Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e3132382e3132382e302f31382d3332203d3e2031393136.roa
File:                     3230302e3132382e3132382e302f31382d3332203d3e2031393136.roa (raw, json)
Hash identifier:          V4vejX0Yp4X121fFn2s4zupgsh+rUfsQpC+muhhRRUg=
Subject key identifier:   B7:05:34:96:ED:9B:EB:FA:58:B7:F9:8B:13:C7:AB:C0:E1:F3:29:50
Certificate issuer:       /CN=337F0355B2973828836736A5986B11322B9C530B
Certificate serial:       0ACC9439F27BC7B674FAE71AF941526DC93B8FEB
Authority key identifier: 33:7F:03:55:B2:97:38:28:83:67:36:A5:98:6B:11:32:2B:9C:53:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/337F0355B2973828836736A5986B11322B9C530B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e3132382e3132382e302f31382d3332203d3e2031393136.roa
Signing time:             Tue 06 Feb 2024 15:29:42 +0000
ROA not before:           Tue 06 Feb 2024 15:24:42 +0000
ROA not after:            Tue 04 Feb 2025 15:29:42 +0000
asID:                     1916
IP address blocks:        200.128.128.0/18 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:cc:94:39:f2:7b:c7:b6:74:fa:e7:1a:f9:41:52:6d:c9:3b:8f:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=337F0355B2973828836736A5986B11322B9C530B
        Validity
            Not Before: Feb  6 15:24:42 2024 GMT
            Not After : Feb  4 15:29:42 2025 GMT
        Subject: CN=B7053496ED9BEBFA58B7F98B13C7ABC0E1F32950
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d0:ee:17:31:6f:67:d0:ff:02:b9:0a:8d:bc:
                    70:68:70:34:a0:d6:cf:b3:62:0b:e7:5e:ee:bd:5a:
                    76:20:07:37:21:83:29:6c:3a:2c:c3:4e:ae:d7:09:
                    54:dc:46:87:b4:81:12:f8:b3:8f:66:55:37:33:e2:
                    54:a0:87:61:f0:24:05:87:cb:2b:4e:ff:9d:84:99:
                    57:32:ac:78:6d:f3:5e:dd:e2:5d:4b:7b:14:58:7b:
                    14:bd:cd:e5:46:40:34:d5:ed:0b:64:18:ac:91:9f:
                    1a:f8:ca:e0:f2:f8:21:b0:a9:29:0d:17:a6:6a:8c:
                    2d:a9:c8:a5:e3:e3:e4:a1:65:37:45:55:14:e6:68:
                    0d:bb:4f:16:7c:5e:0e:f2:a5:be:b7:31:a7:92:6f:
                    f5:2a:6e:cf:fb:9a:17:68:61:de:d6:84:0d:22:e8:
                    7a:90:6e:10:e0:90:f6:8a:27:f3:f8:0b:a6:b1:e6:
                    44:85:c6:80:23:cb:69:ca:5a:1e:4a:76:a0:bc:7c:
                    86:65:94:2c:5d:25:e2:79:9e:cb:12:74:f4:bc:af:
                    78:94:77:bf:34:c6:3f:30:94:a0:43:a4:9a:e6:ba:
                    74:63:7f:9b:25:0e:1b:8d:fa:c2:c4:08:72:2d:e3:
                    de:38:f6:75:0a:ab:7e:68:72:88:75:b1:2a:ff:d3:
                    cc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:05:34:96:ED:9B:EB:FA:58:B7:F9:8B:13:C7:AB:C0:E1:F3:29:50
            X509v3 Authority Key Identifier:
                keyid:33:7F:03:55:B2:97:38:28:83:67:36:A5:98:6B:11:32:2B:9C:53:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/337F0355B2973828836736A5986B11322B9C530B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/337F0355B2973828836736A5986B11322B9C530B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e3132382e3132382e302f31382d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.128.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         67:de:3e:30:96:48:8b:d1:62:44:e1:21:a4:10:8b:40:dd:50:
         86:43:dc:e7:b2:e5:e0:ae:d2:74:9a:97:89:64:e5:c2:98:1d:
         93:e1:c2:74:89:f5:cb:e7:4c:4f:86:c1:1e:f5:86:74:f2:0c:
         7c:24:3a:2b:eb:b7:25:0a:ae:2e:50:a3:b4:88:5d:94:ab:24:
         8b:72:a7:25:7f:7e:41:d4:0d:f2:d4:ec:7e:fe:6e:0d:9b:be:
         ae:99:a4:b9:86:e4:10:29:c0:37:55:36:2c:a3:ca:99:d7:2c:
         d5:b3:a1:cb:c3:de:9d:04:56:36:d7:3b:69:ee:50:c8:c9:7d:
         c8:53:e1:91:fb:ca:f1:8b:be:9b:70:ab:41:3f:fd:44:9f:ad:
         a0:79:93:8e:02:33:fe:4a:9b:a7:3b:40:95:a2:ae:a1:09:bb:
         8e:c8:de:a2:98:be:fb:4f:eb:86:72:57:46:b9:a8:05:f1:11:
         8b:98:b5:b0:ca:96:57:d7:27:03:4f:71:e9:51:90:09:af:d2:
         f1:20:ac:2c:50:9a:74:71:13:22:0c:55:c8:0d:de:b0:bf:bd:
         f9:6e:eb:54:ea:2e:52:45:ad:78:e8:4a:7f:12:0b:eb:47:d5:
         d0:28:de:bc:10:95:40:ec:db:66:1d:c9:fc:6a:6c:af:5b:43:
         9e:0c:fb:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org