Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3133382e3132322e37322e302f32322d3232203d3e20323633323633.roa
File:                     3133382e3132322e37322e302f32322d3232203d3e20323633323633.roa (raw, json)
Hash identifier:          nwLTVAFJ+WxaPRLyEMFBXnViVMQ6KyaF/xg1hId8Jlw=
Subject key identifier:   D5:B6:EB:2F:8F:7C:35:5A:BD:80:3B:9F:02:07:92:5D:E0:67:AD:BC
Certificate issuer:       /CN=FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260
Certificate serial:       672A1455A283AE816095D289CD3377DAE6AD66E9
Authority key identifier: FE:FE:3F:5C:7F:4C:16:1E:B7:F1:3E:0C:B2:4B:88:29:FE:38:12:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3133382e3132322e37322e302f32322d3232203d3e20323633323633.roa
Signing time:             Tue 16 May 2023 12:00:05 +0000
ROA not before:           Tue 16 May 2023 11:55:05 +0000
ROA not after:            Tue 14 May 2024 12:00:05 +0000
asID:                     263263
IP address blocks:        138.122.72.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:2a:14:55:a2:83:ae:81:60:95:d2:89:cd:33:77:da:e6:ad:66:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260
        Validity
            Not Before: May 16 11:55:05 2023 GMT
            Not After : May 14 12:00:05 2024 GMT
        Subject: CN=D5B6EB2F8F7C355ABD803B9F0207925DE067ADBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:64:b9:56:d2:a2:c0:df:87:53:04:73:39:24:
                    67:6b:ce:17:52:29:1d:5e:4b:d6:01:a9:31:c0:0d:
                    3c:45:19:f2:9f:5f:87:35:03:0d:6f:02:9b:61:e6:
                    55:86:ab:27:93:37:56:e0:c5:c2:da:58:a5:47:2a:
                    83:6a:ad:82:7e:10:d6:30:1e:2f:bb:59:ee:76:5f:
                    f6:61:56:49:0b:13:0e:a8:fc:9d:00:02:ae:36:4a:
                    a3:9c:b0:36:f6:85:9e:7c:b5:02:18:41:a9:71:a1:
                    38:a0:84:41:8c:47:0d:59:c0:ed:27:6d:0b:70:2b:
                    d4:bf:04:7f:b2:2b:05:3d:fb:61:f4:3a:5d:c0:a6:
                    12:16:49:ce:41:fc:a2:d8:9e:ba:c5:93:d2:39:96:
                    f8:1d:92:ac:b7:22:8a:f9:66:73:d5:c0:fd:69:f6:
                    1a:17:e0:3c:32:d2:13:8a:27:84:68:3e:ca:d7:3c:
                    21:32:36:47:60:c0:41:ee:b7:76:f5:70:36:c6:16:
                    4a:26:e7:32:e1:66:34:51:23:41:d6:04:7f:fe:bf:
                    56:ae:ec:aa:d3:3b:8a:20:e3:9d:ab:de:2a:4c:cb:
                    00:b5:c4:a4:9d:54:ad:d0:d8:b2:f9:f3:50:60:c5:
                    d9:e7:15:f7:d2:23:c8:91:5a:a5:42:5e:23:fb:0d:
                    2c:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:B6:EB:2F:8F:7C:35:5A:BD:80:3B:9F:02:07:92:5D:E0:67:AD:BC
            X509v3 Authority Key Identifier:
                keyid:FE:FE:3F:5C:7F:4C:16:1E:B7:F1:3E:0C:B2:4B:88:29:FE:38:12:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3133382e3132322e37322e302f32322d3232203d3e20323633323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.72.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6a:ef:3c:4c:7b:7c:c6:e1:61:b5:82:a3:b4:dd:2c:c9:b9:1f:
         7e:48:af:f3:ad:07:0c:e5:40:74:d4:76:cb:5d:49:e6:e7:07:
         77:8e:df:39:4c:bd:75:d8:38:01:6c:8e:ac:26:48:f3:55:9a:
         82:95:44:21:35:a0:f6:17:5a:4b:44:44:58:47:a7:8e:e1:7a:
         d0:39:50:c3:ca:40:5b:09:22:eb:72:75:3d:1e:0e:fa:18:1e:
         e8:99:4b:c2:8b:f8:ac:45:54:d8:d9:73:b1:47:1f:01:18:42:
         16:96:08:21:06:94:46:02:a9:78:6d:47:4a:d2:12:97:30:c5:
         e9:e5:6e:a4:46:01:3c:1a:61:c1:c0:72:2e:7f:e0:d2:92:d6:
         bc:2c:6e:fc:f1:75:86:f1:62:7d:aa:a9:6e:94:ec:78:61:7e:
         8f:00:6a:cf:06:f1:f5:71:38:20:79:96:8d:b3:22:35:7b:bb:
         25:8c:18:37:64:60:59:e8:65:cc:04:45:af:ca:9d:4a:c4:9f:
         07:07:b2:8c:74:2f:c5:1d:56:00:90:a8:c0:69:52:dc:59:11:
         26:ae:94:92:7a:af:96:f4:f5:d2:95:0d:ba:2b:5f:76:8b:1e:
         98:2d:28:55:25:1b:0b:72:d7:d0:e6:26:52:80:35:3b:fc:11:
         e7:64:84:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:40 2024 by rpki-client on console-fra.rpki-client.org