Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3230302e33332e3132382e302f32342d3234203d3e20323633323633.roa
File:                     3230302e33332e3132382e302f32342d3234203d3e20323633323633.roa (raw, json)
Hash identifier:          UInqGjSz8XmzNC3F/RmpL+65D8dg8Tb1/sY81BuOU7g=
Subject key identifier:   7C:BF:79:C9:3C:08:CB:C9:B8:98:E7:7F:5B:D3:85:75:3F:D0:80:F7
Certificate issuer:       /CN=FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260
Certificate serial:       0281EC28A6A9BBB92D82602DF41EA0137E07C270
Authority key identifier: FE:FE:3F:5C:7F:4C:16:1E:B7:F1:3E:0C:B2:4B:88:29:FE:38:12:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3230302e33332e3132382e302f32342d3234203d3e20323633323633.roa
Signing time:             Tue 16 May 2023 12:00:58 +0000
ROA not before:           Tue 16 May 2023 11:55:58 +0000
ROA not after:            Tue 14 May 2024 12:00:58 +0000
asID:                     263263
IP address blocks:        200.33.128.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:81:ec:28:a6:a9:bb:b9:2d:82:60:2d:f4:1e:a0:13:7e:07:c2:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260
        Validity
            Not Before: May 16 11:55:58 2023 GMT
            Not After : May 14 12:00:58 2024 GMT
        Subject: CN=7CBF79C93C08CBC9B898E77F5BD385753FD080F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:0a:46:00:2a:87:fd:5b:25:40:4b:70:19:bd:
                    37:da:83:38:1a:2b:d0:84:35:9f:4c:71:8e:da:a0:
                    8f:cf:24:3b:f8:d2:90:f0:41:9b:b1:ad:1a:54:96:
                    b6:25:4b:ca:5f:cf:ea:6b:2f:d8:b0:d6:7d:44:e0:
                    7a:a5:13:9a:1e:ec:db:bd:d8:43:40:6f:2d:ed:83:
                    67:b2:68:36:8d:a0:59:e3:07:d1:06:ef:c1:8d:b5:
                    f7:81:66:7d:f2:c8:2a:62:c2:ac:7d:57:a2:21:89:
                    92:c7:cb:e7:04:54:39:97:0b:88:eb:2c:93:25:8e:
                    b2:59:7d:7e:91:0b:1c:7b:d3:17:1f:45:fd:44:1c:
                    3b:a9:1b:42:ce:74:2d:ee:46:96:93:8f:1b:80:da:
                    9a:99:7f:e6:63:b6:c7:48:d4:34:13:3c:ea:af:db:
                    b9:11:e7:da:fa:1e:47:01:ee:24:c0:e5:33:64:b9:
                    9a:a2:49:16:d0:db:7e:f5:7c:39:30:7f:69:47:ef:
                    52:3b:6b:d4:6e:3b:9c:51:0c:17:10:78:42:97:6b:
                    b7:b1:d3:f7:96:1c:ff:c6:ef:f9:d6:9a:d6:98:e4:
                    9b:30:f3:4f:1b:4f:e9:ab:3e:2c:4c:f4:46:16:42:
                    48:7a:89:bc:ab:c6:92:25:14:5b:28:9c:86:a7:2e:
                    25:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:BF:79:C9:3C:08:CB:C9:B8:98:E7:7F:5B:D3:85:75:3F:D0:80:F7
            X509v3 Authority Key Identifier:
                keyid:FE:FE:3F:5C:7F:4C:16:1E:B7:F1:3E:0C:B2:4B:88:29:FE:38:12:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3230302e33332e3132382e302f32342d3234203d3e20323633323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:de:b4:28:1e:1d:8a:2c:c3:5f:28:ee:f3:43:cd:8c:12:87:
         d8:a2:ab:4c:68:64:3a:27:03:70:44:b5:ad:c4:61:4c:84:bc:
         27:04:4d:0b:c1:40:b2:23:c4:90:18:6f:5b:e0:7b:97:86:eb:
         f6:f2:9f:3f:39:65:aa:0c:fc:1f:86:87:27:3a:11:19:c9:db:
         e4:6b:7d:de:f5:ab:de:74:9c:56:86:d1:c8:eb:c0:59:18:27:
         7c:65:18:59:81:cf:b2:7b:40:51:80:a3:a2:92:51:dd:4c:81:
         e4:b3:20:4b:f7:7d:3b:b1:56:31:bb:ef:69:a8:0b:85:2d:d5:
         a1:fe:57:86:9a:50:bb:f3:5c:56:18:23:7d:3a:52:19:cf:72:
         96:7b:52:18:18:4d:6b:f2:e5:90:d3:5a:6b:29:75:46:01:f8:
         4c:70:dc:c0:f7:7f:71:dc:34:1b:2f:47:49:0b:0a:d5:db:a1:
         75:7d:6f:87:f3:b8:53:06:a9:8d:41:58:b2:e4:81:74:50:2f:
         70:c0:7e:88:18:08:fa:a1:1a:ea:54:f7:98:79:21:3f:9e:e8:
         99:33:9f:b6:f1:10:17:14:9f:32:0d:8c:10:4e:8b:9a:cb:b6:
         51:d3:4e:3e:37:34:83:ca:a8:e9:18:6d:92:75:67:3a:4d:41:
         d6:b1:26:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org