Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3137302e3234342e3232312e302f32342d3234203d3e20323633323633.roa
File:                     3137302e3234342e3232312e302f32342d3234203d3e20323633323633.roa (raw, json)
Hash identifier:          GhTJgKIviVZUdLJbd+08cK3aSmd3ZIcNyEAu7QDENC0=
Subject key identifier:   6D:E2:C7:58:DA:D5:FD:45:3A:0A:96:6C:1F:97:51:40:56:87:A4:57
Certificate issuer:       /CN=FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260
Certificate serial:       71327964D624171CA18851A7C467F25CC9705BBF
Authority key identifier: FE:FE:3F:5C:7F:4C:16:1E:B7:F1:3E:0C:B2:4B:88:29:FE:38:12:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3137302e3234342e3232312e302f32342d3234203d3e20323633323633.roa
Signing time:             Tue 16 May 2023 12:00:34 +0000
ROA not before:           Tue 16 May 2023 11:55:34 +0000
ROA not after:            Tue 14 May 2024 12:00:34 +0000
asID:                     263263
IP address blocks:        170.244.221.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:32:79:64:d6:24:17:1c:a1:88:51:a7:c4:67:f2:5c:c9:70:5b:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260
        Validity
            Not Before: May 16 11:55:34 2023 GMT
            Not After : May 14 12:00:34 2024 GMT
        Subject: CN=6DE2C758DAD5FD453A0A966C1F9751405687A457
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:17:a5:ef:91:9b:a8:4e:69:66:8d:d2:8b:eb:
                    7b:5e:50:d8:08:0e:4d:02:55:94:cd:64:10:29:ac:
                    4e:99:46:97:e3:23:6d:ab:db:97:d2:b9:17:ad:3b:
                    96:5d:f1:cc:e8:39:54:2c:e5:0f:fb:f9:16:23:0e:
                    a1:67:2e:4b:e2:de:26:1e:73:48:62:3d:18:3b:08:
                    73:b4:42:88:ea:1f:8e:19:9a:a4:45:06:05:e1:a7:
                    3c:01:f5:29:80:ba:9d:a5:1c:90:2a:05:cf:4e:67:
                    9a:db:bc:03:2b:aa:b2:42:bf:55:54:f4:1f:df:dd:
                    cf:a0:43:85:bf:5c:4c:87:59:a4:de:6e:40:98:75:
                    19:10:f7:f3:b8:6a:65:e5:89:fa:50:85:53:52:ac:
                    83:40:cc:fa:8f:51:cf:51:ea:e8:79:4e:2d:bd:06:
                    21:a5:82:d0:19:84:66:85:4d:79:2f:ca:78:d3:07:
                    ca:63:a2:d0:b9:ff:d2:cb:e9:d6:08:eb:2d:00:47:
                    50:8c:b1:8a:82:e3:e0:67:24:c6:8f:ca:40:31:4f:
                    06:7a:65:1c:41:59:75:bd:75:6d:d9:97:8a:1f:e7:
                    cf:e2:3e:69:28:f4:af:ab:03:88:ae:eb:11:ab:40:
                    e8:a5:a9:02:a1:54:00:61:6a:58:91:60:5d:33:4e:
                    82:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E2:C7:58:DA:D5:FD:45:3A:0A:96:6C:1F:97:51:40:56:87:A4:57
            X509v3 Authority Key Identifier:
                keyid:FE:FE:3F:5C:7F:4C:16:1E:B7:F1:3E:0C:B2:4B:88:29:FE:38:12:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3137302e3234342e3232312e302f32342d3234203d3e20323633323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:a6:1a:28:d1:56:51:7b:2f:8d:91:3d:2e:ec:17:8d:ed:8a:
         4c:0f:39:de:0e:f3:5f:e9:44:de:3e:fc:f9:3b:dd:63:1d:6a:
         b6:17:9b:2e:66:0d:66:12:89:5e:a8:da:e6:e9:05:59:69:e7:
         b7:c8:82:61:a0:12:5e:86:fe:f9:35:27:ab:52:73:b6:3c:dc:
         fc:6e:a7:c1:bb:ab:9a:35:3d:66:93:11:3f:8a:fe:8a:d5:c3:
         67:6a:61:2c:d8:3a:aa:af:ab:4b:ef:c1:d7:df:8d:5a:f2:57:
         b7:62:9e:03:3e:6c:08:27:4b:cf:08:3e:5d:b6:9d:a8:2a:14:
         de:5c:51:ee:eb:88:0d:f4:1e:6d:d7:ba:e6:2c:88:70:c0:06:
         e5:cb:93:3a:0c:ee:85:7a:b3:06:8c:4b:1e:ba:1a:e5:9c:e9:
         e9:07:fa:3d:19:27:81:16:94:60:be:6f:f9:bb:58:e8:fa:99:
         72:9e:98:8c:85:0a:e8:06:53:6f:31:f1:b8:45:62:f3:26:d8:
         04:15:03:0a:b4:f5:83:37:03:0c:e4:77:72:d6:65:c3:42:fc:
         bf:f2:ca:ef:28:a3:78:50:26:ef:86:d9:3c:f7:f5:07:7b:f0:
         71:d9:52:48:8f:ac:01:3d:0d:27:c4:af:ae:7c:6a:79:94:cc:
         b8:9d:0f:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:40 2024 by rpki-client on console-fra.rpki-client.org