Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3230302e33332e3133332e302f32342d3234203d3e20323633323633.roa
File:                     3230302e33332e3133332e302f32342d3234203d3e20323633323633.roa (raw, json)
Hash identifier:          tCMZFwNm0e0UpJOCl7gzdWLVIfkjNvARkZYKUNh237k=
Subject key identifier:   37:56:3D:F8:6E:05:2E:92:48:EA:C3:29:8B:45:D8:6C:4D:00:08:FF
Certificate issuer:       /CN=FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260
Certificate serial:       0DE2982DC6859E6BD74974C3CD4290218D8977FA
Authority key identifier: FE:FE:3F:5C:7F:4C:16:1E:B7:F1:3E:0C:B2:4B:88:29:FE:38:12:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3230302e33332e3133332e302f32342d3234203d3e20323633323633.roa
Signing time:             Tue 16 May 2023 12:01:31 +0000
ROA not before:           Tue 16 May 2023 11:56:31 +0000
ROA not after:            Tue 14 May 2024 12:01:31 +0000
asID:                     263263
IP address blocks:        200.33.133.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:e2:98:2d:c6:85:9e:6b:d7:49:74:c3:cd:42:90:21:8d:89:77:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260
        Validity
            Not Before: May 16 11:56:31 2023 GMT
            Not After : May 14 12:01:31 2024 GMT
        Subject: CN=37563DF86E052E9248EAC3298B45D86C4D0008FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fc:a1:70:3b:e6:71:9d:48:4e:62:9b:65:d0:
                    87:04:5f:59:c9:e6:e4:63:47:fe:ef:ab:cb:99:83:
                    48:e6:99:a9:cd:5e:e0:6b:68:87:37:54:9e:85:33:
                    fe:99:ef:f6:3a:f6:ce:5b:5f:3c:5a:ee:75:4a:9a:
                    ea:4f:dd:ea:fb:ec:70:72:86:9c:7b:1c:c8:ff:33:
                    56:7e:1a:1c:16:85:d3:a6:13:71:d3:27:a9:a6:54:
                    b4:ac:8d:49:d6:f8:fa:2d:a1:ee:5c:ed:59:16:f9:
                    9a:f7:ae:65:27:d2:9f:0f:50:3b:25:3b:e1:f0:42:
                    e7:a0:40:ce:e9:3b:f6:a2:31:ad:d3:05:c3:56:cb:
                    96:d5:21:b0:b4:a9:2c:ee:ef:4a:05:61:da:6d:3c:
                    be:f8:23:b1:a4:10:db:46:69:60:a7:56:24:ff:59:
                    6c:e6:e8:34:75:43:3b:aa:81:97:57:8d:28:9f:60:
                    85:f2:12:61:d6:b8:4c:74:9a:04:f7:9b:bc:79:f1:
                    30:8e:74:e6:6e:ed:50:20:22:b2:da:f3:9f:1f:e0:
                    a5:76:3f:cb:84:0e:d7:f4:38:fb:69:f5:77:22:14:
                    c6:11:63:38:81:5d:ba:5f:90:76:b7:07:6f:71:18:
                    d7:67:ee:19:62:aa:b5:26:53:c7:9b:7b:88:58:53:
                    3b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:56:3D:F8:6E:05:2E:92:48:EA:C3:29:8B:45:D8:6C:4D:00:08:FF
            X509v3 Authority Key Identifier:
                keyid:FE:FE:3F:5C:7F:4C:16:1E:B7:F1:3E:0C:B2:4B:88:29:FE:38:12:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3230302e33332e3133332e302f32342d3234203d3e20323633323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:46:98:ea:4e:26:e0:51:f4:bc:7a:f5:7f:3d:1d:40:cf:ab:
         7d:8d:6d:be:e6:21:a7:7f:ee:75:88:70:44:89:09:40:1c:17:
         9c:09:7f:c0:95:64:d9:f6:05:47:82:29:6e:b3:3b:d5:e1:db:
         ec:b8:7b:26:23:a4:c4:71:5c:3d:51:ed:fa:b2:8d:49:49:01:
         a2:86:97:df:c6:58:e9:50:f2:2b:d4:94:90:c8:a2:0f:8f:8d:
         a7:ef:2d:76:17:92:94:b0:89:c3:65:dd:89:02:17:50:08:a3:
         8a:39:c1:3b:72:b9:a1:42:c8:8f:13:75:fb:23:74:46:ea:d8:
         31:05:6a:2e:df:d2:ad:23:63:8d:1f:df:3a:0d:82:41:f5:f9:
         d8:b3:5c:1f:02:37:16:91:ae:47:7d:1f:d8:85:14:f3:01:74:
         51:1a:77:5f:11:79:d6:f6:71:7f:f2:a7:7c:a3:c6:a1:f8:47:
         d9:d6:43:a0:01:0d:2a:ae:ab:8e:e5:04:2a:1b:4d:2b:38:e7:
         c8:87:e1:32:dc:52:e2:14:2b:28:30:fb:f7:d1:e5:56:bc:8a:
         b8:da:c1:65:33:cf:6f:fa:44:ed:ec:9d:a5:61:bb:f1:8d:82:
         08:8d:2a:32:89:e7:f8:27:d9:2d:5f:a7:9d:ec:8a:e0:cc:f4:
         de:a0:78:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:40 2024 by rpki-client on console-fra.rpki-client.org