Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3230302e33332e3133312e302f32342d3234203d3e20323633323633.roa
File:                     3230302e33332e3133312e302f32342d3234203d3e20323633323633.roa (raw, json)
Hash identifier:          1XLAX1VBq+d+EWMTZGcpSX4NcYwizj1+XviHyckecvo=
Subject key identifier:   24:56:95:24:21:26:99:4B:56:FE:9B:86:F7:23:68:96:32:35:20:20
Certificate issuer:       /CN=FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260
Certificate serial:       6F33457853A6A977AEA8EBA9DCB32DB9B9CFD937
Authority key identifier: FE:FE:3F:5C:7F:4C:16:1E:B7:F1:3E:0C:B2:4B:88:29:FE:38:12:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3230302e33332e3133312e302f32342d3234203d3e20323633323633.roa
Signing time:             Tue 16 May 2023 12:01:16 +0000
ROA not before:           Tue 16 May 2023 11:56:16 +0000
ROA not after:            Tue 14 May 2024 12:01:16 +0000
asID:                     263263
IP address blocks:        200.33.131.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:33:45:78:53:a6:a9:77:ae:a8:eb:a9:dc:b3:2d:b9:b9:cf:d9:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260
        Validity
            Not Before: May 16 11:56:16 2023 GMT
            Not After : May 14 12:01:16 2024 GMT
        Subject: CN=245695242126994B56FE9B86F723689632352020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a6:a0:10:95:20:fb:7e:69:43:5d:66:d6:c3:
                    ac:e0:ee:52:44:8e:db:03:33:38:74:ae:b1:0b:ab:
                    71:a6:33:4a:d5:12:39:7a:0c:cc:5e:29:83:ab:53:
                    d5:40:d7:1a:03:ed:40:bb:06:79:f0:e6:82:a5:21:
                    c3:88:57:1d:dd:47:cc:49:e7:41:b3:51:44:2a:fc:
                    99:6d:40:81:08:c4:34:a1:f9:17:c7:8f:69:9d:c2:
                    3f:fd:d5:c1:6b:70:ff:83:cf:29:05:a1:6b:41:97:
                    f7:e0:a0:5d:65:7c:ca:82:6b:f3:71:7b:49:64:4a:
                    a1:bd:e5:e7:b1:ac:7b:ef:ea:dc:3e:b4:13:48:58:
                    f0:24:a6:88:35:8d:e7:c5:af:91:6f:0c:89:b1:a6:
                    db:2c:43:4b:bc:36:81:7e:99:06:3c:3c:37:ee:4c:
                    ab:6b:d8:b8:93:a4:76:1c:c6:f6:95:94:58:00:65:
                    8d:6d:35:15:e0:46:2e:6c:73:ec:00:a1:25:61:90:
                    b5:a6:80:78:f3:e3:99:9d:7c:00:04:09:2f:4c:b3:
                    11:e3:1a:8f:96:d9:00:c1:7f:75:48:89:79:c1:00:
                    fd:d1:84:f9:2d:7c:a1:20:95:34:fc:e2:5c:09:03:
                    ca:6a:90:5c:3e:8c:cf:12:f2:56:f4:fb:df:9d:02:
                    21:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:56:95:24:21:26:99:4B:56:FE:9B:86:F7:23:68:96:32:35:20:20
            X509v3 Authority Key Identifier:
                keyid:FE:FE:3F:5C:7F:4C:16:1E:B7:F1:3E:0C:B2:4B:88:29:FE:38:12:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3230302e33332e3133312e302f32342d3234203d3e20323633323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:ed:a2:f5:28:76:61:0c:13:d0:57:fe:4a:06:48:71:a5:ba:
         57:62:80:59:b6:87:89:96:73:c2:23:cb:88:72:f4:ae:a1:45:
         45:2a:81:32:ba:b8:b7:ad:6f:75:81:bb:16:da:ba:e0:94:e0:
         5e:e0:50:b7:a1:6e:27:1e:7d:79:cd:4c:24:b1:82:15:3a:cb:
         a9:65:76:3a:e7:ee:13:23:c0:0e:41:a5:90:b7:f4:d6:78:cb:
         f3:f9:e2:d1:c4:be:be:7a:35:8a:9e:0b:ef:f9:ab:53:63:50:
         fe:13:cd:73:74:0b:0e:35:df:65:c3:ee:dc:20:41:c6:28:58:
         6e:92:68:9c:ce:07:e3:95:6c:24:31:17:b6:64:90:43:dd:ff:
         9d:4d:39:dd:ab:64:66:72:f8:d2:f1:9c:d5:d0:92:ed:68:3c:
         7e:8f:10:e2:99:42:ff:39:7d:65:1f:23:b6:28:55:9d:e1:83:
         92:7c:67:22:19:00:0e:21:27:1b:65:47:d1:be:8d:f1:38:96:
         6b:f5:29:3f:da:c2:6f:89:e1:67:22:1f:16:ba:ee:5e:e0:1d:
         69:ca:9c:fb:73:aa:de:b8:31:84:bc:dc:b6:4d:7f:b3:e8:ee:
         19:8f:0d:8a:53:88:d9:76:39:04:8e:93:42:c5:9d:64:34:40:
         15:1d:fe:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:58 2024 by rpki-client on console-ams.rpki-client.org