Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3230302e33332e3132392e302f32342d3234203d3e20323633323633.roa
File:                     3230302e33332e3132392e302f32342d3234203d3e20323633323633.roa (raw, json)
Hash identifier:          lufrJUHflrGc1QfukrONz1DS55Gc2TybaNlucoRVutQ=
Subject key identifier:   AC:4A:AA:60:EC:3D:2A:7C:D9:7F:D9:4E:C7:D0:78:7B:B9:AD:CA:33
Certificate issuer:       /CN=FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260
Certificate serial:       40538A3F88A7A0188F14008AA213408F379FB686
Authority key identifier: FE:FE:3F:5C:7F:4C:16:1E:B7:F1:3E:0C:B2:4B:88:29:FE:38:12:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3230302e33332e3132392e302f32342d3234203d3e20323633323633.roa
Signing time:             Tue 16 May 2023 12:01:05 +0000
ROA not before:           Tue 16 May 2023 11:56:05 +0000
ROA not after:            Tue 14 May 2024 12:01:05 +0000
asID:                     263263
IP address blocks:        200.33.129.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:53:8a:3f:88:a7:a0:18:8f:14:00:8a:a2:13:40:8f:37:9f:b6:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260
        Validity
            Not Before: May 16 11:56:05 2023 GMT
            Not After : May 14 12:01:05 2024 GMT
        Subject: CN=AC4AAA60EC3D2A7CD97FD94EC7D0787BB9ADCA33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:43:52:1b:ba:97:1d:c7:e2:d1:29:09:ee:f7:
                    c7:02:df:67:d1:af:57:7b:9d:19:10:06:3a:ba:f4:
                    3e:83:a3:a3:6c:7e:25:34:f8:92:a6:1d:0a:6e:13:
                    da:2b:ba:7c:d3:f1:87:f6:72:19:61:9d:e1:c2:bf:
                    a9:af:74:39:f0:88:71:53:91:1a:39:36:b9:91:b5:
                    da:8e:5d:fe:8f:29:aa:fe:e7:48:66:fd:13:d2:8e:
                    19:0d:ae:ef:a8:61:df:64:a1:ea:b2:c8:7a:51:e3:
                    4f:a6:e3:80:c9:8a:fa:44:5b:d6:0a:0d:c0:98:08:
                    24:07:b0:ba:2a:22:34:44:48:0e:ae:ea:de:e1:2a:
                    eb:25:ee:24:a8:cf:3c:7b:26:33:ec:3f:20:24:4b:
                    6f:df:65:f5:7d:f8:4a:16:fa:a3:ed:36:a9:3a:0d:
                    3c:43:c3:c3:7e:53:cd:30:54:37:f1:e3:d9:b0:5c:
                    33:22:07:c7:77:44:cb:a9:c9:6a:7f:48:91:2b:18:
                    ec:b9:13:35:22:7a:70:6b:b1:0e:3a:5c:e5:6d:bc:
                    5b:6b:1f:c0:2f:50:99:1d:74:5c:a2:f5:aa:c9:05:
                    33:57:f1:14:19:46:69:9b:59:03:69:30:d5:75:e1:
                    ab:19:a2:3f:5d:30:3f:78:23:44:16:ec:58:0c:2f:
                    81:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:4A:AA:60:EC:3D:2A:7C:D9:7F:D9:4E:C7:D0:78:7B:B9:AD:CA:33
            X509v3 Authority Key Identifier:
                keyid:FE:FE:3F:5C:7F:4C:16:1E:B7:F1:3E:0C:B2:4B:88:29:FE:38:12:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3230302e33332e3132392e302f32342d3234203d3e20323633323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:d6:0f:39:58:fb:cb:12:66:6b:fb:18:a5:1e:92:47:93:75:
         8c:04:5e:56:95:57:81:6b:43:a1:cf:e0:d7:df:05:a4:c8:95:
         ad:7c:87:d8:3b:64:cf:ec:cd:76:aa:e7:05:89:00:d5:b5:50:
         e5:9c:18:54:cb:66:74:04:3f:41:a7:b6:4d:a7:f1:7e:a2:a1:
         66:66:fb:f5:f9:87:87:ed:e5:0d:32:34:96:52:68:57:51:ed:
         08:f3:8b:62:03:a3:43:5e:fb:61:3e:5c:8d:6b:96:a5:66:58:
         d0:a0:76:04:f0:40:d6:e7:0c:80:4f:5b:62:e5:c3:64:e0:2a:
         cd:e2:4e:6e:32:43:7e:ec:a8:c6:f4:b5:e7:09:d1:67:9b:cb:
         7f:8d:99:86:20:ae:fe:3b:45:48:00:07:bc:ba:c2:9e:70:6d:
         5b:b2:44:aa:59:b8:0e:f4:7e:03:fe:3c:bb:4e:e4:22:d5:ad:
         a6:cc:e6:ac:cd:4b:c8:25:5a:3d:7d:76:68:ab:25:94:33:36:
         a1:07:b5:86:e0:c4:62:8e:06:4f:89:a4:a8:33:cc:ff:93:6d:
         6c:58:bd:7a:ba:1c:c9:0c:cf:11:7b:e0:b8:6f:61:92:bf:93:
         60:fa:ed:c0:dc:86:69:5d:d9:77:32:6f:b9:a5:6a:14:71:71:
         33:cf:7f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:40 2024 by rpki-client on console-fra.rpki-client.org