Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3137302e3234342e3232302e302f32342d3234203d3e20323633323633.roa
File:                     3137302e3234342e3232302e302f32342d3234203d3e20323633323633.roa (raw, json)
Hash identifier:          IXzemM4227Tp9belEx2zqEmOA6OmR2KPL98oj3vfwEQ=
Subject key identifier:   33:BA:EB:1F:39:DC:AF:E6:67:3D:EF:3F:B4:61:52:79:51:B1:61:B2
Certificate issuer:       /CN=FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260
Certificate serial:       61907FA15B69C179269CEBD93E84BBBAD07F5FBA
Authority key identifier: FE:FE:3F:5C:7F:4C:16:1E:B7:F1:3E:0C:B2:4B:88:29:FE:38:12:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3137302e3234342e3232302e302f32342d3234203d3e20323633323633.roa
Signing time:             Tue 16 May 2023 12:00:30 +0000
ROA not before:           Tue 16 May 2023 11:55:30 +0000
ROA not after:            Tue 14 May 2024 12:00:30 +0000
asID:                     263263
IP address blocks:        170.244.220.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:90:7f:a1:5b:69:c1:79:26:9c:eb:d9:3e:84:bb:ba:d0:7f:5f:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260
        Validity
            Not Before: May 16 11:55:30 2023 GMT
            Not After : May 14 12:00:30 2024 GMT
        Subject: CN=33BAEB1F39DCAFE6673DEF3FB461527951B161B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:83:fe:0b:26:f1:32:05:bf:fc:c7:8e:51:3c:
                    e3:68:a9:c4:0b:ac:5a:3d:e3:bd:32:8e:8e:32:79:
                    28:21:48:81:60:98:3e:e2:fe:be:33:62:2f:5c:24:
                    28:1e:34:84:f1:4c:8b:bc:96:4c:71:56:ae:0e:88:
                    cb:ff:3a:53:43:b2:0f:84:9d:02:3b:6e:90:f7:98:
                    b6:af:54:f3:53:9a:40:37:55:9b:0d:44:14:58:d6:
                    eb:02:ca:35:ef:0b:79:56:bb:4e:b6:5b:34:db:ad:
                    8a:84:27:67:0a:55:bf:9a:a0:e2:e1:b9:e4:dd:97:
                    b5:56:cd:a6:58:4c:e4:e3:87:84:54:0c:23:25:44:
                    fc:eb:1c:ff:8d:10:f4:b2:6e:05:5c:1b:59:92:e8:
                    9f:24:f7:33:36:1b:df:d5:63:e6:c7:b7:62:6e:c2:
                    a2:e1:ab:e7:e2:c1:3b:79:a0:f9:37:21:38:cf:1c:
                    94:05:e1:f7:82:c7:83:1a:5d:1b:74:78:c6:65:02:
                    b6:1d:6e:dc:f7:8c:02:a1:a0:6c:b5:72:9b:ef:b2:
                    f5:83:39:eb:cb:1f:82:4a:25:cb:44:75:29:9d:23:
                    b4:32:d1:14:e9:39:1c:f2:48:7b:21:bd:df:f0:d4:
                    02:66:a6:59:3e:c8:ee:f3:95:a4:de:24:d7:4a:2f:
                    11:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:BA:EB:1F:39:DC:AF:E6:67:3D:EF:3F:B4:61:52:79:51:B1:61:B2
            X509v3 Authority Key Identifier:
                keyid:FE:FE:3F:5C:7F:4C:16:1E:B7:F1:3E:0C:B2:4B:88:29:FE:38:12:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3137302e3234342e3232302e302f32342d3234203d3e20323633323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:4b:22:d7:16:52:df:b2:86:31:84:45:2d:aa:c6:42:ac:f2:
