Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3133382e3132322e37322e302f32332d3233203d3e20323633323633.roa
File:                     3133382e3132322e37322e302f32332d3233203d3e20323633323633.roa (raw, json)
Hash identifier:          ZyU0qy5BRjkudEP8fmsswWktuyxywJPOmVc0ensqFLM=
Subject key identifier:   45:16:24:16:58:6A:70:98:37:C2:9A:B6:62:93:9F:9E:F0:40:B9:62
Certificate issuer:       /CN=FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260
Certificate serial:       7651105570BE9404D6D213F991F2CACDD90D9C71
Authority key identifier: FE:FE:3F:5C:7F:4C:16:1E:B7:F1:3E:0C:B2:4B:88:29:FE:38:12:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3133382e3132322e37322e302f32332d3233203d3e20323633323633.roa
Signing time:             Tue 16 May 2023 12:00:08 +0000
ROA not before:           Tue 16 May 2023 11:55:08 +0000
ROA not after:            Tue 14 May 2024 12:00:08 +0000
asID:                     263263
IP address blocks:        138.122.72.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:51:10:55:70:be:94:04:d6:d2:13:f9:91:f2:ca:cd:d9:0d:9c:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260
        Validity
            Not Before: May 16 11:55:08 2023 GMT
            Not After : May 14 12:00:08 2024 GMT
        Subject: CN=45162416586A709837C29AB662939F9EF040B962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ed:95:d8:93:20:f0:0f:18:ff:96:97:8c:36:
                    9a:45:28:08:b8:3b:7e:8f:f5:0e:06:87:e2:93:de:
                    bf:fc:7c:e4:20:c4:c7:70:6e:93:0e:8a:ec:a6:96:
                    0c:ea:6c:b7:40:55:87:7e:13:66:e9:54:a4:dd:ab:
                    5d:7c:b0:88:5d:6b:48:4b:30:be:60:7c:3f:bb:7d:
                    56:42:85:30:cd:8b:c9:71:3f:ff:e1:b0:5c:f8:82:
                    69:75:b0:ac:75:c5:56:fc:e9:c4:f9:78:8e:4a:00:
                    2d:7e:c8:f9:69:7b:4a:1e:67:4b:56:a4:e3:3d:06:
                    d0:f5:3d:e6:44:d7:4d:e9:cb:0b:c5:8f:b8:54:69:
                    68:3a:bc:af:da:1f:57:86:cf:d5:b0:5c:c0:cc:94:
                    d5:02:0f:b3:8e:50:08:c8:fe:ec:33:58:a8:91:3c:
                    63:d1:af:ff:82:c5:29:20:7b:de:4d:01:a0:c5:c3:
                    36:ae:3f:4a:15:55:da:ac:bc:9a:54:06:7f:0c:9c:
                    7d:f9:9a:3f:ec:07:bc:ef:4d:f8:0d:b7:c2:7f:45:
                    16:98:8f:ab:59:4d:24:6b:6b:48:60:02:f9:ff:d7:
                    72:09:5a:62:c2:00:df:5b:2e:4a:73:31:93:3c:91:
                    4e:0a:a3:48:38:72:55:7e:e6:88:15:b3:2c:00:1b:
                    c4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:16:24:16:58:6A:70:98:37:C2:9A:B6:62:93:9F:9E:F0:40:B9:62
            X509v3 Authority Key Identifier:
                keyid:FE:FE:3F:5C:7F:4C:16:1E:B7:F1:3E:0C:B2:4B:88:29:FE:38:12:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3133382e3132322e37322e302f32332d3233203d3e20323633323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:e7:f3:66:0e:da:70:16:0a:bf:a5:b1:de:c5:37:3e:4b:0f:
         a1:2b:28:d4:b2:7e:39:96:63:4e:35:e5:b0:54:30:34:02:ba:
         c7:21:06:f3:ef:ff:87:fb:25:2c:71:ab:3d:4e:56:28:e3:cc:
         5c:fc:b4:e4:0c:0a:ea:b4:05:7c:41:b4:53:dc:50:b3:93:a0:
         dd:87:b9:11:dc:47:03:9e:e6:73:3c:0f:a7:f2:46:4e:fb:f3:
         87:f5:8e:77:a9:a8:39:34:33:e5:ba:76:9d:62:a5:3b:28:e0:
         7c:d9:57:aa:57:e5:1b:60:27:76:20:51:ca:df:07:8b:29:18:
         cc:1f:81:e3:96:7e:69:ed:5e:47:e1:b9:93:ef:7b:3c:0d:b2:
         2a:33:ca:6e:2e:40:e8:ef:d6:cf:97:49:45:e4:13:38:d9:69:
         05:6c:00:c6:dd:3e:4f:a0:e8:a8:6a:c6:af:0f:5c:cc:c4:73:
         86:50:8e:80:35:90:0e:13:35:bf:3b:d8:e8:a1:7b:32:d5:e6:
         36:33:06:6e:3c:7d:01:10:f1:8a:4a:19:04:ca:e2:c3:71:bc:
         c2:b9:65:77:9c:76:16:68:49:87:05:28:8f:f2:81:88:66:5a:
         90:f2:3e:da:41:62:ad:b3:d6:d7:58:27:05:de:ce:b8:de:08:
         3f:c7:80:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:58 2024 by rpki-client on console-ams.rpki-client.org