Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e31392e33322e302f32302d3332203d3e2031393136.roa
File:                     3230302e31392e33322e302f32302d3332203d3e2031393136.roa (raw, json)
Hash identifier:          AsXKTdwLdsj7zpdTlRmyn8IUinO+Q8eQbPvTxooiEtc=
Subject key identifier:   08:FD:E3:3F:01:26:5F:78:D3:31:11:ED:15:ED:05:44:CF:CB:88:22
Certificate issuer:       /CN=337F0355B2973828836736A5986B11322B9C530B
Certificate serial:       2F5F098F3951D41146B1285F48E83448469F90C7
Authority key identifier: 33:7F:03:55:B2:97:38:28:83:67:36:A5:98:6B:11:32:2B:9C:53:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/337F0355B2973828836736A5986B11322B9C530B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e31392e33322e302f32302d3332203d3e2031393136.roa
Signing time:             Tue 06 Feb 2024 15:29:40 +0000
ROA not before:           Tue 06 Feb 2024 15:24:40 +0000
ROA not after:            Tue 04 Feb 2025 15:29:40 +0000
asID:                     1916
IP address blocks:        200.19.32.0/20 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:5f:09:8f:39:51:d4:11:46:b1:28:5f:48:e8:34:48:46:9f:90:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=337F0355B2973828836736A5986B11322B9C530B
        Validity
            Not Before: Feb  6 15:24:40 2024 GMT
            Not After : Feb  4 15:29:40 2025 GMT
        Subject: CN=08FDE33F01265F78D33111ED15ED0544CFCB8822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:17:2f:c0:b9:7a:2b:f5:3e:50:6e:27:83:1e:
                    26:90:d8:e3:7f:a2:fb:57:db:7b:e0:b4:36:34:f4:
                    19:08:02:85:bf:b8:dc:f4:ec:c8:ee:cf:6b:cf:63:
                    f8:bc:fe:d7:6f:f0:0e:5d:bf:7f:a6:01:77:b9:30:
                    04:ae:e0:0c:9f:8a:74:25:a8:5e:01:79:e8:9c:e1:
                    04:7f:dd:db:44:32:82:41:f5:27:f5:32:98:c0:b8:
                    d4:65:8d:42:c8:9f:cc:6c:00:58:36:77:1f:30:f7:
                    32:b9:de:8e:e4:9e:92:aa:f6:44:ac:dd:21:5f:b8:
                    f2:4e:e1:f8:b3:fd:b5:4c:44:34:54:5b:a7:e3:9f:
                    e1:0c:54:51:95:8c:58:24:90:db:24:ed:8a:40:66:
                    52:d3:c1:f6:2a:67:a2:f3:35:27:80:06:f7:6c:0e:
                    ed:18:97:15:a8:5d:55:0d:07:5c:ee:a5:6c:43:2a:
                    c1:2f:ef:8b:27:1a:a5:5f:03:ce:b2:51:60:11:fd:
                    7e:d7:9b:c9:7c:0a:c8:5e:ac:a5:27:7a:d7:54:cc:
                    e4:b1:5c:09:b1:46:43:42:28:30:7f:e4:3d:4b:7c:
                    4d:84:56:d7:b4:a0:85:69:b7:62:47:5c:5f:b6:bc:
                    83:46:15:92:6f:ec:77:1b:32:13:66:6a:9b:bd:ae:
                    7b:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:FD:E3:3F:01:26:5F:78:D3:31:11:ED:15:ED:05:44:CF:CB:88:22
            X509v3 Authority Key Identifier:
