Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3137302e3234342e3232332e302f32342d3234203d3e20323633323633.roa
File:                     3137302e3234342e3232332e302f32342d3234203d3e20323633323633.roa (raw, json)
Hash identifier:          j8fP6wXjKWHwoEdN1TVNLB8XN6RdTRi4EHM9Gz6pqvY=
Subject key identifier:   90:FB:25:6F:7E:CF:58:33:AD:D6:0C:39:BC:64:20:BB:DE:64:94:52
Certificate issuer:       /CN=FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260
Certificate serial:       51C52D4928A23E142C57A0C044E5FB504500F462
Authority key identifier: FE:FE:3F:5C:7F:4C:16:1E:B7:F1:3E:0C:B2:4B:88:29:FE:38:12:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3137302e3234342e3232332e302f32342d3234203d3e20323633323633.roa
Signing time:             Tue 16 May 2023 12:00:44 +0000
ROA not before:           Tue 16 May 2023 11:55:44 +0000
ROA not after:            Tue 14 May 2024 12:00:44 +0000
asID:                     263263
IP address blocks:        170.244.223.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:c5:2d:49:28:a2:3e:14:2c:57:a0:c0:44:e5:fb:50:45:00:f4:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260
        Validity
            Not Before: May 16 11:55:44 2023 GMT
            Not After : May 14 12:00:44 2024 GMT
        Subject: CN=90FB256F7ECF5833ADD60C39BC6420BBDE649452
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6c:9e:cd:ea:4b:c3:92:0b:9a:a5:87:a5:9b:
                    54:c3:e7:a6:e6:de:34:a7:1a:cd:23:26:82:53:5b:
                    3d:02:43:89:14:8a:85:8e:0d:35:cb:4a:67:26:46:
                    29:e7:7b:9b:c1:8f:d9:cf:80:3f:70:8c:c0:a7:27:
                    56:47:92:17:ac:d9:96:31:02:d2:fc:ca:bd:24:0c:
                    09:37:93:3e:93:e4:fb:56:6e:45:88:16:cf:f7:90:
                    63:ec:04:46:2b:fe:13:bf:17:c5:a6:ad:c1:c9:82:
                    19:1d:ef:80:18:7c:e9:c4:0a:5d:bf:88:c1:80:8d:
                    fd:c3:22:28:8e:a7:31:07:18:7f:eb:3c:29:8b:2f:
                    20:c1:37:6b:fb:b4:43:f9:b5:d5:4c:f6:78:99:71:
                    5e:ec:03:5e:46:93:a4:fd:df:4a:ec:d6:0c:f8:ea:
                    9e:2b:5b:22:65:d8:d2:63:21:9d:db:d5:47:33:58:
                    a1:f8:5a:dc:97:fd:df:dd:20:c4:5b:9a:91:05:02:
                    f0:f6:8f:ca:ff:46:ca:b4:d5:41:9e:14:29:d7:3d:
                    b4:8b:52:2d:ba:80:3b:3f:32:cb:bf:17:5a:d7:23:
                    72:59:8a:0b:cc:e0:84:e0:31:d1:0c:98:a7:f4:82:
                    2d:19:f6:08:3c:25:64:4c:26:b8:d7:54:77:06:9c:
                    cf:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:FB:25:6F:7E:CF:58:33:AD:D6:0C:39:BC:64:20:BB:DE:64:94:52
            X509v3 Authority Key Identifier:
                keyid:FE:FE:3F:5C:7F:4C:16:1E:B7:F1:3E:0C:B2:4B:88:29:FE:38:12:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3137302e3234342e3232332e302f32342d3234203d3e20323633323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:6f:71:88:c3:75:c7:d9:da:58:09:07:10:71:43:37:4f:3a:
         f4:bd:90:9d:fe:6e:18:1b:65:ad:62:35:51:b2:71:0e:60:5d:
         99:ee:eb:10:c2:e7:9f:d3:9d:2a:9c:6f:f7:44:84:54:ae:57:
         46:60:b2:e2:c5:05:cd:76:4c:b9:87:e3:95:21:55:05:5a:00:
         23:b4:27:ce:14:fa:19:30:70:28:72:d4:20:3a:35:ba:68:d5:
         96:bd:0c:8e:b0:4d:e5:07:ad:98:c2:3c:01:27:b6:04:8e:38:
         c2:27:ea:54:5e:65:61:fd:61:d0:b1:1d:84:76:b9:f9:bd:fe:
         64:9d:55:71:16:81:91:a5:1d:17:22:63:d5:5d:a1:14:86:b5:
         ff:ea:e5:df:c3:59:80:8b:a7:a7:da:ba:19:ca:9a:fb:e6:a0:
         a4:2b:b7:5c:5f:f2:e3:29:61:4e:1a:d4:d9:f1:0b:62:0c:71:
         d1:ed:5b:c7:3f:3b:8f:b7:b0:ad:03:25:ad:7a:9d:c0:81:e8:
         43:36:b5:43:d7:e7:6f:4b:a0:9f:01:c6:08:eb:27:d8:ab:22:
         3d:35:9b:86:61:47:da:0b:7a:b2:b5:5d:85:e9:ca:6c:1e:e0:
         72:10:b4:31:9b:9a:a0:7c:19:d6:29:15:55:50:9b:7d:26:03:
         3d:3d:e9:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org