Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3137372e3138302e302e302f31342d3234203d3e203238353733.roa
File:                     3137372e3138302e302e302f31342d3234203d3e203238353733.roa (raw, json)
Hash identifier:          buUPLu6UpGJ/Rb7r09IBUYFD7CgwA8DuoxAuEMGvkWw=
Subject key identifier:   A5:3B:E4:56:75:45:91:1D:93:2B:90:69:97:82:A6:03:6B:E7:EB:14
Certificate issuer:       /CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
Certificate serial:       291CA44DEF065442747226D28C8739958E4ADC26
Authority key identifier: 74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3137372e3138302e302e302f31342d3234203d3e203238353733.roa
Signing time:             Fri 16 Feb 2024 19:00:01 +0000
ROA not before:           Fri 16 Feb 2024 18:55:01 +0000
ROA not after:            Fri 14 Feb 2025 19:00:01 +0000
asID:                     28573
IP address blocks:        177.180.0.0/14 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:1c:a4:4d:ef:06:54:42:74:72:26:d2:8c:87:39:95:8e:4a:dc:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
        Validity
            Not Before: Feb 16 18:55:01 2024 GMT
            Not After : Feb 14 19:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:5e:aa:50:b6:d3:9e:48:4d:97:c0:ea:e3:32:
                    af:70:96:90:e3:d1:e1:c3:37:09:8d:05:ef:57:da:
                    d6:f6:8c:14:f4:a4:6b:73:b1:70:03:1b:4c:72:de:
                    9c:2b:a3:11:8b:62:6c:b8:1d:a5:f9:f7:95:9a:57:
                    9b:4f:0f:76:8a:86:1f:b6:28:f1:d3:61:42:b4:43:
                    f4:e6:f0:39:0c:34:aa:5c:6b:8b:6f:79:dc:a3:d3:
                    10:fe:94:08:81:2a:8b:0d:20:9e:b9:e1:65:6f:f5:
                    47:e8:16:d2:50:4e:ef:86:64:fc:20:f6:97:9d:fa:
                    70:af:37:25:fc:94:93:a6:ea:5d:af:44:9f:b2:6e:
                    7c:73:9b:90:63:8f:bc:17:30:c8:e1:37:49:5b:9c:
                    d6:06:0f:dc:79:70:8b:ee:04:ba:00:d7:f5:2f:9c:
                    41:e4:75:b1:a2:a5:3c:1e:b1:f9:82:48:39:3c:ab:
                    a5:17:4a:0c:a9:2a:ce:8e:22:b6:ee:ad:3e:2a:39:
                    84:6b:7e:85:66:97:73:09:a5:7c:e4:0d:3a:8e:98:
                    24:fa:0c:62:aa:35:d6:08:d9:29:e4:c9:23:f9:0e:
                    1a:29:f8:7a:26:89:a2:b4:6d:57:d5:35:10:83:82:
                    1d:ef:e2:5b:8b:26:5e:65:d9:7d:29:5a:3e:62:34:
                    2d:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:3B:E4:56:75:45:91:1D:93:2B:90:69:97:82:A6:03:6B:E7:EB:14
            X509v3 Authority Key Identifier:
                keyid:74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3137372e3138302e302e302f31342d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.180.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         00:66:65:23:8b:f5:12:fc:6f:f0:02:a8:6b:1a:b1:94:58:4a:
         02:5d:05:0b:88:b8:83:ab:39:5a:e8:51:8c:db:64:c7:45:f2:
         b2:00:5e:17:36:35:1a:17:14:76:5e:f7:e5:85:06:63:7e:4d:
         ec:af:ad:70:1a:92:51:fc:f6:47:ea:83:a5:7a:3a:f5:eb:5b:
         f0:1a:b4:c0:f6:20:ff:f8:29:38:04:55:2b:99:0b:04:6b:ea:
