Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3230302e33332e3133302e302f32342d3234203d3e20323633323633.roa
File:                     3230302e33332e3133302e302f32342d3234203d3e20323633323633.roa (raw, json)
Hash identifier:          FBzHobI0AvErwc3GNyB1sl0OK8/h03mMtuwJHeyryII=
Subject key identifier:   50:17:C0:98:19:C0:7F:32:3E:74:AC:0C:7C:51:63:DE:61:2B:41:1E
Certificate issuer:       /CN=FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260
Certificate serial:       0ACF1625D9891465CD8BD6847712CD6B7EA6C7A5
Authority key identifier: FE:FE:3F:5C:7F:4C:16:1E:B7:F1:3E:0C:B2:4B:88:29:FE:38:12:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3230302e33332e3133302e302f32342d3234203d3e20323633323633.roa
Signing time:             Tue 16 May 2023 12:01:12 +0000
ROA not before:           Tue 16 May 2023 11:56:12 +0000
ROA not after:            Tue 14 May 2024 12:01:12 +0000
asID:                     263263
IP address blocks:        200.33.130.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:cf:16:25:d9:89:14:65:cd:8b:d6:84:77:12:cd:6b:7e:a6:c7:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260
        Validity
            Not Before: May 16 11:56:12 2023 GMT
            Not After : May 14 12:01:12 2024 GMT
        Subject: CN=5017C09819C07F323E74AC0C7C5163DE612B411E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:1f:0e:64:11:0b:ff:33:e0:9c:00:b3:39:93:
                    f8:6f:6d:99:70:73:96:a7:13:ac:15:97:64:ef:25:
                    b9:cf:39:d0:aa:86:90:f8:5f:6a:19:f5:22:22:3f:
                    5e:d8:b2:42:e3:90:4b:0a:d9:93:d7:00:b2:ef:be:
                    57:76:a2:f1:99:61:19:1a:b6:09:6b:67:fa:c4:48:
                    b3:10:e0:76:3d:69:27:19:6e:f9:97:84:2e:05:e5:
                    f4:88:06:a7:ba:6c:b8:fe:bd:b5:ee:b6:b7:a2:af:
                    97:f8:93:f6:fd:04:b5:b0:4f:60:88:d7:fc:4e:52:
                    a1:35:94:80:f6:fa:b0:71:86:d2:e7:fe:99:ab:d7:
                    f8:7e:e7:4e:9c:46:c6:7c:2f:bf:72:16:e9:e3:d0:
                    77:d1:ed:4a:f5:d0:f3:05:8a:6a:df:54:7f:35:91:
                    fc:d0:c1:69:f1:87:8c:31:5a:0a:aa:f9:3b:40:22:
                    2f:e5:19:f5:05:25:df:74:79:ce:cb:b6:b8:84:da:
                    aa:58:58:24:73:da:bf:71:de:91:45:a3:b8:99:5f:
                    23:08:ae:38:ca:f9:9a:6a:ae:92:00:48:73:67:73:
                    e6:38:e2:f1:e3:70:f0:a6:0c:b5:af:60:1a:19:1d:
                    70:f8:f5:ff:29:49:76:28:7c:1f:3e:9c:f7:1c:60:
                    90:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:17:C0:98:19:C0:7F:32:3E:74:AC:0C:7C:51:63:DE:61:2B:41:1E
            X509v3 Authority Key Identifier:
                keyid:FE:FE:3F:5C:7F:4C:16:1E:B7:F1:3E:0C:B2:4B:88:29:FE:38:12:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3230302e33332e3133302e302f32342d3234203d3e20323633323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:a0:2d:2b:e6:7c:f4:ae:16:ba:18:e6:b0:ee:e8:3f:15:94:
