Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3137302e3234342e3232322e302f32332d3233203d3e20323633323633.roa
File:                     3137302e3234342e3232322e302f32332d3233203d3e20323633323633.roa (raw, json)
Hash identifier:          DehQ117T/bR66PFveruaSSy68Pkvz2VHMNjTGvQjOPY=
Subject key identifier:   8E:64:1E:7E:10:B2:B3:F4:49:AE:B2:B1:89:E3:B5:DF:DB:BB:CA:1C
Certificate issuer:       /CN=FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260
Certificate serial:       408F6EBD61F03625F7373DD9E89B0DE42A73B442
Authority key identifier: FE:FE:3F:5C:7F:4C:16:1E:B7:F1:3E:0C:B2:4B:88:29:FE:38:12:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3137302e3234342e3232322e302f32332d3233203d3e20323633323633.roa
Signing time:             Tue 16 May 2023 12:00:37 +0000
ROA not before:           Tue 16 May 2023 11:55:37 +0000
ROA not after:            Tue 14 May 2024 12:00:37 +0000
asID:                     263263
IP address blocks:        170.244.222.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:8f:6e:bd:61:f0:36:25:f7:37:3d:d9:e8:9b:0d:e4:2a:73:b4:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260
        Validity
            Not Before: May 16 11:55:37 2023 GMT
            Not After : May 14 12:00:37 2024 GMT
        Subject: CN=8E641E7E10B2B3F449AEB2B189E3B5DFDBBBCA1C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e6:9f:78:5d:5b:f8:86:3f:e3:ad:0a:ea:73:
                    f4:62:bd:62:b6:ad:53:c0:98:19:da:d9:4d:cf:fe:
                    d0:4b:f1:58:86:b6:fc:1b:21:d2:69:69:92:2e:56:
                    a1:6c:89:c3:34:f0:a0:ca:60:db:b7:f8:52:fb:74:
                    3d:c7:87:c7:13:87:53:77:59:5d:e8:64:71:cb:c3:
                    ba:b8:35:db:69:f2:b1:7e:5c:dd:a6:7b:ef:2d:09:
                    39:56:dc:29:2f:e8:dc:18:38:ae:87:94:e8:97:fd:
                    34:e5:a5:aa:18:a6:37:9b:3e:13:a2:60:3a:eb:25:
                    41:4d:65:85:e3:fb:69:21:7a:36:7d:4b:56:aa:a8:
                    e2:cf:af:69:95:54:83:fc:4f:ff:a4:8a:d2:ee:00:
                    15:34:2e:aa:4d:ad:4e:7b:08:8b:64:e9:7c:a9:7a:
                    f5:61:26:87:8b:a9:01:43:74:fd:3b:85:f0:f5:ac:
                    30:94:13:1a:7d:77:30:e3:3f:29:3a:2e:79:64:cb:
                    29:b8:ab:ab:e9:28:f8:02:fe:71:12:67:b3:0b:4e:
                    4b:30:58:d9:56:27:d7:c5:f4:5f:e6:ec:9f:36:5b:
                    6b:b3:82:d5:be:43:6f:21:0e:e0:d1:ee:0e:e0:c3:
                    0d:3a:cf:67:cf:e2:e3:7d:6d:14:28:dc:16:3d:c6:
                    c4:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:64:1E:7E:10:B2:B3:F4:49:AE:B2:B1:89:E3:B5:DF:DB:BB:CA:1C
            X509v3 Authority Key Identifier:
                keyid:FE:FE:3F:5C:7F:4C:16:1E:B7:F1:3E:0C:B2:4B:88:29:FE:38:12:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3137302e3234342e3232322e302f32332d3233203d3e20323633323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:ad:7d:3d:27:a8:03:43:78:d1:3c:93:80:20:e6:f3:79:dc:
         ac:a9:b8:bf:72:a1:7f:56:02:4a:83:18:50:22:77:66:d2:b1:
         bb:d6:e7:e4:90:d7:87:cc:e2:4e:35:1a:60:38:07:e7:9c:91:
         bf:33:c3:8f:28:fe:87:ac:36:b1:96:bb:f6:e8:bf:bf:ea:75:
         25:e2:ea:05:68:e3:88:a8:be:f9:2a:e8:fd:59:17:11:dc:2b:
         71:a4:3b:70:b9:56:bd:a3:87:ce:94:03:8a:4f:07:f0:93:8e:
         46:82:78:19:7d:20:6f:21:c5:a1:e9:59:c8:68:49:7f:89:12:
         f5:eb:9b:67:b7:d8:6b:b7:13:8b:86:a8:5a:ed:d8:0b:c5:7d:
         a8:92:0c:5c:6d:d8:77:3d:fe:2a:af:b6:ca:69:0b:d0:d9:85:
         9c:0a:03:a8:e0:6b:ce:77:60:c4:eb:c2:d2:68:fc:61:52:54:
         43:40:46:41:ae:2f:8b:ed:98:89:70:3a:6c:ca:ee:06:b5:ae:
         48:13:d4:5b:74:11:28:db:07:f8:43:75:ee:9d:68:56:40:4a:
         66:ab:40:4d:4e:8c:a8:0f:fe:95:8b:86:fb:8d:93:21:b1:15:
         0e:68:8d:eb:87:51:f6:1c:85:ad:d7:32:ae:16:71:0e:5e:15:
         c7:d1:97:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org