Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3230302e33332e3133322e302f32322d3232203d3e20323633323633.roa
File:                     3230302e33332e3133322e302f32322d3232203d3e20323633323633.roa (raw, json)
Hash identifier:          MGppazUl3iZfg8cjXj8UJhCtKY1XxAN1W9/k8ME80aE=
Subject key identifier:   9D:23:E0:16:34:A8:63:E7:D2:9F:2C:72:04:1B:C3:9D:1E:11:5A:2D
Certificate issuer:       /CN=FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260
Certificate serial:       6BFC7EDFE8F131812362FE65524F49D45AC2615B
Authority key identifier: FE:FE:3F:5C:7F:4C:16:1E:B7:F1:3E:0C:B2:4B:88:29:FE:38:12:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3230302e33332e3133322e302f32322d3232203d3e20323633323633.roa
Signing time:             Tue 16 May 2023 12:01:19 +0000
ROA not before:           Tue 16 May 2023 11:56:19 +0000
ROA not after:            Tue 14 May 2024 12:01:19 +0000
asID:                     263263
IP address blocks:        200.33.132.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:fc:7e:df:e8:f1:31:81:23:62:fe:65:52:4f:49:d4:5a:c2:61:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260
        Validity
            Not Before: May 16 11:56:19 2023 GMT
            Not After : May 14 12:01:19 2024 GMT
        Subject: CN=9D23E01634A863E7D29F2C72041BC39D1E115A2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:75:89:55:26:9f:f5:2d:47:f7:11:05:7d:15:
                    9d:42:f0:2c:d9:0d:e2:ce:64:66:69:65:f7:4b:28:
                    a5:4b:5e:9e:b6:14:a1:7c:11:09:83:3b:66:91:30:
                    4c:4e:ac:1d:f3:df:51:ce:18:5f:9c:65:41:c2:92:
                    d5:42:dc:b0:6b:47:2f:4f:9c:c2:d4:bd:8f:26:bd:
                    70:ca:9a:cf:b2:46:82:e6:85:52:cb:f5:75:05:e2:
                    6e:a7:c4:c2:56:d9:7e:5b:fe:fc:2c:b6:74:02:41:
                    ab:ae:04:3c:45:9e:c1:b0:1d:31:19:a7:41:58:dd:
                    7e:5e:ad:42:af:31:19:37:04:af:de:96:81:8b:40:
                    16:4b:fd:86:4a:59:57:d1:29:87:5b:b7:84:98:a9:
                    2f:4d:05:1d:67:1b:af:51:cb:71:70:47:ac:10:39:
                    50:81:97:74:73:89:15:fd:7e:82:1a:a9:80:8c:ec:
                    3d:5c:78:97:fc:b6:3a:cb:00:5c:4c:b0:82:78:16:
                    b5:ee:ef:a8:63:c5:54:b8:5b:86:cb:84:a5:07:f4:
                    95:d4:c6:cb:a8:bf:a9:06:b1:90:9e:02:4e:33:45:
                    41:3e:2b:0b:44:09:5c:51:33:0a:ac:75:d8:80:56:
                    a1:1a:2f:67:ea:f7:aa:85:8a:02:b3:43:59:f4:8b:
                    96:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:23:E0:16:34:A8:63:E7:D2:9F:2C:72:04:1B:C3:9D:1E:11:5A:2D
            X509v3 Authority Key Identifier:
                keyid:FE:FE:3F:5C:7F:4C:16:1E:B7:F1:3E:0C:B2:4B:88:29:FE:38:12:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3230302e33332e3133322e302f32322d3232203d3e20323633323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:64:c7:67:1f:47:f7:47:17:a0:94:d2:e4:62:31:f8:92:02:
         a3:f8:9d:3a:74:15:a7:b0:1d:47:3e:76:8b:7f:54:3f:59:77:
         27:7e:6a:2f:91:88:a5:69:13:b8:24:fe:78:9b:12:d4:01:8c:
         3f:df:46:c5:95:b2:d5:cd:16:2b:15:43:aa:fe:95:5e:a6:41:
         41:7f:c6:3b:ed:e4:98:d8:1f:6a:16:96:b3:07:ce:cd:f5:ff:
         b5:f7:5b:62:cd:ec:dc:7b:5c:60:c9:9c:94:63:0d:f7:8b:0a:
         e4:c5:0c:ea:a5:5f:6a:0a:a7:bd:c4:e3:3b:c9:d8:92:d4:e4:
         04:82:9f:38:fb:c7:27:81:e5:f5:84:41:13:7d:ef:1e:24:ee:
         c2:f3:1f:c6:31:dd:2f:54:bd:57:70:ac:55:9b:0a:d1:38:24:
         ce:21:1a:c5:a8:00:9f:95:95:eb:0a:55:fd:11:b6:22:19:a7:
         85:a6:43:eb:90:e4:de:c8:81:26:4b:1a:f1:47:75:f3:f3:7c:
         26:79:c0:6c:61:91:2f:88:41:1d:dd:92:f3:c4:ce:63:5b:7d:
         35:c7:d1:e5:67:75:5a:c4:2a:22:d8:14:c2:d5:85:b5:b9:42:
         51:4b:93:63:fe:6a:9c:9d:69:1a:f4:2d:00:ae:bc:83:dd:e0:
         53:a4:f4:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:58 2024 by rpki-client on console-ams.rpki-client.org