Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3230302e33332e3132382e302f32312d3231203d3e20323633323633.roa
File:                     3230302e33332e3132382e302f32312d3231203d3e20323633323633.roa (raw, json)
Hash identifier:          rIzcrpIvfvDZk/SuhOTjAEY2UZxAd1U8JEohjXVqX58=
Subject key identifier:   2C:16:FF:B9:F5:89:F2:B9:02:21:CF:68:95:5A:60:33:83:62:55:E6
Certificate issuer:       /CN=FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260
Certificate serial:       665E1620EBB748D9365CFAB46B1BAAF4CF4996DB
Authority key identifier: FE:FE:3F:5C:7F:4C:16:1E:B7:F1:3E:0C:B2:4B:88:29:FE:38:12:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3230302e33332e3132382e302f32312d3231203d3e20323633323633.roa
Signing time:             Tue 16 May 2023 12:00:48 +0000
ROA not before:           Tue 16 May 2023 11:55:48 +0000
ROA not after:            Tue 14 May 2024 12:00:48 +0000
asID:                     263263
IP address blocks:        200.33.128.0/21 maxlen: 21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:5e:16:20:eb:b7:48:d9:36:5c:fa:b4:6b:1b:aa:f4:cf:49:96:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260
        Validity
            Not Before: May 16 11:55:48 2023 GMT
            Not After : May 14 12:00:48 2024 GMT
        Subject: CN=2C16FFB9F589F2B90221CF68955A6033836255E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:0f:08:cd:c7:04:e1:ca:59:e9:81:75:58:3b:
                    94:be:6a:d0:19:66:cf:34:88:eb:78:c6:0f:d4:dc:
                    90:57:9f:d7:46:2b:f6:be:ac:54:91:f8:8b:1c:97:
                    e4:49:2b:52:2a:29:e1:a9:52:d9:f4:3a:27:77:5c:
                    dc:0f:1f:40:a3:f8:81:c4:b5:22:ac:89:a5:04:60:
                    c3:6f:c9:33:a2:33:82:fd:29:b9:b8:1e:79:c0:d8:
                    ba:fb:d5:f1:ce:55:04:06:03:d1:7b:7c:24:ea:ff:
                    98:08:4d:e4:22:b1:4a:12:0b:9a:ee:97:62:ee:5f:
                    89:86:f9:da:15:2c:2d:17:9c:a1:9b:ec:2d:8e:07:
                    64:a7:52:a5:02:0e:ff:85:a9:bc:80:8b:59:16:4b:
                    db:33:2e:37:1c:29:d9:91:0a:44:de:a5:d5:37:2f:
                    ad:b7:c6:45:b0:2e:da:16:37:97:5e:a1:8f:2b:6e:
                    57:c8:4d:bc:33:d5:ae:f9:a0:a0:79:95:4a:70:95:
                    36:97:47:2c:f2:a3:be:46:44:bc:43:b8:01:21:78:
                    1c:16:c3:56:45:71:b9:20:0f:b5:d1:ff:98:e6:99:
                    17:6b:f2:58:93:e6:97:88:35:ed:83:2d:ac:a7:56:
                    24:18:09:d8:2e:6d:d9:5f:23:a9:b0:52:8e:89:f2:
                    7f:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:16:FF:B9:F5:89:F2:B9:02:21:CF:68:95:5A:60:33:83:62:55:E6
            X509v3 Authority Key Identifier:
                keyid:FE:FE:3F:5C:7F:4C:16:1E:B7:F1:3E:0C:B2:4B:88:29:FE:38:12:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3230302e33332e3132382e302f32312d3231203d3e20323633323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.128.0/21

    Signature Algorithm: sha256WithRSAEncryption
         09:bb:0f:4e:3c:b4:55:40:b1:15:3b:10:dc:03:36:2c:32:9b:
         6b:22:60:47:dc:31:84:ed:c6:b3:da:14:15:9a:bb:46:16:1a:
         4f:50:ac:5c:80:27:04:32:9f:0f:a7:f8:e7:77:45:df:ac:69:
         45:53:b1:5a:96:ab:8e:06:c5:cc:56:2f:ed:85:f1:b5:38:86:
         43:01:0d:8f:65:24:07:8c:84:40:cc:3d:41:4a:ad:d8:24:8e:
         21:a8:1b:98:78:27:8d:03:63:3e:a2:fc:04:39:3d:93:ab:a4:
         db:65:43:b2:39:8a:6e:97:98:06:08:f7:7e:02:d2:87:ef:f9:
         5f:ad:f4:09:18:66:0c:1d:e8:a6:2d:80:79:18:8b:b9:7f:f9:
         e2:41:9a:e3:e7:aa:50:77:41:ff:7f:52:2c:4e:f5:0d:b2:49:
         28:f9:45:d1:c4:1b:58:6d:2a:80:ad:80:7b:f3:fc:92:f2:cf:
         d0:b6:f3:b2:45:22:19:7e:92:4e:4c:38:9c:61:4f:f4:e8:d7:
         ef:de:56:8d:99:3e:73:fb:28:4b:57:3d:46:4f:d9:13:87:48:
         ea:66:73:c4:e1:16:d6:fe:4a:02:18:eb:04:3d:93:9a:37:1a:
         c7:6e:cd:d6:ff:29:84:9d:da:95:28:fc:a5:47:fb:61:c3:b8:
         c4:1e:44:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org