Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e31372e33322e302f31392d3332203d3e2031393136.roa
File:                     3230302e31372e33322e302f31392d3332203d3e2031393136.roa (raw, json)
Hash identifier:          IMg/g6zaVXHB+IgaKKsbzTwuZwoRvb/3aHL73RAoFaA=
Subject key identifier:   C0:4C:D6:3F:33:EB:56:04:EB:83:22:EF:E4:2C:88:AB:CD:5D:7C:EE
Certificate issuer:       /CN=337F0355B2973828836736A5986B11322B9C530B
Certificate serial:       6483A0B9FFACEECCD2823B15F363B5C79E223F28
Authority key identifier: 33:7F:03:55:B2:97:38:28:83:67:36:A5:98:6B:11:32:2B:9C:53:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/337F0355B2973828836736A5986B11322B9C530B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e31372e33322e302f31392d3332203d3e2031393136.roa
Signing time:             Tue 06 Feb 2024 15:29:42 +0000
ROA not before:           Tue 06 Feb 2024 15:24:42 +0000
ROA not after:            Tue 04 Feb 2025 15:29:42 +0000
asID:                     1916
IP address blocks:        200.17.32.0/19 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:83:a0:b9:ff:ac:ee:cc:d2:82:3b:15:f3:63:b5:c7:9e:22:3f:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=337F0355B2973828836736A5986B11322B9C530B
        Validity
            Not Before: Feb  6 15:24:42 2024 GMT
            Not After : Feb  4 15:29:42 2025 GMT
        Subject: CN=C04CD63F33EB5604EB8322EFE42C88ABCD5D7CEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:7f:27:da:6b:b8:3f:e5:c5:7a:ba:20:84:99:
                    33:57:5f:3a:3d:27:ef:e9:71:cd:7c:a5:cf:29:af:
                    2c:b4:06:8f:4c:1e:5b:38:fe:12:7d:a7:30:11:60:
                    86:06:7f:3f:6a:60:93:44:e8:cf:4f:eb:03:f1:46:
                    d8:b0:f9:5b:9c:e0:1f:30:73:f3:f4:0d:23:ec:67:
                    7d:91:9e:2a:3e:74:16:b4:d6:40:7c:10:99:b4:e9:
                    1c:6e:6b:45:56:a5:bb:90:37:87:04:97:7b:d4:44:
                    08:e9:a8:fa:b2:8b:fd:10:20:4f:a4:6e:0b:06:fb:
                    86:48:89:8e:f4:2d:51:d0:b9:33:2f:bf:ab:db:45:
                    8f:97:f4:30:65:94:d9:eb:fd:24:0f:2e:53:b2:44:
                    a9:ff:68:86:9c:65:cd:3a:cc:52:61:60:1a:6a:ed:
                    06:8f:4e:2a:5e:50:fd:d0:8d:92:dd:cd:ac:e8:ed:
                    cc:4c:d0:99:53:09:68:e2:ce:69:8a:aa:59:b5:83:
                    0c:20:8d:44:9e:55:5b:eb:9c:fb:0e:4f:75:50:be:
                    f5:c4:20:c1:d3:0b:60:9e:c0:64:ef:85:c0:6b:d4:
                    df:09:18:b4:14:70:4f:0e:64:d8:f5:87:80:72:c4:
                    86:1e:99:14:40:03:52:23:dd:42:78:a2:c0:c1:2c:
                    dd:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:4C:D6:3F:33:EB:56:04:EB:83:22:EF:E4:2C:88:AB:CD:5D:7C:EE
            X509v3 Authority Key Identifier:
                keyid:33:7F:03:55:B2:97:38:28:83:67:36:A5:98:6B:11:32:2B:9C:53:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/337F0355B2973828836736A5986B11322B9C530B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/337F0355B2973828836736A5986B11322B9C530B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e31372e33322e302f31392d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.17.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5a:e0:e3:5e:9d:d1:2c:c8:c9:9c:c9:9b:d7:55:30:64:0a:70:
         33:71:d3:97:da:74:b0:fb:87:9a:7a:09:12:08:9c:e6:25:aa:
         d9:6f:f6:78:18:91:e4:89:93:20:9b:59:ef:0c:db:b9:38:e9:
         db:a2:ac:a3:9a:10:7e:51:8a:5b:fc:b4:a3:8e:c6:c8:dd:72:
         65:87:f1:ec:24:c1:f0:42:b5:e9:96:01:1e:7a:24:4b:81:af:
         6f:6f:69:ec:60:37:9c:fb:f8:ec:55:1e:2d:a0:27:ca:ca:51:
         16:7f:d0:4e:b3:73:45:b9:e6:b0:67:f4:59:3a:ca:a7:09:f9:
         d5:5f:ae:10:28:e0:ca:12:cd:d5:c8:39:76:9c:8e:66:e5:2f:
         45:71:87:35:50:9d:4f:e6:95:77:cc:f4:49:6c:02:02:ac:94:
         c1:0c:47:9d:89:d0:3e:7e:39:cc:48:9b:f2:94:2a:06:af:14:
         28:14:60:92:7d:c8:e3:51:5a:5b:bc:83:4a:c3:32:77:05:e9:
         4d:36:7d:10:bb:42:77:e1:e3:19:49:45:8e:cb:92:c9:ea:34:
         4a:d4:db:5c:8f:3a:ff:b5:d6:e9:b3:3f:7c:8d:f0:df:58:95:
         3d:39:8a:6f:f7:1f:ac:21:d6:61:fd:c4:56:cc:17:3d:de:d5:
         b9:0b:39:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org