         89:1e:fc:67:87:49:69:b0:98:3c:06:31:04:d4:f8:8e:73:11:
         e4:58:4b:cd:f9:9b:a8:e7:d4:97:00:86:b6:5b:25:8f:06:b9:
         70:c6:6e:28:f5:fb:bd:ab:e0:53:bd:39:c3:94:03:b8:a6:ed:
         57:52:66:f5:69:01:83:b3:3d:6c:de:81:de:0b:f1:bc:f7:66:
         cb:21:e6:b0:7f:6a:94:88:3d:90:1d:c8:fa:22:a5:c0:07:6c:
         63:1b:63:cb:93:ee:ce:ae:66:31:b0:ae:0d:57:fa:35:b7:b1:
         23:12:9d:03:e2:53:bb:f6:81:fd:3c:84:c3:7a:9d:a3:62:93:
         6d:c5:1e:49:5d:40:55:43:3a:ac:d7:be:46:e6:2d:d2:77:e4:
         83:ba:92:9e:cc:16:fa:52:7f:e6:be:19:ef:33:e9:1b:e8:64:
         f8:36:0c:b7
-----BEGIN CERTIFICATE-----
MIIHPjCCBiagAwIBAgIUKRykTe8GVEJ0cibSjIc5lY5K3CYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzRFM0IwRDJDM0YwQTVFNkJBNzdBODcxMEVFOUI5QkNC
RDU2OUU5RDAeFw0yNDAyMTYxODU1MDFaFw0yNTAyMTQxOTAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUQ1RUFBNTBCNkQzOUU0ODRE
OTdDMEVBRTMzMkFGNzA5NjkwRTNEMUUxQzMzNzA5OEQwNUVGNTdEQUQ2RjY4QzE0
RjRBNDZCNzNCMTcwMDMxQjRDNzJERTlDMkJBMzExOEI2MjZDQjgxREE1RjlGNzk1
OUE1NzlCNEYwRjc2OEE4NjFGQjYyOEYxRDM2MTQyQjQ0M0Y0RTZGMDM5MEMzNEFB
NUM2QjhCNkY3OURDQTNEMzEwRkU5NDA4ODEyQThCMEQyMDlFQjlFMTY1NkZGNTQ3
RTgxNkQyNTA0RUVGODY2NEZDMjBGNjk3OURGQTcwQUYzNzI1RkM5NDkzQTZFQTVE
QUY0NDlGQjI2RTdDNzM5QjkwNjM4RkJDMTczMEM4RTEzNzQ5NUI5Q0Q2MDYwRkRD
Nzk3MDhCRUUwNEJBMDBEN0Y1MkY5QzQxRTQ3NUIxQTJBNTNDMUVCMUY5ODI0ODM5
M0NBQkE1MTc0QTBDQTkyQUNFOEUyMkI2RUVBRDNFMkEzOTg0NkI3RTg1NjY5Nzcz
MDlBNTdDRTQwRDNBOEU5ODI0RkEwQzYyQUEzNUQ2MDhEOTI5RTRDOTIzRjkwRTFB
MjlGODdBMjY4OUEyQjQ2RDU3RDUzNTEwODM4MjFERUZFMjVCOEIyNjVFNjVEOTdE
Mjk1QTNFNjIzNDJEN0IwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEArV6qULbTnkhNl8Dq4zKvcJaQ49HhwzcJjQXvV9rW9owU9KRrc7Fw
AxtMct6cK6MRi2JsuB2l+feVmlebTw92ioYftijx02FCtEP05vA5DDSqXGuLb3nc
o9MQ/pQIgSqLDSCeueFlb/VH6BbSUE7vhmT8IPaXnfpwrzcl/JSTpupdr0Sfsm58
c5uQY4+8FzDI4TdJW5zWBg/ceXCL7gS6ANf1L5xB5HWxoqU8HrH5gkg5PKulF0oM
qSrOjiK27q0+KjmEa36FZpdzCaV85A06jpgk+gxiqjXWCNkp5Mkj+Q4aKfh6Jomi
tG1X1TUQg4Id7+JbiyZeZdl9KVo+YjQtewIDAQABo4ICTDCCAkgwHQYDVR0OBBYE
FKU75FZ1RZEdkyuQaZeCpgNr5+sUMB8GA1UdIwQYMBaAFHTjsNLD8KXmuneocQ7p
uby9Vp6dMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZRQXF5WXlHTFd4eFJi
SDVLY3BoejUxNzlkd2NCcThoWU5jMVFzaWFrTUwyLzAvNzRFM0IwRDJDM0YwQTVF
NkJBNzdBODcxMEVFOUI5QkNCRDU2OUU5RC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC83NEUzQjBEMkMzRjBBNUU2QkE3N0E4NzEwRUU5QjlCQ0JENTY5
RTlELmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GUUFxeVl5R0xXeHhSYkg1S2Nw
aHo1MTc5ZHdjQnE4aFlOYzFRc2lha01MMi8wLzMxMzczNzJlMzEzODMwMmUzMDJl
MzAyZjMxMzQyZDMyMzQyMDNkM2UyMDMyMzgzNTM3MzMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwKxtDAN
BgkqhkiG9w0BAQsFAAOCAQEAAGZlI4v1Evxv8AKoaxqxlFhKAl0FC4i4g6s5WuhR
jNtkx0XysgBeFzY1GhcUdl735YUGY35N7K+tcBqSUfz2R+qDpXo69etb8Bq0wPYg
//gpOARVK5kLBGvqiR78Z4dJabCYPAYxBNT4jnMR5FhLzfmbqOfUlwCGtlsljwa5
cMZuKPX7vavgU705w5QDuKbtV1Jm9WkBg7M9bN6B3gvxvPdmyyHmsH9qlIg9kB3I
+iKlwAdsYxtjy5Puzq5mMbCuDVf6NbexIxKdA+JTu/aB/TyEw3qdo2KTbcUeSV1A
VUM6rNe+RuYt0nfkg7qSnswW+lJ/5r4Z7zPpG+hk+DYMtw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:05 2024 by rpki-client on console-fra.rpki-client.org