Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3230302e33332e3133342e302f32332d3233203d3e20323633323633.roa
File:                     3230302e33332e3133342e302f32332d3233203d3e20323633323633.roa (raw, json)
Hash identifier:          KFGWvL41UgKZm/Xko+PUmsGbILbgtGtoQD/KxMsdBi4=
Subject key identifier:   4F:85:38:DB:B0:D3:F4:13:A6:05:CA:5F:C7:A1:1B:A6:37:32:40:F9
Certificate issuer:       /CN=FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260
Certificate serial:       16023FAEC6196791A7F8513DAE22934E8F31BC81
Authority key identifier: FE:FE:3F:5C:7F:4C:16:1E:B7:F1:3E:0C:B2:4B:88:29:FE:38:12:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3230302e33332e3133342e302f32332d3233203d3e20323633323633.roa
Signing time:             Tue 16 May 2023 12:01:34 +0000
ROA not before:           Tue 16 May 2023 11:56:34 +0000
ROA not after:            Tue 14 May 2024 12:01:34 +0000
asID:                     263263
IP address blocks:        200.33.134.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:02:3f:ae:c6:19:67:91:a7:f8:51:3d:ae:22:93:4e:8f:31:bc:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260
        Validity
            Not Before: May 16 11:56:34 2023 GMT
            Not After : May 14 12:01:34 2024 GMT
        Subject: CN=4F8538DBB0D3F413A605CA5FC7A11BA6373240F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4b:d4:bf:40:d1:01:12:88:e6:22:2f:5e:6d:
                    3f:6e:bb:de:1e:75:21:55:4b:f4:27:0b:7b:a4:94:
                    a5:16:d1:8d:9a:9f:59:68:d4:f6:9a:d4:00:85:ef:
                    8b:2d:f0:51:d9:68:e4:fb:61:8f:33:1a:0b:3b:6a:
                    30:59:93:d2:8b:4f:93:8a:3f:3a:24:23:61:97:66:
                    8e:5d:e4:b4:5a:a7:03:29:9b:1b:a7:18:9f:e6:88:
                    63:37:37:3b:28:47:05:94:cf:b1:69:26:32:a4:12:
                    d2:70:0c:5e:8e:23:98:47:fd:6b:86:0e:f7:ce:12:
                    bc:3c:90:19:d6:2a:84:1c:c8:d5:c5:2c:3d:d4:31:
                    18:84:e3:da:90:71:f9:be:e0:49:39:33:9a:bb:c2:
                    47:4f:08:00:8f:ae:d5:52:9c:98:7f:ec:7f:05:71:
                    df:dc:01:49:f3:0a:73:4e:6b:1c:2c:d3:fe:60:54:
                    3a:85:e5:3b:b2:97:0a:91:b4:88:54:e7:65:db:e6:
                    f0:2c:fe:f9:1e:01:63:91:6b:3a:b8:aa:79:1c:55:
                    2f:38:52:1b:b6:8b:64:cd:e5:73:17:a4:e1:81:dd:
                    6a:81:d5:cf:18:2f:f3:82:a6:ac:b9:72:e5:cc:f7:
                    fe:b7:5c:24:7a:81:e6:06:24:9f:80:1f:a8:2d:0b:
                    af:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:85:38:DB:B0:D3:F4:13:A6:05:CA:5F:C7:A1:1B:A6:37:32:40:F9
            X509v3 Authority Key Identifier:
                keyid:FE:FE:3F:5C:7F:4C:16:1E:B7:F1:3E:0C:B2:4B:88:29:FE:38:12:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3230302e33332e3133342e302f32332d3233203d3e20323633323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:ae:55:12:63:8a:10:26:0c:0e:fb:2a:0c:6f:5d:80:a0:b9:
         de:6b:6b:1c:ff:d9:b4:2a:fd:e2:a2:57:0e:90:c8:f5:56:cb:
         d2:31:9d:ea:b8:94:ba:54:b6:b8:2a:79:0a:f5:4a:ca:02:67:
         91:29:a3:3c:3b:7a:0e:29:b9:f9:2d:55:d0:26:bd:ca:b0:b9:
         ce:71:c9:de:a8:dc:71:50:84:81:d8:7e:c7:da:3e:09:6b:da:
         bb:ae:02:71:64:89:e0:28:97:fb:e2:f4:e4:de:7c:43:f3:2b:
         94:dc:7e:1e:7f:73:44:e0:07:f6:1b:de:41:c6:b1:de:93:dc:
         aa:bd:29:5c:45:ed:ad:bf:2e:b2:29:8e:12:b4:06:32:2b:89:
         b6:61:7b:d8:28:e4:94:85:ca:6b:59:c7:af:82:b9:84:90:19:
         0f:18:83:54:65:cd:94:3f:a0:06:2a:4e:fa:1e:7f:99:a3:78:
         ee:a2:55:6c:51:fb:20:41:f9:3b:4f:75:2a:f7:9c:63:31:fc:
         81:5f:b8:e1:3c:7a:9e:32:ff:c1:70:9c:cb:e3:6d:ae:f9:8f:
         94:60:67:eb:a6:8a:41:a3:2e:b1:ff:b7:d8:3a:06:ce:84:81:
         e9:02:a0:78:ad:4a:c6:a5:df:1f:fc:26:10:c5:91:a4:e7:a6:
         41:a9:0d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:40 2024 by rpki-client on console-fra.rpki-client.org