Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e3133312e302e302f31362d3332203d3e2031393136.roa
File:                     3230302e3133312e302e302f31362d3332203d3e2031393136.roa (raw, json)
Hash identifier:          UhrHwhSYGu5jtHxQjSMKBS5xwDDXamQnIrQaqNEmxXI=
Subject key identifier:   15:E6:42:D2:C2:45:25:F0:B4:5B:27:38:3E:A9:04:36:7F:E6:B9:70
Certificate issuer:       /CN=337F0355B2973828836736A5986B11322B9C530B
Certificate serial:       56F7BC2A5A5030608EEFA509BDE4AA9412EC847B
Authority key identifier: 33:7F:03:55:B2:97:38:28:83:67:36:A5:98:6B:11:32:2B:9C:53:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/337F0355B2973828836736A5986B11322B9C530B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e3133312e302e302f31362d3332203d3e2031393136.roa
Signing time:             Tue 06 Feb 2024 15:29:42 +0000
ROA not before:           Tue 06 Feb 2024 15:24:42 +0000
ROA not after:            Tue 04 Feb 2025 15:29:42 +0000
asID:                     1916
IP address blocks:        200.131.0.0/16 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:f7:bc:2a:5a:50:30:60:8e:ef:a5:09:bd:e4:aa:94:12:ec:84:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=337F0355B2973828836736A5986B11322B9C530B
        Validity
            Not Before: Feb  6 15:24:42 2024 GMT
            Not After : Feb  4 15:29:42 2025 GMT
        Subject: CN=15E642D2C24525F0B45B27383EA904367FE6B970
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:53:07:06:d9:e7:88:4e:aa:32:23:2d:1d:4e:
                    aa:0d:d7:50:6a:64:5c:e6:54:ed:b1:da:93:96:01:
                    ed:9f:60:0c:4a:6b:c4:01:f8:3b:84:1b:37:eb:b0:
                    c1:45:93:46:3e:2e:21:23:74:66:07:d4:04:24:14:
                    c1:a3:d3:4d:74:e3:ec:c6:81:e4:0f:2c:67:fc:01:
                    f2:c2:a4:04:75:16:82:13:7e:cf:38:a1:aa:b1:d5:
                    07:b7:95:b6:05:e1:b2:a8:25:44:4d:27:dc:87:ec:
                    12:c0:2b:49:ee:18:63:55:f8:e3:90:25:89:6f:d0:
                    4d:5b:df:d0:4e:72:f8:5a:e6:79:b8:ea:f4:2a:72:
                    2d:e7:ed:b4:bd:62:b8:67:a8:33:2a:e8:6e:e4:90:
                    ab:bd:57:08:87:80:20:59:22:25:2e:77:30:f2:7c:
                    a3:31:f0:5c:1f:d4:3f:3b:99:35:e3:6c:79:22:74:
                    15:d8:9a:02:25:6b:0c:63:d0:a9:13:da:55:8a:77:
                    02:d8:96:8e:03:11:55:05:52:c9:62:26:4a:d3:03:
                    5a:bd:f7:72:9a:98:5d:0d:38:b4:25:ca:88:33:ef:
                    af:d4:28:e5:77:ed:94:04:13:86:41:94:af:31:85:
                    61:bc:69:86:26:0f:0d:26:b9:03:00:4d:52:81:a3:
                    ae:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E6:42:D2:C2:45:25:F0:B4:5B:27:38:3E:A9:04:36:7F:E6:B9:70
            X509v3 Authority Key Identifier:
                keyid:33:7F:03:55:B2:97:38:28:83:67:36:A5:98:6B:11:32:2B:9C:53:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/337F0355B2973828836736A5986B11322B9C530B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/337F0355B2973828836736A5986B11322B9C530B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e3133312e302e302f31362d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.131.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5c:ed:c8:77:57:57:92:d6:32:be:6d:43:26:5a:76:3c:57:b5:
         4b:1a:a9:39:9d:b0:c0:67:99:ed:be:5e:7a:8d:3f:e4:f4:d5:
         d6:0d:eb:70:f3:f1:50:46:42:c9:57:0b:cc:cb:6d:c1:40:80:
         dc:e7:cf:d4:21:6c:da:a6:05:d6:84:1c:2b:81:b9:7c:3c:97:
         1c:f5:e5:7a:54:f6:de:1f:02:29:2d:ff:9d:f3:68:d4:76:45:
         fb:7c:fb:74:e2:d6:cf:6b:a3:36:52:5b:7f:0b:8e:fa:4a:2e:
         0f:48:ec:2c:fc:51:06:bc:54:c6:9b:bf:af:ea:c9:f2:ea:03:
         d1:93:bd:5c:cc:75:3f:48:7b:72:6a:c8:09:84:8a:5c:5f:84:
         a9:9e:35:68:b1:3d:2b:c2:4e:b3:4c:02:41:93:a1:56:fc:7c:
         4b:14:cc:07:fa:c5:5b:39:30:f2:fb:18:11:71:3f:17:c9:35:
         82:bb:a3:ec:30:da:90:f1:51:51:d9:dc:3f:c0:45:01:e0:4d:
         99:cd:63:8f:50:99:b4:4a:0a:74:52:62:08:b2:d6:08:c8:bd:
         ba:33:ae:85:f1:ed:70:32:92:29:49:2a:b1:a6:a3:d9:4e:bb:
         bf:dd:d7:c2:9e:8e:89:a8:c5:c6:5d:0d:63:e5:37:fa:00:f9:
         92:3c:dc:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org