Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3138372e32302e302e302f31342d3234203d3e203238353733.roa
File:                     3138372e32302e302e302f31342d3234203d3e203238353733.roa (raw, json)
Hash identifier:          IUr2krsy8L+fw0nLYLk/tRj+Lu8WutubzhWxvyJRW08=
Subject key identifier:   DF:29:A2:1C:BD:5D:97:59:A4:0C:B7:1D:BF:18:C4:84:8C:93:B9:98
Certificate issuer:       /CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
Certificate serial:       25406A3E8A1D5AA0B5C2C6A244121A1E953A4079
Authority key identifier: 74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3138372e32302e302e302f31342d3234203d3e203238353733.roa
Signing time:             Fri 16 Feb 2024 19:00:02 +0000
ROA not before:           Fri 16 Feb 2024 18:55:02 +0000
ROA not after:            Fri 14 Feb 2025 19:00:02 +0000
asID:                     28573
IP address blocks:        187.20.0.0/14 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:40:6a:3e:8a:1d:5a:a0:b5:c2:c6:a2:44:12:1a:1e:95:3a:40:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
        Validity
            Not Before: Feb 16 18:55:02 2024 GMT
            Not After : Feb 14 19:00:02 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1e:8b:0e:20:24:c1:ca:0f:6c:a8:3c:60:38:
                    a7:a8:44:ac:fc:5f:f5:67:5a:c2:06:f3:47:45:7a:
                    5a:70:30:11:71:b2:98:43:9d:10:d7:7c:d7:fa:cd:
                    a6:18:58:9f:87:fe:dc:db:34:51:0f:2f:b8:ca:e7:
                    fa:35:74:20:d8:61:00:ad:b7:1c:8b:df:16:69:ab:
                    ce:77:34:c7:aa:50:a6:47:dd:7e:f7:a7:08:7b:1c:
                    d5:e2:ec:54:82:05:d7:44:64:58:a5:85:c3:b4:d7:
                    b7:75:88:1f:b5:0e:2f:3f:d9:17:bd:56:b3:ab:e4:
                    99:df:23:c8:f3:23:ba:91:1a:e2:ce:e0:fe:87:96:
                    e2:63:ed:09:27:47:3c:d6:89:f8:54:c4:89:cb:95:
                    f3:b4:9a:b5:fe:e5:c9:6a:41:00:71:75:f6:ee:b2:
                    c3:50:2c:6e:72:85:97:76:83:bf:b8:63:31:d7:9e:
                    84:ae:03:f3:57:3d:48:cb:2c:3d:f0:96:70:c6:dd:
                    45:0a:4a:d5:ef:ed:c7:5c:41:0e:78:45:b4:9a:1b:
                    59:db:68:dd:ea:05:74:dd:1c:df:49:f4:c4:22:48:
                    9c:8c:83:41:7f:a1:a9:7e:51:f7:93:91:a0:5d:b7:
                    05:06:13:e3:7d:50:f7:37:ad:dd:86:58:f1:4f:9c:
                    03:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:29:A2:1C:BD:5D:97:59:A4:0C:B7:1D:BF:18:C4:84:8C:93:B9:98
            X509v3 Authority Key Identifier:
                keyid:74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3138372e32302e302e302f31342d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.20.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         21:39:82:f4:51:3b:98:7c:84:eb:43:80:24:2f:4e:02:be:83:
         4e:35:a9:fe:60:f1:e4:39:ad:df:39:15:b3:5f:fe:62:1f:f8:
         c1:60:db:1c:3b:c1:20:4f:8f:86:e0:d9:f7:47:15:51:0f:cd:
         24:e1:ea:34:36:dd:bd:73:b1:f4:7b:aa:d4:c2:d9:c7:a0:9f:
         b9:37:c3:06:83:0f:3f:a8:7d:25:bf:ed:99:c0:e7:3a:67:ed:
         24:db:0e:79:2f:16:73:a9:0c:7b:f1:3e:a7:49:8d:f8:6b:cc:
         4c:40:e7:69:e6:3e:d8:35:71:e3:6d:bb:9e:83:f1:79:a2:b8:
         82:5b:28:e1:73:5e:98:84:1f:63:3e:68:69:cd:0f:0e:b3:82:
         53:3c:47:6d:63:92:fd:5d:ec:2a:e9:cf:6e:fe:d9:37:c0:ce:
         31:71:fc:f7:59:9a:3f:b4:18:65:79:d6:7d:db:72:3f:37:3c:
         53:07:73:31:33:ff:3a:04:26:1b:c6:38:6b:32:de:f7:11:15:
         33:b8:81:d2:e0:32:ac:c2:c2:9b:97:6d:ce:eb:88:c2:7d:5d:
         09:89:a3:66:50:c0:00:26:71:d0:31:62:74:18:f6:74:2b:e4:
         33:59:52:d1:ee:66:8d:08:ff:e1:94:a6:84:22:40:7d:9e:44:
         00:a5:3c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:25 2024 by rpki-client on console-ams.rpki-client.org