Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3230302e33332e3133322e302f32342d3234203d3e20323633323633.roa
File:                     3230302e33332e3133322e302f32342d3234203d3e20323633323633.roa (raw, json)
Hash identifier:          NJ+ayQV1crWPGkelZe/DKyv1Dr4iM91DpRGXzZlhPrk=
Subject key identifier:   83:B6:80:36:8B:F2:27:0B:64:D3:FA:F4:89:38:A1:10:B9:B5:EB:DD
Certificate issuer:       /CN=FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260
Certificate serial:       5B74C51FB47717D71A9F5D4186132A72594B3F98
Authority key identifier: FE:FE:3F:5C:7F:4C:16:1E:B7:F1:3E:0C:B2:4B:88:29:FE:38:12:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3230302e33332e3133322e302f32342d3234203d3e20323633323633.roa
Signing time:             Tue 16 May 2023 12:01:27 +0000
ROA not before:           Tue 16 May 2023 11:56:27 +0000
ROA not after:            Tue 14 May 2024 12:01:27 +0000
asID:                     263263
IP address blocks:        200.33.132.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:74:c5:1f:b4:77:17:d7:1a:9f:5d:41:86:13:2a:72:59:4b:3f:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260
        Validity
            Not Before: May 16 11:56:27 2023 GMT
            Not After : May 14 12:01:27 2024 GMT
        Subject: CN=83B680368BF2270B64D3FAF48938A110B9B5EBDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b0:37:4a:41:e7:c2:53:fe:e3:02:3d:f5:07:
                    69:d5:86:7e:0d:14:7c:c3:aa:52:6b:92:f1:d9:de:
                    96:b0:33:ac:28:75:2f:5e:73:ba:a9:e5:7c:3a:b4:
                    66:fa:56:80:cb:42:d3:bb:5a:bc:b1:b4:c9:a7:54:
                    e3:da:61:11:9d:51:81:11:dd:2d:d4:1f:e2:82:13:
                    e5:e6:60:01:d4:c7:f8:d5:e1:92:45:82:09:3c:65:
                    79:c0:79:3d:cd:1a:b7:53:03:c5:cf:9a:80:07:71:
                    12:a3:ff:57:e6:41:3a:5e:32:b9:fe:91:56:2e:0e:
                    8b:5a:86:0d:f6:60:a6:11:3c:c6:eb:26:55:9d:c3:
                    92:3b:82:15:6a:16:dc:fc:24:e3:6b:88:d2:dd:c4:
                    25:6b:e9:33:10:8b:b8:f2:e6:c8:bf:f3:64:33:ad:
                    ee:b4:e2:c9:dc:e4:f2:e2:a7:01:a4:8c:e1:e6:95:
                    ad:10:39:63:bf:ab:92:dd:aa:ba:b2:6d:c6:90:5a:
                    48:80:dd:a1:46:8d:78:db:91:6d:6a:44:90:d7:c2:
                    ed:15:41:01:10:8f:ea:4a:42:69:b3:2e:ea:16:7a:
                    aa:e5:5f:e1:6d:e5:53:a1:ac:a6:eb:0d:59:df:f0:
                    22:f0:72:ba:90:d5:db:f1:b4:7a:37:df:f8:d9:13:
                    b4:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:B6:80:36:8B:F2:27:0B:64:D3:FA:F4:89:38:A1:10:B9:B5:EB:DD
            X509v3 Authority Key Identifier:
                keyid:FE:FE:3F:5C:7F:4C:16:1E:B7:F1:3E:0C:B2:4B:88:29:FE:38:12:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3230302e33332e3133322e302f32342d3234203d3e20323633323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:a3:5b:16:39:ae:67:10:19:08:05:d5:5d:f3:c7:48:54:17:
         81:f2:aa:13:bf:c6:44:df:d7:46:1f:96:4f:1a:73:65:24:c4:
         df:6c:4e:63:85:c4:4b:74:a7:b0:c3:88:fb:9a:c3:5c:76:a2:
         14:ef:11:ee:bd:93:fd:8d:d6:7f:dc:97:95:18:b3:0f:90:9d:
         0b:62:6b:1e:4f:15:e0:87:6d:b4:b4:18:5b:27:3e:47:28:bb:
         95:f2:c3:a1:f7:de:0f:4f:bf:b3:45:cc:63:95:a9:4e:d4:a7:
         62:23:5e:1b:2d:4c:7d:1e:f0:13:a0:3d:e3:ee:d6:30:71:0c:
         9a:e2:c9:56:0b:a4:e1:b0:40:1c:de:e8:37:53:af:21:c5:a2:
         95:4d:3d:fa:f6:ef:7b:87:00:9b:d3:3d:d4:1c:eb:f2:c7:91:
         be:f2:1f:2c:c5:d6:90:56:3e:86:5e:99:61:99:e0:89:08:63:
         96:2f:eb:1b:53:b7:88:2f:84:f9:f2:ca:3b:2b:a2:f3:36:00:
         f7:4a:98:d5:b5:0b:9e:2b:3e:da:0f:4e:f7:9d:b9:0c:6e:72:
         ba:99:75:80:04:26:72:69:31:a4:41:04:9b:c3:25:32:02:86:
         79:1b:75:bd:16:a9:08:9c:af:63:c7:77:fc:26:3f:73:fa:a2:
         eb:28:f8:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:40 2024 by rpki-client on console-fra.rpki-client.org