Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3138372e3130342e302e302f31342d3234203d3e203238353733.roa
File:                     3138372e3130342e302e302f31342d3234203d3e203238353733.roa (raw, json)
Hash identifier:          VVI0vuS4m6xJafkQgGA13urZkPEbwhGanu43iDxTumY=
Subject key identifier:   D4:61:6C:D2:8A:56:82:EE:A0:CA:F6:D9:3E:B1:4E:63:D3:BD:AA:EA
Certificate issuer:       /CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
Certificate serial:       69B3165FB0BFC7286AAEF2657A9CCEBC9217DF32
Authority key identifier: 74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3138372e3130342e302e302f31342d3234203d3e203238353733.roa
Signing time:             Fri 16 Feb 2024 19:00:03 +0000
ROA not before:           Fri 16 Feb 2024 18:55:03 +0000
ROA not after:            Fri 14 Feb 2025 19:00:03 +0000
asID:                     28573
IP address blocks:        187.104.0.0/14 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:b3:16:5f:b0:bf:c7:28:6a:ae:f2:65:7a:9c:ce:bc:92:17:df:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
        Validity
            Not Before: Feb 16 18:55:03 2024 GMT
            Not After : Feb 14 19:00:03 2025 GMT
        Subject: CN=3082010A0282010100A9E2C09A953391340C5E4107A4568D1C435A9DD1F6F5E4DFA6930C6432230501DB71388F71A9F02BC9436B3ECB6D5CDBB4B165F123D4AD931A05DFBEC3739E793255869C8EC5A3C60431AFB2E15E0D010592CEEF6AB77BA289D7D64FD48414FEC3F4C9AC693E49E0057AE02AD732C8DBD2659382C75C23EBBD128831CA9A7D02011BFA3E6268FC6F92AB7FAB778D99E6FC7ED4CB750811F436209D2FC2C2C8C88EFF1ED84F0EAD5095744E76C1BC6093B5D689E7EEF95A56F1C0EC1A271B5CC23C3FE6C6C975F1ECB16F1CADCA513DBE852337C740E8FB10D0E08E98B11ECD87F1BF91486ECF3708111369A6884E1F118A42577AB840FA30F5CE7563B42935370203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e2:c0:9a:95:33:91:34:0c:5e:41:07:a4:56:
                    8d:1c:43:5a:9d:d1:f6:f5:e4:df:a6:93:0c:64:32:
                    23:05:01:db:71:38:8f:71:a9:f0:2b:c9:43:6b:3e:
                    cb:6d:5c:db:b4:b1:65:f1:23:d4:ad:93:1a:05:df:
                    be:c3:73:9e:79:32:55:86:9c:8e:c5:a3:c6:04:31:
                    af:b2:e1:5e:0d:01:05:92:ce:ef:6a:b7:7b:a2:89:
                    d7:d6:4f:d4:84:14:fe:c3:f4:c9:ac:69:3e:49:e0:
                    05:7a:e0:2a:d7:32:c8:db:d2:65:93:82:c7:5c:23:
                    eb:bd:12:88:31:ca:9a:7d:02:01:1b:fa:3e:62:68:
                    fc:6f:92:ab:7f:ab:77:8d:99:e6:fc:7e:d4:cb:75:
                    08:11:f4:36:20:9d:2f:c2:c2:c8:c8:8e:ff:1e:d8:
                    4f:0e:ad:50:95:74:4e:76:c1:bc:60:93:b5:d6:89:
                    e7:ee:f9:5a:56:f1:c0:ec:1a:27:1b:5c:c2:3c:3f:
                    e6:c6:c9:75:f1:ec:b1:6f:1c:ad:ca:51:3d:be:85:
                    23:37:c7:40:e8:fb:10:d0:e0:8e:98:b1:1e:cd:87:
                    f1:bf:91:48:6e:cf:37:08:11:13:69:a6:88:4e:1f:
                    11:8a:42:57:7a:b8:40:fa:30:f5:ce:75:63:b4:29:
                    35:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:61:6C:D2:8A:56:82:EE:A0:CA:F6:D9:3E:B1:4E:63:D3:BD:AA:EA
            X509v3 Authority Key Identifier:
                keyid:74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3138372e3130342e302e302f31342d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.104.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         41:a0:01:c1:41:cd:13:38:73:41:58:46:6a:6f:f3:21:d9:0d:
         3d:db:71:88:70:d0:c0:40:c4:5d:ba:d1:72:1d:f0:9d:b8:3a:
         2a:97:cb:c1:56:c4:05:28:d3:31:b4:00:c9:0c:f7:c0:be:c7:
         a9:3f:04:61:88:57:7b:ee:16:64:7f:84:47:f2:3d:1d:2c:30:
         fb:39:8f:d5:5f:b7:cb:1d:68:43:23:8f:58:23:f1:4e:0d:a0:
         5c:86:8e:3a:95:b0:56:1b:1e:d8:20:eb:24:05:8a:a0:1c:16:
         c7:12:e8:85:c2:4b:fa:db:eb:14:21:d9:71:7c:ff:7a:a9:0d:
         80:5f:67:d8:f1:2a:dc:ae:cf:7e:d2:4a:ce:95:f3:93:ab:0d:
         ec:69:7d:9c:f5:70:1f:49:e6:0c:c0:b5:7d:05:73:6d:c0:1f:
         4f:74:6b:b9:46:5a:7f:7a:e3:c3:0e:8e:be:18:35:c3:53:35:
         ef:a6:10:ce:8d:b7:dc:7f:f6:ff:83:99:39:e9:ea:85:3c:30:
         d9:25:7e:ec:66:95:b4:ed:49:01:02:c4:08:54:48:a0:47:3e:
         8e:02:fd:a7:ec:65:6e:3d:d0:8d:11:7b:80:20:cb:0e:a7:4e:
         2a:bc:f7:d1:b5:d4:e7:d7:5d:6f:25:87:fe:69:37:59:6c:98:
         5d:de:4c:e7
-----BEGIN CERTIFICATE-----
MIIHPjCCBiagAwIBAgIUabMWX7C/xyhqrvJlepzOvJIX3zIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzRFM0IwRDJDM0YwQTVFNkJBNzdBODcxMEVFOUI5QkNC
RDU2OUU5RDAeFw0yNDAyMTYxODU1MDNaFw0yNTAyMTQxOTAwMDNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTlFMkMwOUE5NTMzOTEzNDBD
NUU0MTA3QTQ1NjhEMUM0MzVBOUREMUY2RjVFNERGQTY5MzBDNjQzMjIzMDUwMURC
NzEzODhGNzFBOUYwMkJDOTQzNkIzRUNCNkQ1Q0RCQjRCMTY1RjEyM0Q0QUQ5MzFB
MDVERkJFQzM3MzlFNzkzMjU1ODY5QzhFQzVBM0M2MDQzMUFGQjJFMTVFMEQwMTA1
OTJDRUVGNkFCNzdCQTI4OUQ3RDY0RkQ0ODQxNEZFQzNGNEM5QUM2OTNFNDlFMDA1
N0FFMDJBRDczMkM4REJEMjY1OTM4MkM3NUMyM0VCQkQxMjg4MzFDQTlBN0QwMjAx
MUJGQTNFNjI2OEZDNkY5MkFCN0ZBQjc3OEQ5OUU2RkM3RUQ0Q0I3NTA4MTFGNDM2
MjA5RDJGQzJDMkM4Qzg4RUZGMUVEODRGMEVBRDUwOTU3NDRFNzZDMUJDNjA5M0I1
RDY4OUU3RUVGOTVBNTZGMUMwRUMxQTI3MUI1Q0MyM0MzRkU2QzZDOTc1RjFFQ0Ix
NkYxQ0FEQ0E1MTNEQkU4NTIzMzdDNzQwRThGQjEwRDBFMDhFOThCMTFFQ0Q4N0Yx
QkY5MTQ4NkVDRjM3MDgxMTEzNjlBNjg4NEUxRjExOEE0MjU3N0FCODQwRkEzMEY1
Q0U3NTYzQjQyOTM1MzcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAqeLAmpUzkTQMXkEHpFaNHENandH29eTfppMMZDIjBQHbcTiPcanw
K8lDaz7LbVzbtLFl8SPUrZMaBd++w3OeeTJVhpyOxaPGBDGvsuFeDQEFks7vard7
oonX1k/UhBT+w/TJrGk+SeAFeuAq1zLI29Jlk4LHXCPrvRKIMcqafQIBG/o+Ymj8
b5Krf6t3jZnm/H7Uy3UIEfQ2IJ0vwsLIyI7/HthPDq1QlXROdsG8YJO11onn7vla
VvHA7BonG1zCPD/mxsl18eyxbxytylE9voUjN8dA6PsQ0OCOmLEezYfxv5FIbs83
CBETaaaITh8RikJXerhA+jD1znVjtCk1NwIDAQABo4ICTDCCAkgwHQYDVR0OBBYE
FNRhbNKKVoLuoMr22T6xTmPTvarqMB8GA1UdIwQYMBaAFHTjsNLD8KXmuneocQ7p
uby9Vp6dMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZRQXF5WXlHTFd4eFJi
SDVLY3BoejUxNzlkd2NCcThoWU5jMVFzaWFrTUwyLzAvNzRFM0IwRDJDM0YwQTVF
NkJBNzdBODcxMEVFOUI5QkNCRDU2OUU5RC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC83NEUzQjBEMkMzRjBBNUU2QkE3N0E4NzEwRUU5QjlCQ0JENTY5
RTlELmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GUUFxeVl5R0xXeHhSYkg1S2Nw
aHo1MTc5ZHdjQnE4aFlOYzFRc2lha01MMi8wLzMxMzgzNzJlMzEzMDM0MmUzMDJl
MzAyZjMxMzQyZDMyMzQyMDNkM2UyMDMyMzgzNTM3MzMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwK7aDAN
BgkqhkiG9w0BAQsFAAOCAQEAQaABwUHNEzhzQVhGam/zIdkNPdtxiHDQwEDEXbrR
ch3wnbg6KpfLwVbEBSjTMbQAyQz3wL7HqT8EYYhXe+4WZH+ER/I9HSww+zmP1V+3
yx1oQyOPWCPxTg2gXIaOOpWwVhse2CDrJAWKoBwWxxLohcJL+tvrFCHZcXz/eqkN
gF9n2PEq3K7PftJKzpXzk6sN7Gl9nPVwH0nmDMC1fQVzbcAfT3RruUZaf3rjww6O
vhg1w1M176YQzo233H/2/4OZOenqhTww2SV+7GaVtO1JAQLECFRIoEc+jgL9p+xl
bj3QjRF7gCDLDqdOKrz30bXU59ddbyWH/mk3WWyYXd5M5w==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:05 2024 by rpki-client on console-fra.rpki-client.org