                keyid:33:7F:03:55:B2:97:38:28:83:67:36:A5:98:6B:11:32:2B:9C:53:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/337F0355B2973828836736A5986B11322B9C530B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/337F0355B2973828836736A5986B11322B9C530B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2H2am4H3TaGDpiTdwih6Jyw7HfpgUpMizL8i9MxVMUud/1/3230302e31392e33322e302f32302d3332203d3e2031393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4d:76:dc:b6:46:19:87:fd:bc:1b:dd:bf:34:ad:48:1b:fa:0e:
         c4:c5:09:30:91:50:c3:96:39:ce:37:04:ca:35:44:11:87:be:
         bc:06:70:37:aa:6e:59:4c:2f:25:33:1d:9a:d5:b7:1d:d1:c4:
         dd:15:ea:1d:ab:0c:a7:64:de:5e:8e:1f:88:fd:b7:6f:06:26:
         12:ae:11:7d:13:20:2c:bf:fb:98:4b:7e:75:e4:c1:92:c1:dd:
         4f:fb:a0:52:57:ca:3f:43:55:4c:40:57:29:a3:a8:2d:5a:4a:
         0c:ba:b6:75:57:01:9a:b9:cf:b0:04:9d:95:ed:9d:a4:cd:68:
         d2:b2:f0:ef:da:7c:2d:db:b7:8d:a4:de:46:fb:37:4a:e5:17:
         89:0b:39:ef:44:56:1c:f4:56:fd:2d:ed:b6:8d:75:7c:28:5f:
         47:6a:06:c0:34:d7:af:0d:b3:f0:00:98:3f:3d:f8:07:1b:6a:
         d7:90:39:35:6a:17:c9:83:a0:1e:e8:e3:58:10:6c:fc:e2:e5:
         9c:7f:15:b3:bf:0f:fd:bf:f9:64:ee:c6:a3:c5:30:26:89:7f:
         51:65:d0:72:bd:5a:32:a3:01:7c:21:bd:33:b3:7d:b4:02:92:
         08:c7:14:d0:56:c6:5c:84:55:73:0e:71:a8:5f:47:f0:1b:b8:
         19:18:d0:9d
-----BEGIN CERTIFICATE-----
MIIFQTCCBCmgAwIBAgIUL18JjzlR1BFGsShfSOg0SEafkMcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzM3RjAzNTVCMjk3MzgyODgzNjczNkE1OTg2QjExMzIy
QjlDNTMwQjAeFw0yNDAyMDYxNTI0NDBaFw0yNTAyMDQxNTI5NDBaMDMxMTAvBgNV
BAMTKDA4RkRFMzNGMDEyNjVGNzhEMzMxMTFFRDE1RUQwNTQ0Q0ZDQjg4MjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGFy/AuXor9T5QbieDHiaQ2ON/
ovtX23vgtDY09BkIAoW/uNz07Mjuz2vPY/i8/tdv8A5dv3+mAXe5MASu4AyfinQl
qF4Beeic4QR/3dtEMoJB9Sf1MpjAuNRljULIn8xsAFg2dx8w9zK53o7knpKq9kSs
3SFfuPJO4fiz/bVMRDRUW6fjn+EMVFGVjFgkkNsk7YpAZlLTwfYqZ6LzNSeABvds
Du0YlxWoXVUNB1zupWxDKsEv74snGqVfA86yUWAR/X7Xm8l8CsherKUnetdUzOSx
XAmxRkNCKDB/5D1LfE2EVte0oIVpt2JHXF+2vINGFZJv7HcbMhNmapu9rnunAgMB
AAGjggJLMIICRzAdBgNVHQ4EFgQUCP3jPwEmX3jTMRHtFe0FRM/LiCIwHwYDVR0j
BBgwFoAUM38DVbKXOCiDZzalmGsRMiucUwswDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vMkgyYW00SDNUYUdEcGlUZHdpaDZKeXc3SGZwZ1VwTWl6TDhpOU14Vk1V
dWQvMS8zMzdGMDM1NUIyOTczODI4ODM2NzM2QTU5ODZCMTEzMjJCOUM1MzBCLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wLzMzN0YwMzU1QjI5NzM4Mjg4
MzY3MzZBNTk4NkIxMTMyMkI5QzUzMEIuY2VyMIGoBggrBgEFBQcBCwSBmzCBmDCB
lQYIKwYBBQUHMAuGgYhyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzJIMmFtNEgzVGFHRHBpVGR3aWg2Snl3N0hmcGdVcE1pekw4aTlNeFZNVXVkLzEv
MzIzMDMwMmUzMTM5MmUzMzMyMmUzMDJmMzIzMDJkMzMzMjIwM2QzZTIwMzEzOTMx
MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8E
EDAOMAwEAgABMAYDBATIEyAwDQYJKoZIhvcNAQELBQADggEBAE123LZGGYf9vBvd
vzStSBv6DsTFCTCRUMOWOc43BMo1RBGHvrwGcDeqbllMLyUzHZrVtx3RxN0V6h2r
DKdk3l6OH4j9t28GJhKuEX0TICy/+5hLfnXkwZLB3U/7oFJXyj9DVUxAVymjqC1a
Sgy6tnVXAZq5z7AEnZXtnaTNaNKy8O/afC3bt42k3kb7N0rlF4kLOe9EVhz0Vv0t
7baNdXwoX0dqBsA0168Ns/AAmD89+AcbateQOTVqF8mDoB7o41gQbPzi5Zx/FbO/
D/2/+WTuxqPFMCaJf1Fl0HK9WjKjAXwhvTOzfbQCkgjHFNBWxlyEVXMOcahfR/Ab
uBkY0J0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org