Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3230302e33332e3132382e302f32332d3233203d3e20323633323633.roa
File:                     3230302e33332e3132382e302f32332d3233203d3e20323633323633.roa (raw, json)
Hash identifier:          wCDTB7JR1uL7hP/9KUwSvFgDFuF6hR8a6HNQQm9Ki4I=
Subject key identifier:   D9:5F:0A:C7:51:4D:BD:20:1C:8C:7A:83:FA:75:6E:4C:16:87:65:F0
Certificate issuer:       /CN=FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260
Certificate serial:       25BA5C15127FAFC9F69EE26822F1FD14B5BC1EA8
Authority key identifier: FE:FE:3F:5C:7F:4C:16:1E:B7:F1:3E:0C:B2:4B:88:29:FE:38:12:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3230302e33332e3132382e302f32332d3233203d3e20323633323633.roa
Signing time:             Tue 16 May 2023 12:00:54 +0000
ROA not before:           Tue 16 May 2023 11:55:54 +0000
ROA not after:            Tue 14 May 2024 12:00:54 +0000
asID:                     263263
IP address blocks:        200.33.128.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:ba:5c:15:12:7f:af:c9:f6:9e:e2:68:22:f1:fd:14:b5:bc:1e:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260
        Validity
            Not Before: May 16 11:55:54 2023 GMT
            Not After : May 14 12:00:54 2024 GMT
        Subject: CN=D95F0AC7514DBD201C8C7A83FA756E4C168765F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ca:41:07:0a:b6:83:b0:1f:77:8a:2f:9d:ae:
                    77:68:c2:7a:87:05:00:c5:3d:7c:04:0f:3f:59:d7:
                    ca:c3:5c:46:3a:51:50:ab:35:f9:43:1b:78:88:66:
                    17:3e:f3:83:92:1e:39:cd:02:e2:1b:b3:08:59:d0:
                    ba:f2:78:91:c3:77:13:a5:63:77:d5:26:de:5c:96:
                    5f:55:f6:43:b0:4f:86:6d:91:26:fd:04:3b:42:ec:
                    5e:7e:39:db:c5:82:81:2d:63:ed:bb:3f:3d:5c:02:
                    e7:1c:fd:4a:1f:50:dc:e6:6e:c6:88:3f:0a:5d:ba:
                    69:a1:a5:51:7a:24:56:53:47:00:a5:41:6d:b4:b5:
                    cf:8a:3e:39:c3:d4:73:00:ba:51:4b:8e:08:0f:8a:
                    dd:84:16:9c:c9:ad:eb:4d:c4:e8:4f:28:98:50:09:
                    4d:61:51:5f:29:c9:93:f8:cd:e1:a8:f5:78:18:e9:
                    7e:45:be:29:89:26:06:3e:c7:a7:55:eb:e6:1f:52:
                    44:98:32:a4:f8:2a:c0:c6:f8:e1:b3:82:b7:b2:06:
                    dc:85:60:07:a3:5b:60:13:34:78:d4:93:57:40:22:
                    6c:43:27:6c:91:f2:bc:59:ab:bc:31:24:bd:d5:8e:
                    5d:80:cf:a3:10:c1:a3:99:b5:de:a0:ce:6a:85:c4:
                    db:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:5F:0A:C7:51:4D:BD:20:1C:8C:7A:83:FA:75:6E:4C:16:87:65:F0
            X509v3 Authority Key Identifier:
                keyid:FE:FE:3F:5C:7F:4C:16:1E:B7:F1:3E:0C:B2:4B:88:29:FE:38:12:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3230302e33332e3132382e302f32332d3233203d3e20323633323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.128.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:ed:f1:8e:f5:10:a6:27:0e:4b:fb:08:9d:f7:39:cc:c3:66:
         38:3b:53:13:1d:3f:d7:d7:be:ce:50:9f:50:c5:c7:bd:d0:e7:
         c5:b6:cb:5c:4e:d2:e0:44:05:b2:cc:c9:c2:4e:a9:75:9d:6e:
         e4:72:8a:a5:87:1f:fb:4b:05:77:17:4f:bf:04:57:6b:d2:48:
         ca:84:7d:75:be:fc:0c:ab:3e:10:09:9e:e2:59:2c:64:13:c6:
         43:42:2c:c6:79:fe:80:af:b5:60:0c:b8:05:ef:63:12:25:61:
         30:23:d7:60:49:3d:c1:e2:76:75:74:ad:d8:31:13:73:5a:70:
         5c:43:ae:26:57:d6:70:d0:fc:70:d2:89:a4:ca:a0:7e:2f:a4:
         a5:d2:26:d1:3e:3b:9e:1a:59:a2:7e:39:4e:e9:22:2f:ef:8d:
         c5:07:b3:e3:1f:08:f1:f4:27:4d:df:d0:75:20:df:0a:cd:f6:
         6e:3c:7b:c1:94:df:39:f7:49:f3:4d:6f:61:d3:86:fc:ae:59:
         90:02:84:b2:85:2b:cb:bc:24:3c:f3:b4:bf:4e:3b:90:67:96:
         08:8c:83:2f:7b:cd:f5:1a:94:85:e9:59:c1:54:0e:d8:6d:25:
         25:15:29:f7:6a:04:29:3c:ee:52:a7:a3:df:d8:64:64:fa:50:
         e5:ee:74:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org