         d4:06:f3:bb:82:a4:8a:ac:13:54:c5:98:cc:46:d1:aa:3a:5f:
         9f:60:5e:5b:0e:f0:90:da:31:f3:5e:f3:8a:11:a8:bd:7e:e7:
         b3:6d:a6:ee:0e:c9:2f:60:6b:e4:eb:e4:6b:6b:cc:eb:c2:a4:
         90:cf:82:75:e8:f0:c0:af:e2:6c:7a:7a:6b:04:e8:f6:04:1d:
         a9:42:67:b3:e1:9a:57:d1:ec:ec:08:51:2b:07:f8:f0:d2:21:
         ae:26:a5:b9:61:ad:0d:11:bd:36:5e:81:80:1c:a5:04:bb:ef:
         8d:8f:46:9c:25:34:55:28:10:88:a2:0b:c2:62:9b:02:bb:95:
         13:3b:99:c6:00:64:d0:51:ab:77:6d:c9:3e:c4:87:00:df:07:
         23:4a:ba:5d:cd:38:36:b6:0c:20:88:4d:7c:7c:1d:9d:e6:5e:
         fb:45:af:2b:20:d5:c7:b0:7f:2f:93:57:36:d9:32:be:5a:c3:
         20:d8:49:2c:c7:86:d7:70:24:c0:05:64:37:7d:fe:70:47:7c:
         46:dd:6b:f9:e8:23:5c:75:7c:e0:2d:26:65:80:85:b4:f6:5d:
         c9:3d:b3:53:d4:49:2a:1d:e7:33:0d:b1:67:0d:f5:7f:82:73:
         b2:3b:07:78
-----BEGIN CERTIFICATE-----
MIIFRzCCBC+gAwIBAgIUCs8WJdmJFGXNi9aEdxLNa36mx6UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkVGRTNGNUM3RjRDMTYxRUI3RjEzRTBDQjI0Qjg4MjlG
RTM4MTI2MDAeFw0yMzA1MTYxMTU2MTJaFw0yNDA1MTQxMjAxMTJaMDMxMTAvBgNV
BAMTKDUwMTdDMDk4MTlDMDdGMzIzRTc0QUMwQzdDNTE2M0RFNjEyQjQxMUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaHw5kEQv/M+CcALM5k/hvbZlw
c5anE6wVl2TvJbnPOdCqhpD4X2oZ9SIiP17YskLjkEsK2ZPXALLvvld2ovGZYRka
tglrZ/rESLMQ4HY9aScZbvmXhC4F5fSIBqe6bLj+vbXutreir5f4k/b9BLWwT2CI
1/xOUqE1lID2+rBxhtLn/pmr1/h+506cRsZ8L79yFunj0HfR7Ur10PMFimrfVH81
kfzQwWnxh4wxWgqq+TtAIi/lGfUFJd90ec7LtriE2qpYWCRz2r9x3pFFo7iZXyMI
rjjK+ZpqrpIASHNnc+Y44vHjcPCmDLWvYBoZHXD49f8pSXYofB8+nPccYJC/AgMB
AAGjggJRMIICTTAdBgNVHQ4EFgQUUBfAmBnAfzI+dKwMfFFj3mErQR4wHwYDVR0j
BBgwFoAU/v4/XH9MFh638T4MskuIKf44EmAwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNDVDVEZuOHdudTRveXNqWUozTFNRZHRLOFBIbnhObTVtRDRWSFl2SDlD
aUQvMC9GRUZFM0Y1QzdGNEMxNjFFQjdGMTNFMENCMjRCODgyOUZFMzgxMjYwLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0ZFRkUzRjVDN0Y0QzE2MUVC
N0YxM0UwQ0IyNEI4ODI5RkUzODEyNjAuY2VyMIGuBggrBgEFBQcBCwSBoTCBnjCB
mwYIKwYBBQUHMAuGgY5yc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzQ1Q1RGbjh3bnU0b3lzallKM0xTUWR0SzhQSG54Tm01bUQ0VkhZdkg5Q2lELzAv
MzIzMDMwMmUzMzMzMmUzMTMzMzAyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMjM2
MzMzMjM2MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBADIIYIwDQYJKoZIhvcNAQELBQADggEBAEqgLSvm
fPSuFroY5rDu6D8VlNQG87uCpIqsE1TFmMxG0ao6X59gXlsO8JDaMfNe84oRqL1+
57Ntpu4OyS9ga+Tr5GtrzOvCpJDPgnXo8MCv4mx6emsE6PYEHalCZ7PhmlfR7OwI
USsH+PDSIa4mpblhrQ0RvTZegYAcpQS7742PRpwlNFUoEIiiC8JimwK7lRM7mcYA
ZNBRq3dtyT7EhwDfByNKul3NODa2DCCITXx8HZ3mXvtFrysg1cewfy+TVzbZMr5a
wyDYSSzHhtdwJMAFZDd9/nBHfEbda/noI1x1fOAtJmWAhbT2Xck9s1PUSSod5zMN
sWcN9X+Cc7I7B3g=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:40 2024 by rpki-client on console-fra.rpki-client.org