Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3133382e3132322e37332e302f32342d3234203d3e20323633323633.roa
File:                     3133382e3132322e37332e302f32342d3234203d3e20323633323633.roa (raw, json)
Hash identifier:          3nVji8uoQVaskJ0x+33k23WbM0sE+k5tiim4uJFJOjo=
Subject key identifier:   A7:F3:D1:7C:45:85:64:8C:CD:80:53:0B:E2:CA:53:6D:EA:13:C0:99
Certificate issuer:       /CN=FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260
Certificate serial:       60F10796D2F4B20ECB0547B591768029612E5B80
Authority key identifier: FE:FE:3F:5C:7F:4C:16:1E:B7:F1:3E:0C:B2:4B:88:29:FE:38:12:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3133382e3132322e37332e302f32342d3234203d3e20323633323633.roa
Signing time:             Tue 16 May 2023 12:00:13 +0000
ROA not before:           Tue 16 May 2023 11:55:13 +0000
ROA not after:            Tue 14 May 2024 12:00:13 +0000
asID:                     263263
IP address blocks:        138.122.73.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:f1:07:96:d2:f4:b2:0e:cb:05:47:b5:91:76:80:29:61:2e:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260
        Validity
            Not Before: May 16 11:55:13 2023 GMT
            Not After : May 14 12:00:13 2024 GMT
        Subject: CN=A7F3D17C4585648CCD80530BE2CA536DEA13C099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:62:90:87:ed:43:08:95:44:76:7c:77:e8:e1:
                    e8:2c:65:64:85:97:ae:c6:e0:3d:ba:70:46:72:6f:
                    46:6f:f8:ec:f1:99:73:30:e1:62:6e:64:18:a4:7c:
                    8f:8d:13:00:bf:1b:9d:fe:7a:6c:8b:2b:68:50:88:
                    9a:0d:69:aa:fb:18:58:bf:73:ec:e4:37:53:3f:4d:
                    8e:90:38:69:f1:8d:91:58:63:f4:64:38:17:d5:f6:
                    f0:59:82:40:37:e0:c0:31:db:4b:77:d9:95:de:cc:
                    72:ea:ec:d3:56:56:92:d1:8a:6b:a4:eb:6f:d5:6e:
                    f1:58:32:eb:9a:1c:a7:8a:a9:80:19:72:3d:1a:f1:
                    7b:4e:e9:f3:71:2a:f1:10:02:91:b4:6e:dd:19:92:
                    9b:b7:66:44:09:12:6a:21:8f:8c:24:2d:16:16:d8:
                    3f:df:c0:66:0c:25:1d:d8:ed:fe:07:25:21:8a:8f:
                    c4:48:9c:03:d7:07:f1:57:48:29:77:a0:be:02:1d:
                    a0:cb:48:8e:a9:3e:a2:1e:22:14:a1:b3:ac:0b:1b:
                    40:a9:13:8e:ab:2c:1e:3f:68:97:5f:44:4e:cb:6b:
                    a3:ad:07:94:6c:32:5e:bd:d4:33:df:05:fb:e0:8e:
                    39:0d:63:47:d2:47:9b:33:6f:44:d8:10:00:d9:ba:
                    a6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F3:D1:7C:45:85:64:8C:CD:80:53:0B:E2:CA:53:6D:EA:13:C0:99
            X509v3 Authority Key Identifier:
                keyid:FE:FE:3F:5C:7F:4C:16:1E:B7:F1:3E:0C:B2:4B:88:29:FE:38:12:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3133382e3132322e37332e302f32342d3234203d3e20323633323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:0e:ce:3b:b9:49:80:f5:13:61:1f:47:ce:22:6b:aa:00:c2:
