:47:b4:6d:78:c3:39:dd:
         c6:f1:62:a4:2e:37:8c:04:73:ae:a0:dc:55:0c:3a:cd:44:e0:
         d8:c8:32:e2
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUBzLY7LHC0j1gjG+hpsp4JQ7hnTcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzM3RjAzNTVCMjk3MzgyODgzNjczNkE1OTg2QjExMzIy
QjlDNTMwQjAeFw0yNDAyMDYxNTI0NDFaFw0yNTAyMDQxNTI5NDFaMDMxMTAvBgNV
BAMTKDlDNTc0MTdBNERGNDc0MEJGQzhCRkQxRkExMDg3Qzc2NTAwMzY1OTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLfLnMi0ieOMNTXiNwrEr5VG4c
tY0+8LOl5dGXnkXv7LYpMm9uI208NFGTnHCgIh+TbB2VIMe1PCZ8u+d86IsKS/xX
dCR3m8qzw9HCA0fN4bEH62arII1T8flPhSFqBJvwug4QdjMaQM28oXtGXKaO/Yp5
QWskWuuV/qeJeBFzhqKHiGrYUb79s1M+X537UEglupmG7uBkJrdLf0Ejtt4sf1GT
spRhwE/AwNiRV+aaHQ+3dMzeTmO0Gagzfk96SYoU6PB8Dd7BJ01t/LkB5Ca93b+g
wr2a2gyesX0JIlgyT0pah+z0DCKJr84hf9J4p1KF92c2y+EEYum/xeIIxdWJAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUnFdBek30dAv8i/0foQh8dlADZZgwHwYDVR0j
BBgwFoAUM38DVbKXOCiDZzalmGsRMiucUwswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkgyYW00SDNUYUdEcGlUZHdpaDZKeXc3SGZwZ1VwTWl6TDhpOU14Vk1V
dWQvMS8zMzdGMDM1NUIyOTczODI4ODM2NzM2QTU5ODZCMTEzMjJCOUM1MzBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMzN0YwMzU1QjI5NzM4Mjg4
MzY3MzZBNTk4NkIxMTMyMkI5QzUzMEIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJIMmFtNEgzVGFHRHBpVGR3aWg2Snl3N0hmcGdVcE1pekw4aTlNeFZNVXVkLzEv
MzIzMDMwMmUzMjMzMzkyZTMxMzIzODJlMzAyZjMxMzgyZDMzMzIyMDNkM2UyMDMx
MzkzMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQGyO+AMA0GCSqGSIb3DQEBCwUAA4IBAQAgm7Ds+Y2z
zJGMwGzt1tkCZJihAWN76883EjavsUSIO9I0pWcZsAMkggOa5vBbAnCWWdkuI2ph
zHTrUX3Bd3i9WhYy0dMSJzcbXRUoSW/xnJp12HLIFuuLCgGJfo7ZsYD98MR2154W
JFxQDUEelOFM6cgQXNV+hDULNpSUiX4chCx6acwg259uWslQYQA6K3mjCzywq4fU
vHiL+ig6W8I2I78S5khLv23fStceS8UYA3soSYwMJrr1hfeQlBgYyYJzcusSWrsc
OZZ+npoBE5MGN4Cgp3cthAiZ38lUrEMnhCT4+0e0bXjDOd3G8WKkLjeMBHOuoNxV
DDrNRODYyDLi
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org