Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3137392e3233322e302e302f31342d3234203d3e203238353733.roa
File:                     3137392e3233322e302e302f31342d3234203d3e203238353733.roa (raw, json)
Hash identifier:          vhco/VAI4bP+2L6Vlt7Na4rPT3dVwhCndtpC7ewiEj4=
Subject key identifier:   C9:07:1D:C8:73:0A:C9:78:D6:2D:0D:C1:69:7A:2C:6D:2C:6A:2D:CC
Certificate issuer:       /CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
Certificate serial:       2D2854F1353B9C2B71D1916848C124B50FA1152A
Authority key identifier: 74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3137392e3233322e302e302f31342d3234203d3e203238353733.roa
Signing time:             Fri 16 Feb 2024 19:00:00 +0000
ROA not before:           Fri 16 Feb 2024 18:55:00 +0000
ROA not after:            Fri 14 Feb 2025 19:00:00 +0000
asID:                     28573
IP address blocks:        179.232.0.0/14 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:28:54:f1:35:3b:9c:2b:71:d1:91:68:48:c1:24:b5:0f:a1:15:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
        Validity
            Not Before: Feb 16 18:55:00 2024 GMT
            Not After : Feb 14 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:42:c4:c0:a2:1a:66:70:a8:bb:76:cc:02:12:
                    8c:bb:a7:92:fa:37:7e:be:2e:d8:08:28:9e:55:c3:
                    ae:08:e3:19:ca:6d:49:44:e7:27:d4:ed:4b:03:f8:
                    0e:64:62:0a:26:0a:5a:db:32:a4:7e:83:3a:bb:ea:
                    6b:ec:1d:5d:46:1c:01:fc:76:4b:0c:c2:99:9a:e8:
                    e8:d4:33:46:20:2b:c5:85:78:3c:3d:de:db:68:e5:
                    a6:8c:26:98:2e:26:2a:0a:6f:34:5f:d4:32:c3:9b:
                    b0:28:1a:dc:0e:61:ab:35:d8:56:70:77:7a:10:a2:
                    ac:be:6b:c2:d5:f1:7f:09:44:ac:26:d7:9c:5b:a4:
                    fe:64:bf:f3:e7:d5:48:3e:1f:bb:4e:d7:6f:e0:a2:
                    e7:f0:bc:1f:bc:4f:2e:99:99:06:1f:29:d8:5f:5e:
                    e1:20:ef:b5:a1:c1:c6:53:b5:56:8d:de:80:09:78:
                    1e:ba:ad:15:7e:f1:e6:a4:63:27:a6:ff:b6:31:e1:
                    bd:17:58:7e:ac:33:56:1c:b5:9d:bd:54:fe:d7:61:
                    38:1a:ad:5a:8e:59:4b:92:d3:68:60:b6:15:a3:da:
                    d7:37:20:95:e7:01:9e:c5:93:6f:25:19:d8:89:b7:
                    83:7f:5f:fe:e9:1c:27:ce:66:b4:8e:e6:0d:6d:e9:
                    6b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:07:1D:C8:73:0A:C9:78:D6:2D:0D:C1:69:7A:2C:6D:2C:6A:2D:CC
            X509v3 Authority Key Identifier:
                keyid:74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3137392e3233322e302e302f31342d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.232.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         55:9a:7f:5c:35:74:7c:47:52:fb:54:e1:8c:a4:8d:2b:1d:b0:
         02:6b:18:e9:48:c7:4b:4f:ba:1f:f1:f2:df:3b:71:c3:05:f5:
         76:6e:f4:3b:d8:f7:c3:cd:92:21:da:22:8b:ca:8c:20:1d:e1:
         ec:95:33:c5:98:8c:80:67:a2:fa:aa:6b:ac:0e:10:3a:9a:79:
         75:6c:63:c4:03:54:b1:85:84:35:c0:9d:62:57:1b:49:24:9f:
         fe:d8:a0:be:2e:41:64:a3:00:7c:1f:5c:b3:48:47:56:7f:44:
         c3:42:e1:86:19:99:9f:9b:43:31:26:88:63:97:5b:9d:f9:48:
         d0:ab:79:49:43:ee:04:64:e5:ac:c0:30:99:c5:9e:2e:82:90:
         11:31:21:45:a9:14:8d:43:0e:2e:4d:2c:3b:52:d0:19:30:2f:
         42:0b:a6:0b:9f:90:ae:ab:88:2e:db:6e:6d:75:d0:44:d4:e7:
         8a:7b:ee:0e:13:88:97:ee:30:fd:6e:36:07:03:c2:a0:15:e6:
         39:0d:24:c2:cb:34:27:61:75:8d:05:ad:75:e0:f7:c2:15:28:
         c9:25:8d:bf:0e:ea:9b:ae:99:ac:39:cf:f7:95:ac:d4:73:ca:
         9f:7a:7a:a8:86:a3:5e:91:d0:53:6e:66:27:c2:e7:96:e9:6c:
         0d:66:f6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:05 2024 by rpki-client on console-fra.rpki-client.org