Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3137302e3234342e3232302e302f32332d3233203d3e20323633323633.roa
File:                     3137302e3234342e3232302e302f32332d3233203d3e20323633323633.roa (raw, json)
Hash identifier:          +EO0xYxLaPrGWBFEihODQGTGHHjl+2R5W6SgEpXKRcw=
Subject key identifier:   18:F2:CC:7B:BE:E0:28:A6:1F:C3:3A:5A:F9:49:FE:33:74:27:33:2B
Certificate issuer:       /CN=FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260
Certificate serial:       1FB61282DDA3600DA28D999848F56C9429F06017
Authority key identifier: FE:FE:3F:5C:7F:4C:16:1E:B7:F1:3E:0C:B2:4B:88:29:FE:38:12:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3137302e3234342e3232302e302f32332d3233203d3e20323633323633.roa
Signing time:             Tue 16 May 2023 12:00:27 +0000
ROA not before:           Tue 16 May 2023 11:55:27 +0000
ROA not after:            Tue 14 May 2024 12:00:27 +0000
asID:                     263263
IP address blocks:        170.244.220.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:b6:12:82:dd:a3:60:0d:a2:8d:99:98:48:f5:6c:94:29:f0:60:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260
        Validity
            Not Before: May 16 11:55:27 2023 GMT
            Not After : May 14 12:00:27 2024 GMT
        Subject: CN=18F2CC7BBEE028A61FC33A5AF949FE337427332B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:1b:a2:6f:6a:74:04:0a:5e:6e:f8:d9:ee:ea:
                    5b:6f:45:72:60:90:e2:9c:0f:e0:27:01:f3:e1:ef:
                    54:bb:f1:54:f3:fb:82:2d:46:2a:bd:db:43:a4:85:
                    e6:53:72:ac:c5:c0:de:16:64:98:0c:e3:1c:2b:27:
                    e4:c5:d8:2c:25:d7:8b:23:9e:1e:2a:e3:6c:a2:eb:
                    a6:bd:61:74:f1:35:50:5e:14:2d:fe:bc:87:5c:e7:
                    83:d2:b2:29:71:ac:62:64:74:67:52:93:2d:6d:e1:
                    39:90:2a:8d:34:ad:65:d3:70:5d:87:08:cc:90:ca:
                    75:5b:8e:4e:8c:56:04:d2:a7:cd:3e:19:cd:d9:fd:
                    29:94:bb:dd:8a:39:03:8e:16:52:01:9e:e7:7b:87:
                    9c:7a:1c:95:a6:c9:cf:79:7f:06:21:40:7c:1e:61:
                    93:06:1b:d1:8b:6e:7f:fb:4e:ac:16:15:46:49:d1:
                    41:29:b4:68:6c:88:22:87:22:a0:8e:bc:01:6c:45:
                    3b:d4:93:ca:b3:f8:7f:a1:3a:ae:1e:85:7a:a6:83:
                    3c:89:15:ce:ec:89:50:a2:f5:22:e5:a4:cd:f4:09:
                    9a:bd:f1:b4:d1:14:c2:f0:b8:81:99:9c:d9:58:2b:
                    8d:ed:5b:18:c7:60:67:a5:d0:e7:df:a8:5f:9e:ff:
                    c0:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:F2:CC:7B:BE:E0:28:A6:1F:C3:3A:5A:F9:49:FE:33:74:27:33:2B
            X509v3 Authority Key Identifier:
                keyid:FE:FE:3F:5C:7F:4C:16:1E:B7:F1:3E:0C:B2:4B:88:29:FE:38:12:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3137302e3234342e3232302e302f32332d3233203d3e20323633323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:39:28:28:55:d6:b7:e9:a2:af:c8:94:39:a6:59:10:00:bc:
         4d:fc:c8:f6:40:a6:8f:b1:50:cf:73:3c:4b:fd:75:f5:9b:70:
         47:89:3d:bd:2c:29:66:fa:78:49:93:89:f3:62:38:48:d7:0c:
         eb:32:d4:2d:da:19:87:6d:67:ce:5e:a1:a7:e1:e2:47:c8:9d:
         6a:03:0f:a1:48:30:81:9a:7b:be:0c:d9:1f:bd:03:9b:2f:08:
         f1:76:84:dc:d9:b8:48:e0:97:41:41:e7:0e:ed:47:9c:92:3f:
         ad:31:da:45:06:f8:cf:30:0f:04:2d:66:c6:ba:8b:b9:ce:66:
         a7:b7:69:93:45:a0:d5:2e:dd:a2:23:e5:a0:88:15:df:90:a5:
         cf:6e:c3:36:ad:3c:e2:ed:50:97:6f:4d:4c:e9:b3:c5:a5:df:
         38:a2:e1:f3:e8:35:4b:d9:87:4d:8f:fa:99:3c:66:0a:a9:ea:
         d3:9e:23:b8:32:f9:a5:03:f5:52:54:2d:1a:77:9e:a9:b0:96:
         15:33:71:75:90:5f:af:5c:08:15:7e:76:d0:0c:f3:96:f6:e4:
         67:c2:f0:ce:24:ea:ca:27:65:d5:b2:a4:f1:81:80:fa:5f:1c:
         57:62:30:c4:4b:fb:34:68:7b:c8:38:37:c7:58:30:b2:45:d8:
         1f:4c:9d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:40 2024 by rpki-client on console-fra.rpki-client.org