         51:15:62:f6:a8:1d:10:74:fb:ef:55:b1:69:d0:91:6d:5f:4d:
         38:90:6f:6c:ca:93:c9:a5:0f:1d:88:e8:32:61:94:a0:d9:72:
         80:ea:56:7a:85:29:07:d8:69:cb:85:12:f8:40:3a:5a:be:bf:
         19:47:f9:ec:ba:4c:48:f9:d2:f3:e5:46:1d:e6:35:c5:2b:a9:
         83:b1:58:d0:32:a2:fa:39:9b:95:ed:e0:5a:d4:98:e7:e4:57:
         bc:5b:dd:a5:76:4a:aa:d9:28:24:39:1b:bc:c4:63:2f:a4:23:
         34:37:26:7f:aa:88:75:7c:a2:0c:0b:bf:e5:99:ca:23:c7:98:
         c1:33:73:6d:70:d1:76:63:7a:b8:24:d5:1b:13:5e:08:3f:63:
         12:c3:d7:ec:d7:87:3c:cd:31:c6:5c:c0:59:af:57:60:b5:d6:
         2e:a6:d9:87:01:ec:82:88:48:4b:e8:74:6f:18:a2:8d:7b:67:
         29:b1:71:92:c5:76:2a:b3:7b:5d:5a:47:9f:b7:52:64:36:8b:
         bd:a0:f7:d9:f8:08:21:bb:58:0a:d4:9a:48:4d:eb:84:29:24:
         36:21:3f:95:02:02:ab:be:b5:69:f2:35:19:89:9c:17:7e:46:
         70:02:76:6a
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUYPEHltL0sg7LBUe1kXaAKWEuW4AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkVGRTNGNUM3RjRDMTYxRUI3RjEzRTBDQjI0Qjg4MjlG
RTM4MTI2MDAeFw0yMzA1MTYxMTU1MTNaFw0yNDA1MTQxMjAwMTNaMDMxMTAvBgNV
BAMTKEE3RjNEMTdDNDU4NTY0OENDRDgwNTMwQkUyQ0E1MzZERUExM0MwOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrYpCH7UMIlUR2fHfo4egsZWSF
l67G4D26cEZyb0Zv+OzxmXMw4WJuZBikfI+NEwC/G53+emyLK2hQiJoNaar7GFi/
c+zkN1M/TY6QOGnxjZFYY/RkOBfV9vBZgkA34MAx20t32ZXezHLq7NNWVpLRimuk
62/VbvFYMuuaHKeKqYAZcj0a8XtO6fNxKvEQApG0bt0Zkpu3ZkQJEmohj4wkLRYW
2D/fwGYMJR3Y7f4HJSGKj8RInAPXB/FXSCl3oL4CHaDLSI6pPqIeIhShs6wLG0Cp
E46rLB4/aJdfRE7La6OtB5RsMl691DPfBfvgjjkNY0fSR5szb0TYEADZuqZtAgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUp/PRfEWFZIzNgFML4spTbeoTwJkwHwYDVR0j
BBgwFoAU/v4/XH9MFh638T4MskuIKf44EmAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDVDVEZuOHdudTRveXNqWUozTFNRZHRLOFBIbnhObTVtRDRWSFl2SDlD
aUQvMC9GRUZFM0Y1QzdGNEMxNjFFQjdGMTNFMENCMjRCODgyOUZFMzgxMjYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZFRkUzRjVDN0Y0QzE2MUVC
N0YxM0UwQ0IyNEI4ODI5RkUzODEyNjAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ1Q1RGbjh3bnU0b3lzallKM0xTUWR0SzhQSG54Tm01bUQ0VkhZdkg5Q2lELzAv
MzEzMzM4MmUzMTMyMzIyZTM3MzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzMjM2MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBACKekkwDQYJKoZIhvcNAQELBQADggEBAGsOzju5
SYD1E2EfR84ia6oAwlEVYvaoHRB0++9VsWnQkW1fTTiQb2zKk8mlDx2I6DJhlKDZ
coDqVnqFKQfYacuFEvhAOlq+vxlH+ey6TEj50vPlRh3mNcUrqYOxWNAyovo5m5Xt
4FrUmOfkV7xb3aV2SqrZKCQ5G7zEYy+kIzQ3Jn+qiHV8ogwLv+WZyiPHmMEzc21w
0XZjergk1RsTXgg/YxLD1+zXhzzNMcZcwFmvV2C11i6m2YcB7IKISEvodG8Yoo17
ZymxcZLFdiqze11aR5+3UmQ2i72g99n4CCG7WArUmkhN64QpJDYhP5UCAqu+tWny
NRmJnBd+RnACdmo=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:58 2024 by rpki-client on console-ams.rpki-client.org