Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3138372e33362e302e302f31342d3234203d3e203238353733.roa
File:                     3138372e33362e302e302f31342d3234203d3e203238353733.roa (raw, json)
Hash identifier:          0mDQFFOYtmfk2UgzYiCHmV1RmPxo1ZyZRxmIdgm9fXk=
Subject key identifier:   59:6E:52:A4:91:5A:8C:24:CC:C3:11:EF:68:B8:59:96:60:59:9D:DA
Certificate issuer:       /CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
Certificate serial:       30A011AD9C4F3D2DA305B71D3722A60CC78981A9
Authority key identifier: 74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3138372e33362e302e302f31342d3234203d3e203238353733.roa
Signing time:             Fri 16 Feb 2024 19:00:00 +0000
ROA not before:           Fri 16 Feb 2024 18:55:00 +0000
ROA not after:            Fri 14 Feb 2025 19:00:00 +0000
asID:                     28573
IP address blocks:        187.36.0.0/14 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:a0:11:ad:9c:4f:3d:2d:a3:05:b7:1d:37:22:a6:0c:c7:89:81:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
        Validity
            Not Before: Feb 16 18:55:00 2024 GMT
            Not After : Feb 14 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:5d:ac:96:0a:1f:97:42:39:8a:7c:cf:df:d0:
                    dc:d3:24:7e:f3:46:4f:07:ca:ae:22:10:15:4b:bc:
                    45:24:e9:90:76:8d:85:c5:92:f1:70:8c:1c:2a:e7:
                    62:9e:1b:92:66:a2:cb:56:20:7b:40:f5:0b:01:b2:
                    51:0f:69:67:14:09:37:12:3a:cd:cc:78:7d:9d:96:
                    f9:62:1b:75:7b:45:3d:cb:38:14:ea:a2:72:6b:dc:
                    11:af:f6:d1:a4:26:b9:9a:e9:bc:e9:88:d7:4b:3d:
                    79:a3:43:9f:8f:e6:78:21:c2:8e:c3:d3:7f:a5:1e:
                    ed:a5:8e:12:38:b4:5e:3b:80:e3:e6:c9:bf:ee:40:
                    a6:13:f1:c4:12:4e:01:1c:18:02:86:a9:3f:88:b1:
                    fb:e4:bd:52:6b:3e:78:e7:f7:66:73:7d:9a:d2:dc:
                    5c:0b:44:fc:4b:e8:81:c1:c1:13:0c:2e:77:27:74:
                    4d:80:83:5b:d6:c2:ec:12:70:69:2d:47:dc:f0:90:
                    d8:34:00:04:34:7f:58:fe:8d:c0:71:c6:05:18:d0:
                    53:90:4e:ba:88:cc:b0:d7:53:56:37:4f:48:49:80:
                    42:87:01:8c:13:e1:55:61:64:27:15:e4:32:46:a8:
                    fc:8f:7e:51:e6:3c:71:d7:8a:13:c3:ad:37:95:10:
                    a6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:6E:52:A4:91:5A:8C:24:CC:C3:11:EF:68:B8:59:96:60:59:9D:DA
            X509v3 Authority Key Identifier:
                keyid:74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3138372e33362e302e302f31342d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.36.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         6c:68:c4:12:9a:2e:1f:01:bb:35:80:44:1a:28:db:7d:d4:b6:
         28:f6:47:ab:53:b2:74:d6:a0:df:14:dd:77:30:e7:13:69:8c:
         55:8e:b2:1c:54:ca:de:27:e6:65:a9:26:8d:48:b8:a8:b0:f7:
         2a:c4:fb:f7:1b:76:20:0b:f4:46:a2:f9:46:95:73:9a:68:be:
         53:1f:00:87:e0:e7:b1:78:9c:85:fc:5b:10:8e:dd:99:71:9f:
         87:c7:47:c2:2f:84:9d:31:ba:bf:d2:07:62:78:56:4a:64:7e:
         02:3b:30:27:35:4c:2f:82:08:51:4e:d1:00:a2:31:23:0a:a6:
         3c:4c:8b:36:b6:a3:d8:f4:49:67:64:10:16:dd:9b:b1:6d:98:
         f1:89:d8:e2:5b:b9:24:fb:87:f8:62:ca:46:99:07:a7:f1:cb:
         28:8a:11:a5:09:5b:60:7e:62:8d:04:b7:92:08:cc:44:93:1a:
         69:ba:ae:cc:95:9d:41:e8:60:0e:53:a1:13:73:67:11:49:8f:
         f5:10:4d:b9:be:74:0f:96:22:a9:b8:66:ea:c8:6e:80:ab:c6:
         56:89:b1:2d:a4:13:28:eb:ec:0f:a5:51:4e:6e:a8:5e:be:87:
         fd:ad:e0:ab:f2:0b:c2:94:9b:a9:30:64:67:d7:9b:90:b8:1c:
         1e:2d:cd:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:05 2024 by rpki-client on console-fra.rpki-client.org