Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3138362e3231382e302e302f31362d3234203d3e203238353733.roa
File:                     3138362e3231382e302e302f31362d3234203d3e203238353733.roa (raw, json)
Hash identifier:          BQEXgzyDb6vb/Fq5xfo+zzwd6vYzEOgWPNlUnurHRPw=
Subject key identifier:   43:6B:C1:CA:C3:7F:0A:9A:DC:24:24:C9:0D:B1:83:EF:C3:23:C0:04
Certificate issuer:       /CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
Certificate serial:       237EA63CEDDCF4CD921593B4A48FC6279B27B724
Authority key identifier: 74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3138362e3231382e302e302f31362d3234203d3e203238353733.roa
Signing time:             Fri 16 Feb 2024 19:00:02 +0000
ROA not before:           Fri 16 Feb 2024 18:55:02 +0000
ROA not after:            Fri 14 Feb 2025 19:00:02 +0000
asID:                     28573
IP address blocks:        186.218.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:7e:a6:3c:ed:dc:f4:cd:92:15:93:b4:a4:8f:c6:27:9b:27:b7:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
        Validity
            Not Before: Feb 16 18:55:02 2024 GMT
            Not After : Feb 14 19:00:02 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a4:33:b7:40:11:c4:25:c9:a1:76:bc:fd:d4:
                    60:e3:37:fa:fa:9b:8a:13:0d:ef:4c:7d:dc:7e:e0:
                    a2:c9:54:46:47:63:4d:33:9c:db:6c:cb:1c:be:22:
                    50:48:69:93:81:9e:0f:d4:75:98:0a:a3:61:a0:c0:
                    33:d3:84:88:66:ca:4a:4d:eb:31:d5:b1:89:ff:c9:
                    f6:1a:7b:b7:b1:b5:83:1a:aa:c0:60:e8:5e:fa:04:
                    73:78:1b:06:c2:01:e8:b0:cb:68:52:6a:2d:50:0d:
                    37:d9:40:c5:63:b8:f9:77:a2:3d:14:f5:5b:7f:92:
                    e8:e3:82:74:4d:c8:1d:1e:cd:d8:75:f5:30:10:b9:
                    f1:2f:58:b6:a2:15:44:cb:fa:db:43:a3:fd:7f:57:
                    72:85:0c:9c:0f:f5:5e:5a:19:35:ad:de:6a:1e:49:
                    f9:c8:73:6b:45:a4:5f:c2:f6:71:eb:f1:7d:1c:53:
                    8f:3d:a2:cb:83:c3:45:e9:98:5b:7b:6b:b9:ab:c0:
                    7a:7c:d2:8b:30:ad:e2:ac:7d:d6:e0:b5:81:de:02:
                    20:2b:a6:59:79:af:a8:65:ef:9d:2b:9f:f1:64:ef:
                    71:89:88:60:7f:bd:6e:2b:72:92:cf:6f:9f:ec:a4:
                    b9:e3:b8:b9:90:e9:5a:b5:08:e3:63:85:61:79:81:
                    65:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:6B:C1:CA:C3:7F:0A:9A:DC:24:24:C9:0D:B1:83:EF:C3:23:C0:04
            X509v3 Authority Key Identifier:
                keyid:74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3138362e3231382e302e302f31362d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.218.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         95:59:ed:ec:7f:b9:06:f8:7b:3c:3c:d2:f6:46:26:ae:c5:81:
         65:a4:4a:eb:ac:d5:46:80:ee:33:ee:87:31:b0:c6:22:8a:5f:
         1b:e9:c5:ce:1a:f0:d6:d7:4d:f2:c8:ae:c9:a6:bc:4e:85:23:
         54:a5:4e:37:40:28:7e:19:3c:9e:a5:ba:ee:a9:a3:ab:59:fe:
         ab:15:f9:24:67:9f:2f:71:15:43:49:30:f3:46:f3:71:55:d7:
         86:de:2e:98:3b:18:ff:25:cf:fd:5c:be:3c:00:79:8b:69:c0:
         5f:72:0e:2f:40:59:ce:a0:e3:5a:ad:7a:7e:45:25:7c:42:44:
         b9:c2:99:8e:b1:63:ef:86:88:27:3d:5e:e5:5e:78:c9:37:e4:
         f6:e7:c1:fe:f6:52:86:f7:7a:12:ee:39:4b:ac:fc:af:e0:96:
         14:b6:65:f1:37:8e:4d:ad:46:0d:3e:ca:1d:74:48:32:be:96:
         4d:54:79:07:bd:b4:db:0c:48:86:12:31:15:2a:f4:ba:27:7d:
         b4:89:9e:5e:3c:9f:26:46:0d:75:77:2e:52:47:e4:a4:5a:22:
         4f:09:2b:f8:e4:cf:13:2e:9b:58:32:d9:97:03:ee:52:03:48:
         c6:2c:80:5a:5e:be:bb:a7:7d:a4:38:bd:f4:b3:39:fa:da:cc:
         bf:66:c8:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:25 2024 by rpki-client on console-ams.rpki-client.org