Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3230302e33332e3133322e302f32332d3233203d3e20323633323633.roa
File:                     3230302e33332e3133322e302f32332d3233203d3e20323633323633.roa (raw, json)
Hash identifier:          nPLHH1ZeEMc/LS1zAwq+KxUU0G+YnDGdacv/kZhXoiY=
Subject key identifier:   05:C7:E5:8D:1E:FA:53:FD:10:C6:75:F7:9D:D1:E1:9E:DB:B2:08:74
Certificate issuer:       /CN=FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260
Certificate serial:       986003A0218A8CC89D227F5C99FE7A283F4093
Authority key identifier: FE:FE:3F:5C:7F:4C:16:1E:B7:F1:3E:0C:B2:4B:88:29:FE:38:12:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3230302e33332e3133322e302f32332d3233203d3e20323633323633.roa
Signing time:             Tue 16 May 2023 12:01:23 +0000
ROA not before:           Tue 16 May 2023 11:56:23 +0000
ROA not after:            Tue 14 May 2024 12:01:23 +0000
asID:                     263263
IP address blocks:        200.33.132.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            98:60:03:a0:21:8a:8c:c8:9d:22:7f:5c:99:fe:7a:28:3f:40:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260
        Validity
            Not Before: May 16 11:56:23 2023 GMT
            Not After : May 14 12:01:23 2024 GMT
        Subject: CN=05C7E58D1EFA53FD10C675F79DD1E19EDBB20874
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8d:9d:18:6e:92:6d:ed:df:d7:2b:e4:30:9e:
                    72:b1:3a:a4:a3:f1:73:81:e5:60:1a:75:60:01:aa:
                    b1:79:30:4d:7a:e4:93:a0:90:32:b2:5e:be:78:0f:
                    51:c6:5e:7e:67:63:6c:fd:0c:76:3f:4a:a6:93:af:
                    27:cf:c8:22:06:dd:ba:1f:f2:47:86:d5:9d:bd:11:
                    cf:8e:bc:d3:c5:bb:01:a4:97:ea:b7:a9:a2:e1:54:
                    54:a0:05:bf:e1:d9:cd:3b:b9:4a:4b:7a:1f:3b:46:
                    4e:4f:f5:1d:6c:b6:be:93:b0:70:3f:38:42:06:ab:
                    17:76:84:d3:18:c7:bf:05:d7:68:22:ab:ee:e2:f8:
                    5f:10:f7:26:c3:88:d6:33:1c:cf:54:78:4c:63:ce:
                    5f:94:86:2d:1b:0d:dc:75:ec:28:99:c8:5d:f9:25:
                    41:f8:fb:5d:45:ed:80:e9:d3:44:6b:5c:de:27:2c:
                    46:7e:69:3d:3f:cb:0a:07:b4:5a:28:f3:56:eb:8c:
                    17:ae:b5:04:b3:05:51:9c:0c:b2:c6:17:16:46:68:
                    48:53:b6:6c:15:73:2a:e7:49:98:72:57:aa:7d:03:
                    fe:c0:1d:d1:aa:0e:c4:40:a4:b7:de:1e:ed:51:94:
                    63:97:c8:3f:e9:c2:9b:77:5c:59:74:30:02:28:4a:
                    a9:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C7:E5:8D:1E:FA:53:FD:10:C6:75:F7:9D:D1:E1:9E:DB:B2:08:74
            X509v3 Authority Key Identifier:
                keyid:FE:FE:3F:5C:7F:4C:16:1E:B7:F1:3E:0C:B2:4B:88:29:FE:38:12:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3230302e33332e3133322e302f32332d3233203d3e20323633323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:67:7b:ef:72:d0:ca:8a:8c:69:6a:29:4b:a1:a4:9c:7d:e5:
         a3:a5:f0:eb:0c:a8:7c:89:98:41:79:5a:ba:c9:c8:ce:25:fb:
         16:9c:b5:38:8c:a6:a0:09:10:53:9e:60:4e:76:cd:62:1e:64:
         db:df:5e:e9:1b:16:fa:d5:58:98:e8:38:0a:9a:ce:39:32:11:
         52:a1:54:43:96:ef:ac:0c:4f:42:c6:a6:54:d2:f4:6f:2d:3d:
         22:4e:70:34:69:b2:a7:8c:e8:ff:ed:61:49:81:e6:81:cf:fd:
         79:d5:f0:64:fc:c4:be:3f:27:d9:f5:0f:dc:e2:c6:e7:ff:cd:
         4b:12:57:b3:36:55:a0:48:c9:d1:65:f3:12:f1:dc:38:17:d3:
         aa:de:fe:c2:c7:e0:73:93:fe:60:f1:c8:43:85:c2:9b:60:96:
         17:90:dd:6b:a9:25:32:4d:f6:a9:a5:f4:07:fe:4f:db:43:7f:
         9d:57:b6:a2:7d:05:46:70:41:0d:37:ee:2e:5a:2f:bd:30:8b:
         73:61:c2:db:64:c0:b4:fd:69:45:a2:5b:a0:f5:bf:e2:f9:ac:
         26:2f:ed:8b:91:04:bf:ef:a2:5d:7c:5e:80:ae:46:f7:33:e5:
         2e:2c:f1:1d:35:b8:4c:a4:f4:70:7e:e9:ab:93:62:e1:1b:e1:
         1b:1d:4c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:40 2024 by rpki-client on console-fra.rpki-client.org