Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/323030313a313266303a3a2f33322d3634203d3e2031393136.roa
File:                     323030313a313266303a3a2f33322d3634203d3e2031393136.roa (raw, json)
Hash identifier:          /qIKEB6ZvYI2Ycs0koojBkuN0KiK469wKNX1i1MQl5I=
Subject key identifier:   FD:61:79:97:59:9B:04:B1:A3:64:08:11:A0:02:87:45:6F:93:D6:C5
Certificate issuer:       /CN=337F0355B2973828836736A5986B11322B9C530B
Certificate serial:       31BBB5FE8FC429DF6356406B71D66692D45299E0
Authority key identifier: 33:7F:03:55:B2:97:38:28:83:67:36:A5:98:6B:11:32:2B:9C:53:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/337F0355B2973828836736A5986B11322B9C530B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/323030313a313266303a3a2f33322d3634203d3e2031393136.roa
Signing time:             Tue 06 Feb 2024 15:29:42 +0000
ROA not before:           Tue 06 Feb 2024 15:24:42 +0000
ROA not after:            Tue 04 Feb 2025 15:29:42 +0000
asID:                     1916
IP address blocks:        2001:12f0::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:bb:b5:fe:8f:c4:29:df:63:56:40:6b:71:d6:66:92:d4:52:99:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=337F0355B2973828836736A5986B11322B9C530B
        Validity
            Not Before: Feb  6 15:24:42 2024 GMT
            Not After : Feb  4 15:29:42 2025 GMT
        Subject: CN=FD617997599B04B1A3640811A00287456F93D6C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:16:25:a5:d6:9e:fa:dc:7d:fa:dd:12:e4:b0:
                    73:27:09:48:dc:ad:72:c4:04:e8:1b:43:b9:46:3f:
                    0e:b9:f5:56:09:43:0f:f0:6c:75:2d:e9:19:78:8c:
                    14:b9:34:1f:04:1a:d5:e3:56:38:bf:f2:b8:80:90:
                    78:97:2b:3e:e8:08:fe:ee:82:eb:cf:e0:a1:b1:2c:
                    9e:c5:b8:03:f2:2a:94:10:94:f5:4a:0b:0b:3c:40:
                    64:9f:e2:9c:d0:60:b1:e6:c4:8d:ed:0c:90:ff:88:
                    c5:53:fa:0b:ab:d7:64:99:e4:15:c6:4b:dc:ce:53:
                    70:7f:f4:20:49:ab:f6:9f:2c:98:7a:58:3f:48:1f:
                    ad:76:b9:af:9e:4d:ea:5a:4a:e9:32:de:03:b1:17:
                    66:f8:5c:f4:22:98:30:5e:71:45:f0:92:f2:71:fa:
                    02:10:b6:7f:8d:b6:6b:0d:ab:72:6c:21:eb:13:e2:
                    2c:7c:59:7a:0f:d8:f6:f1:7b:d5:76:89:4d:77:aa:
                    dc:dc:8d:bf:a8:a3:b2:af:12:67:fa:fd:bb:e9:4a:
                    62:8b:4e:8b:aa:e0:d5:fc:e1:b4:e1:f3:a0:b8:5d:
                    ce:a5:08:00:dc:3f:54:48:4f:db:18:33:96:ee:be:
                    02:a9:8a:e3:c7:31:15:0f:aa:53:df:4c:76:93:d4:
                    f3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:61:79:97:59:9B:04:B1:A3:64:08:11:A0:02:87:45:6F:93:D6:C5
            X509v3 Authority Key Identifier:
                keyid:33:7F:03:55:B2:97:38:28:83:67:36:A5:98:6B:11:32:2B:9C:53:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/337F0355B2973828836736A5986B11322B9C530B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/337F0355B2973828836736A5986B11322B9C530B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/323030313a313266303a3a2f33322d3634203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:12f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         c3:1d:e9:e6:fc:c4:ab:8d:7f:78:e3:0c:a7:30:c7:2b:bd:98:
         23:89:7b:16:d4:a3:4a:b5:1e:cf:9f:86:46:24:c9:ce:4f:b8:
         aa:a4:b9:4c:77:62:0f:a6:8d:98:19:61:79:15:9f:4b:e0:47:
         44:78:90:b3:65:50:31:8b:d3:1c:5f:c8:fa:87:73:79:69:f1:
         0b:30:7a:26:f0:26:ec:60:5c:e6:54:e0:24:48:1c:47:77:bd:
         cc:b9:d4:3a:af:55:9d:2b:ef:f1:6f:dc:91:fa:bf:68:35:82:
         22:58:0d:ed:ce:77:09:71:91:03:41:26:c9:a0:e3:0f:4c:75:
         a4:f8:df:37:83:fa:95:cc:ca:31:f5:8c:b6:fc:8f:86:ee:e6:
         3d:f9:68:ed:00:b6:30:49:95:63:13:3f:7a:47:2a:e2:cc:d1:
         27:d9:f2:0b:e1:d2:15:93:bf:c0:86:ed:9e:c5:85:66:b8:2a:
         d4:19:c9:4b:90:d5:f0:60:8a:5d:04:93:1e:29:97:d2:f2:f6:
         63:18:e6:c7:ac:1b:c6:ac:65:35:56:79:cc:c2:90:9d:b4:b7:
         f0:3e:c5:1a:f4:e7:df:70:f7:72:01:aa:c1:da:fe:6b:ea:30:
         bb:77:d2:f0:21:b7:06:b6:c0:88:9d:f2:14:a6:18:23:46:d0:
         d3:93:4e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org