Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3230302e33332e3133342e302f32342d3234203d3e20323633323633.roa
File:                     3230302e33332e3133342e302f32342d3234203d3e20323633323633.roa (raw, json)
Hash identifier:          SAv4IJRe8u7CMhB/HOscq09C2C2VP0n6i4+7qRVGbsw=
Subject key identifier:   AD:4A:9C:95:18:A3:22:8F:CC:4C:5C:38:9A:B4:2C:D8:BC:8F:C7:94
Certificate issuer:       /CN=FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260
Certificate serial:       4BA786AC8F9892FEBFDFC154CD41A175BC53EFFF
Authority key identifier: FE:FE:3F:5C:7F:4C:16:1E:B7:F1:3E:0C:B2:4B:88:29:FE:38:12:60
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3230302e33332e3133342e302f32342d3234203d3e20323633323633.roa
Signing time:             Tue 16 May 2023 12:01:38 +0000
ROA not before:           Tue 16 May 2023 11:56:38 +0000
ROA not after:            Tue 14 May 2024 12:01:38 +0000
asID:                     263263
IP address blocks:        200.33.134.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:a7:86:ac:8f:98:92:fe:bf:df:c1:54:cd:41:a1:75:bc:53:ef:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260
        Validity
            Not Before: May 16 11:56:38 2023 GMT
            Not After : May 14 12:01:38 2024 GMT
        Subject: CN=AD4A9C9518A3228FCC4C5C389AB42CD8BC8FC794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:fc:50:a6:03:df:e9:3b:45:e5:68:33:26:f3:
                    03:93:50:fc:8d:ae:4b:27:dd:6e:3b:9a:d0:61:e1:
                    72:83:a6:48:4b:d4:11:0f:bb:fd:a7:56:61:09:fd:
                    44:aa:a4:41:42:b4:08:d0:57:70:90:74:d5:f9:d5:
                    fe:1d:fc:8b:5e:de:07:6e:95:63:25:5e:05:7e:fe:
                    a6:f9:52:b5:23:98:23:f7:04:a6:3d:28:0c:86:2e:
                    f9:fa:37:94:c1:64:bb:33:dd:be:03:1a:4c:2e:87:
                    8a:20:f5:81:68:72:dc:dd:92:46:b2:33:b7:a7:1f:
                    f5:2f:cb:3f:25:ae:01:07:aa:69:e9:06:eb:a1:64:
                    9d:09:ed:1f:99:6a:fa:6d:e2:6b:d9:af:e2:d4:ab:
                    ee:50:e9:57:d5:47:60:4b:cb:6b:0d:e3:82:c6:02:
                    56:a2:88:ba:c4:af:95:35:a0:91:ed:b7:b5:80:11:
                    f4:79:c6:69:95:84:dc:b9:2d:73:d9:1c:56:f0:5e:
                    ce:bf:0f:36:26:f4:7e:b7:3c:9e:08:db:04:ef:6e:
                    46:6a:e5:d1:c1:24:ce:68:e9:b7:bf:9d:44:d6:6c:
                    81:a5:37:4b:c4:18:93:bd:4f:e0:5e:bd:72:36:37:
                    99:3e:e0:12:2d:8a:bb:3b:7c:9e:9d:a9:59:0c:d9:
                    4f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:4A:9C:95:18:A3:22:8F:CC:4C:5C:38:9A:B4:2C:D8:BC:8F:C7:94
            X509v3 Authority Key Identifier:
                keyid:FE:FE:3F:5C:7F:4C:16:1E:B7:F1:3E:0C:B2:4B:88:29:FE:38:12:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FEFE3F5C7F4C161EB7F13E0CB24B8829FE381260.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/45CTFn8wnu4oysjYJ3LSQdtK8PHnxNm5mD4VHYvH9CiD/0/3230302e33332e3133342e302f32342d3234203d3e20323633323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:fd:37:86:33:0d:6c:c1:e4:4c:8f:bf:77:18:9b:a9:e0:42:
         85:4c:c5:b4:9f:3e:c0:b0:80:fe:ff:ae:e1:b2:66:5f:fc:46:
         71:14:4f:ed:bd:1a:fe:5d:d2:91:60:f4:6f:3a:cc:76:d0:d3:
         c5:ce:e7:e8:09:ce:76:4d:f9:54:51:3a:bb:c5:cf:c0:70:b3:
         eb:09:7a:2c:f7:30:b7:ec:54:de:58:c0:1e:d5:49:c3:37:74:
         24:65:1a:58:27:31:7c:b1:75:f7:a5:f9:c3:7d:87:fd:32:84:
         1d:26:e5:4f:e1:77:93:10:71:5a:9f:3f:cd:74:de:0c:ee:ba:
         7d:9b:12:76:4a:3d:e3:e8:f2:32:d0:55:c4:00:e7:ea:f7:ba:
         89:62:21:81:e6:d3:5c:d1:0f:f1:bc:fb:0a:6a:cf:83:6a:47:
         38:3e:57:fd:d1:74:7a:88:ca:73:dd:05:a0:83:f5:97:cd:d9:
         4a:d6:d3:e9:5c:4b:7e:f0:1a:c0:df:38:a9:23:48:f5:73:be:
         2c:95:a7:f7:aa:a5:2d:f0:68:36:ac:b2:85:9a:a9:15:8e:96:
         4f:ca:c6:2d:f0:43:db:9e:d7:e0:17:57:2f:75:94:94:3b:1a:
         38:31:d4:82:d9:0b:fd:a9:5c:06:9c:12:95:df:eb:5b:9b:86:
         03:ec:34:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:31 2024 by rpki-client on console-ams.rpki-client.org