         e2:10:69:5e:3e:c0:ff:32:8c:cf:59:4d:6b:6a:45:c5:0f:24:
         88:78:ee:81:52:38:66:c0:65:9a:c9:2c:72:1b:a4:b8:0b:aa:
         1d:20:5a:88:5c:40:88:c3:bd:bf:4e:23:19:8e:3c:ac:a1:95:
         39:77:6c:4f:14:f7:28:fc:37:03:16:db:da:9a:ff:df:92:d3:
         6a:eb:6b:68:d3:44:03:10:51:32:9d:a7:88:36:6f:f5:d9:dc:
         06:08:9b:82:43:ca:2f:be:97:ea:aa:3a:2e:96:ba:60:a8:2d:
         c4:15:25:7b:3f:65:40:22:5e:2a:17:34:27:22:8b:5c:f5:66:
         5f:79:99:37:b6:f6:59:1f:27:ca:3e:06:70:9b:9b:9c:3d:3c:
         32:42:6d:3b:8b:c1:f4:ce:26:5a:ac:ab:71:4b:49:27:d4:c0:
         ca:8a:98:61:e3:8c:49:6c:fe:26:4d:70:12:35:c7:f1:1d:da:
         74:f8:f4:aa:75:b8:ff:ac:e3:e7:84:b6:b4:06:32:d0:68:61:
         87:04:f6:61:fc:c3:0c:88:7e:ea:33:c2:34:60:d2:c5:fd:d0:
         93:41:ae:b6:7b:07:a1:5b:ec:3f:83:0a:40:40:90:a2:16:b0:
         7d:6f:38:80
-----BEGIN CERTIFICATE-----
MIIFSTCCBDGgAwIBAgIUYZB/oVtpwXkmnOvZPoS7utB/X7owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkVGRTNGNUM3RjRDMTYxRUI3RjEzRTBDQjI0Qjg4MjlG
RTM4MTI2MDAeFw0yMzA1MTYxMTU1MzBaFw0yNDA1MTQxMjAwMzBaMDMxMTAvBgNV
BAMTKDMzQkFFQjFGMzlEQ0FGRTY2NzNERUYzRkI0NjE1Mjc5NTFCMTYxQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIg/4LJvEyBb/8x45RPONoqcQL
rFo9470yjo4yeSghSIFgmD7i/r4zYi9cJCgeNITxTIu8lkxxVq4OiMv/OlNDsg+E
nQI7bpD3mLavVPNTmkA3VZsNRBRY1usCyjXvC3lWu062WzTbrYqEJ2cKVb+aoOLh
ueTdl7VWzaZYTOTjh4RUDCMlRPzrHP+NEPSybgVcG1mS6J8k9zM2G9/VY+bHt2Ju
wqLhq+fiwTt5oPk3ITjPHJQF4feCx4MaXRt0eMZlArYdbtz3jAKhoGy1cpvvsvWD
OevLH4JKJctEdSmdI7Qy0RTpORzySHshvd/w1AJmplk+yO7zlaTeJNdKLxHpAgMB
AAGjggJTMIICTzAdBgNVHQ4EFgQUM7rrHzncr+ZnPe8/tGFSeVGxYbIwHwYDVR0j
BBgwFoAU/v4/XH9MFh638T4MskuIKf44EmAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDVDVEZuOHdudTRveXNqWUozTFNRZHRLOFBIbnhObTVtRDRWSFl2SDlD
aUQvMC9GRUZFM0Y1QzdGNEMxNjFFQjdGMTNFMENCMjRCODgyOUZFMzgxMjYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZFRkUzRjVDN0Y0QzE2MUVC
N0YxM0UwQ0IyNEI4ODI5RkUzODEyNjAuY2VyMIGwBggrBgEFBQcBCwSBozCBoDCB
nQYIKwYBBQUHMAuGgZByc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ1Q1RGbjh3bnU0b3lzallKM0xTUWR0SzhQSG54Tm01bUQ0VkhZdkg5Q2lELzAv
MzEzNzMwMmUzMjM0MzQyZTMyMzIzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMy
MzYzMzMyMzYzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEF
BQcBBwEB/wQQMA4wDAQCAAEwBgMEAKr03DANBgkqhkiG9w0BAQsFAAOCAQEAUEsi
1xZS37KGMYRFLarGQqzy4hBpXj7A/zKMz1lNa2pFxQ8kiHjugVI4ZsBlmskschuk
uAuqHSBaiFxAiMO9v04jGY48rKGVOXdsTxT3KPw3Axbb2pr/35LTautraNNEAxBR
Mp2niDZv9dncBgibgkPKL76X6qo6Lpa6YKgtxBUlez9lQCJeKhc0JyKLXPVmX3mZ
N7b2WR8nyj4GcJubnD08MkJtO4vB9M4mWqyrcUtJJ9TAyoqYYeOMSWz+Jk1wEjXH
8R3adPj0qnW4/6zj54S2tAYy0GhhhwT2YfzDDIh+6jPCNGDSxf3Qk0GutnsHoVvs
P4MKQECQohawfW84gA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org