Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3230302e33332e3133302e302f32332d3233203d3e20323633323633.roa
File:                     3230302e33332e3133302e302f32332d3233203d3e20323633323633.roa (raw, json)
Hash identifier:          S9y2VzrKp22HgEnkoafX7AVADLEr4zb2jOL6zhW1VDY=
Subject key identifier:   45:9A:9F:B4:A4:32:2F:0D:FE:3F:F6:C5:F1:93:43:B7:F8:61:DF:7F
Certificate issuer:       /CN=FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260
Certificate serial:       40DD93C29A2E2CFC9AFBBA802C3CEBA5898B7127
Authority key identifier: FE:FE:3F:5C:7F:4C:16:1E:B7:F1:3E:0C:B2:4B:88:29:FE:38:12:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3230302e33332e3133302e302f32332d3233203d3e20323633323633.roa
Signing time:             Tue 16 May 2023 12:01:08 +0000
ROA not before:           Tue 16 May 2023 11:56:08 +0000
ROA not after:            Tue 14 May 2024 12:01:08 +0000
asID:                     263263
IP address blocks:        200.33.130.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:dd:93:c2:9a:2e:2c:fc:9a:fb:ba:80:2c:3c:eb:a5:89:8b:71:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260
        Validity
            Not Before: May 16 11:56:08 2023 GMT
            Not After : May 14 12:01:08 2024 GMT
        Subject: CN=459A9FB4A4322F0DFE3FF6C5F19343B7F861DF7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9a:16:56:12:7a:2d:d0:46:5a:58:23:af:40:
                    5f:64:06:6a:0a:54:f6:5a:ca:1d:e0:6f:14:d6:25:
                    72:08:aa:7c:50:50:b4:b3:2d:91:18:d2:ad:ff:56:
                    86:0e:0d:61:84:40:bf:1a:83:50:48:1c:cd:55:6b:
                    c7:04:ce:f9:61:da:85:37:6c:f9:99:97:22:fd:10:
                    df:fa:b3:d2:76:74:7e:72:1e:f7:18:6f:32:c2:f1:
                    25:b2:af:4f:d2:0e:4c:55:4a:c3:40:7d:22:aa:ae:
                    4d:70:86:a0:1f:2b:20:a5:94:46:63:e5:56:ad:d0:
                    39:02:dd:01:44:a3:00:4e:0b:4d:0b:55:9a:b6:95:
                    6c:b9:08:ed:af:5e:7d:6c:b3:71:ba:0c:65:a1:80:
                    b9:ec:5a:4e:ba:04:df:a1:02:57:e8:2c:93:88:0a:
                    ce:59:e7:f2:90:a1:e1:9c:5c:8f:29:d1:d6:ca:6b:
                    e2:dc:83:7d:05:89:f8:ff:e4:5a:e0:48:46:1c:3f:
                    76:f4:3e:e7:a2:c1:fa:01:c9:20:db:6d:65:c8:89:
                    a6:25:32:2a:4d:8d:94:9a:ae:0d:d9:df:f2:41:c5:
                    cb:10:d5:bc:38:93:fa:2f:67:f1:b8:e6:7d:10:49:
                    a3:13:e8:67:d2:91:60:50:01:aa:f4:0b:78:bc:ab:
                    5e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:9A:9F:B4:A4:32:2F:0D:FE:3F:F6:C5:F1:93:43:B7:F8:61:DF:7F
            X509v3 Authority Key Identifier:
                keyid:FE:FE:3F:5C:7F:4C:16:1E:B7:F1:3E:0C:B2:4B:88:29:FE:38:12:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3230302e33332e3133302e302f32332d3233203d3e20323633323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         38:04:53:12:b0:ba:5b:0f:39:11:ea:29:81:94:06:63:1c:a3:
         04:9c:29:81:d1:6e:6e:6c:d0:7c:86:16:a7:fb:72:5f:6b:4f:
         a6:8a:96:bb:7c:92:5b:9e:fe:ac:26:53:5b:4a:c0:aa:05:f0:
         70:5d:78:be:26:5d:2c:27:51:5f:ca:63:da:f4:4c:a9:76:4e:
         b1:fb:57:e5:3c:72:2e:37:03:2c:aa:82:b4:e1:2a:f4:2a:01:
         6a:e4:c2:7a:38:7d:a8:cb:a7:b7:9b:54:0b:d1:a2:a2:40:e3:
         4f:67:28:97:72:28:47:5c:36:17:b8:96:2e:1c:fb:e0:24:84:
         81:1d:e2:5c:8c:b4:fc:f9:46:2c:4a:dd:94:5a:91:3c:b0:4d:
         f0:ad:60:2d:1c:2b:7e:da:4e:aa:02:39:f1:62:c2:cd:11:7e:
         52:7b:21:d4:db:62:ef:a0:7b:50:91:6e:1a:cc:7c:8f:36:29:
         4e:51:a4:86:6c:17:95:82:0f:c2:cb:27:33:21:82:ee:15:f0:
         9b:6b:75:86:6a:13:4f:25:6f:8c:99:59:cb:14:89:5b:64:04:
         d9:4c:2c:a6:77:18:f5:db:24:cc:25:67:c0:21:71:d3:0a:c7:
         c0:14:47:59:ef:6e:a2:c8:47:0f:25:0c:f3:32:e3:f4:0d:0b:
         4f:df:20:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 14 04:54:32 2025 by rpki-client