Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3137302e3234342e3232302e302f32322d3232203d3e20323633323633.roa
File:                     3137302e3234342e3232302e302f32322d3232203d3e20323633323633.roa (raw, json)
Hash identifier:          75JOeH9Q81wIkFTGOJnik6qDBfVk6ZEH0cL5761g/Mw=
Subject key identifier:   FC:0B:4C:9E:41:26:C0:61:CF:1A:6B:44:6C:62:71:AC:54:B8:3D:91
Certificate issuer:       /CN=FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260
Certificate serial:       769399836EC8147DBCFA358E2E67CE5057FF179C
Authority key identifier: FE:FE:3F:5C:7F:4C:16:1E:B7:F1:3E:0C:B2:4B:88:29:FE:38:12:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3137302e3234342e3232302e302f32322d3232203d3e20323633323633.roa
Signing time:             Tue 16 May 2023 12:00:24 +0000
ROA not before:           Tue 16 May 2023 11:55:24 +0000
ROA not after:            Tue 14 May 2024 12:00:24 +0000
asID:                     263263
IP address blocks:        170.244.220.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:93:99:83:6e:c8:14:7d:bc:fa:35:8e:2e:67:ce:50:57:ff:17:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260
        Validity
            Not Before: May 16 11:55:24 2023 GMT
            Not After : May 14 12:00:24 2024 GMT
        Subject: CN=FC0B4C9E4126C061CF1A6B446C6271AC54B83D91
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e6:da:f2:d2:21:6e:82:ae:90:00:0a:18:1a:
                    a6:ea:3a:1e:3a:e4:3f:6d:a1:b5:88:9d:fa:fb:81:
                    db:33:84:03:c5:55:1d:3a:64:08:ca:08:46:12:74:
                    70:57:9f:24:7e:43:dd:41:3d:c1:9f:48:20:e1:b0:
                    d7:da:b9:5c:20:d6:66:c5:99:6d:b1:fe:6a:c4:c2:
                    0d:1d:c4:d1:57:10:66:45:aa:f3:4e:55:b2:d1:05:
                    78:72:73:0f:e4:53:2b:e5:92:6b:c0:66:8a:47:6d:
                    41:82:54:4a:48:b2:94:7c:62:07:90:0a:c0:21:3f:
                    bc:31:aa:16:e9:4a:90:bc:6f:7a:ac:79:2b:95:20:
                    95:2c:c8:a2:40:ac:20:2e:04:4c:c8:5b:df:b8:d6:
                    3f:6b:43:9b:0f:cc:f8:d3:91:1b:18:74:c6:6d:62:
                    c0:b1:b5:af:03:27:d2:0a:48:35:e0:18:4f:11:19:
                    b8:55:90:e0:af:87:fe:bf:10:3f:75:d8:04:95:a0:
                    5d:ec:33:49:62:13:e6:5b:5f:57:50:bc:b3:68:15:
                    56:b5:e0:33:02:60:b4:35:09:52:04:e5:ac:9e:3d:
                    eb:a6:6f:f8:1a:1f:a1:82:67:38:16:fa:6e:8b:9f:
                    18:63:72:37:bd:16:b9:a7:29:cc:38:24:d5:53:ad:
                    e5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:0B:4C:9E:41:26:C0:61:CF:1A:6B:44:6C:62:71:AC:54:B8:3D:91
            X509v3 Authority Key Identifier:
                keyid:FE:FE:3F:5C:7F:4C:16:1E:B7:F1:3E:0C:B2:4B:88:29:FE:38:12:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3137302e3234342e3232302e302f32322d3232203d3e20323633323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:4f:04:3f:8d:2d:e1:9c:4e:35:c2:e7:45:a8:7b:1f:4a:0f:
         6e:72:df:1b:41:f5:c0:7c:77:a0:4a:fa:df:44:ff:67:17:0b:
         f8:9b:cc:6c:07:ed:f6:10:bb:bf:24:cd:01:1a:c8:64:39:83:
         d6:16:69:be:b1:b3:62:d1:c0:28:45:31:f3:87:f9:4e:7b:18:
         5b:b1:49:bb:3c:f8:86:e8:b4:42:53:69:f3:bb:45:33:6e:ce:
         cc:c9:dc:a3:9b:42:6b:82:b9:24:b2:5a:2a:44:5e:da:16:79:
         a0:4f:d8:95:b8:f5:14:76:f3:3c:d8:27:f5:11:12:1b:a2:7e:
         b0:9e:18:1e:7e:05:db:f4:6d:9d:da:02:71:0b:4b:e9:7c:58:
         d6:00:9e:84:07:67:b7:2a:1b:19:c6:45:d4:f3:89:64:16:4a:
         9c:07:5e:fe:c1:64:c8:b5:ad:51:d9:b3:98:59:63:c4:d9:86:
         08:24:e6:72:f4:5d:4c:32:72:b4:a0:f5:ca:c8:c6:d7:d0:a1:
         e8:a1:1b:45:c3:26:02:d7:ce:bb:8c:20:08:a3:3a:5b:b7:3e:
         7a:07:b9:d4:f9:04:11:5a:be:18:14:a0:d4:a2:29:f9:b4:58:
         b2:5b:99:3a:6c:be:64:31:04:06:55:11:3a:30:6a:a2:44:7e:
         5a:20:e9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:31 2024 by rpki-client on console-ams.rpki-client.org