Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3138392e3130302e302e302f31342d3234203d3e203238353733.roa
File:                     3138392e3130302e302e302f31342d3234203d3e203238353733.roa (raw, json)
Hash identifier:          dleU124iBrp0geMJiH5XnCDJ5iZ7BEOGyGoF5yvHMkQ=
Subject key identifier:   66:37:85:E0:FA:D9:88:7B:00:51:17:CC:61:E7:99:E3:D1:53:95:80
Certificate issuer:       /CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
Certificate serial:       6B5E7E93A697A5D8822EBABEB8A48BC698131911
Authority key identifier: 74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3138392e3130302e302e302f31342d3234203d3e203238353733.roa
Signing time:             Fri 16 Feb 2024 19:00:03 +0000
ROA not before:           Fri 16 Feb 2024 18:55:03 +0000
ROA not after:            Fri 14 Feb 2025 19:00:03 +0000
asID:                     28573
IP address blocks:        189.100.0.0/14 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:5e:7e:93:a6:97:a5:d8:82:2e:ba:be:b8:a4:8b:c6:98:13:19:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
        Validity
            Not Before: Feb 16 18:55:03 2024 GMT
            Not After : Feb 14 19:00:03 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:03:c7:76:38:41:4e:c0:25:39:ff:54:1a:cd:
                    7a:46:b5:06:98:43:12:fa:59:46:5e:1b:57:47:8c:
                    0f:8d:eb:c4:fe:84:99:3a:a2:07:7e:71:74:85:73:
                    58:13:f3:44:78:90:73:9d:26:29:94:ab:19:95:82:
                    1c:5d:67:0d:6e:48:98:bf:22:03:2f:66:5e:9c:7d:
                    4e:ec:b4:f0:49:7c:c0:b0:7a:a3:7c:af:0c:32:26:
                    c7:9f:6e:10:22:40:82:ea:e0:6c:18:72:82:81:fa:
                    a1:81:f1:f6:36:4b:6e:61:86:fd:46:da:47:d1:e3:
                    11:f9:6c:e9:a6:61:67:af:60:02:af:7d:ab:b7:d0:
                    42:1c:81:21:3a:2f:0c:9e:05:6a:1a:77:60:3d:1d:
                    15:5b:98:bd:40:ca:40:35:ea:58:05:82:13:50:ee:
                    16:4a:e0:02:39:4c:76:c4:4b:1d:fe:0a:a1:f1:f3:
                    f8:5b:fb:43:85:c1:72:a3:be:c1:8c:6a:04:70:a6:
                    4f:16:31:50:96:b7:d6:df:96:a7:18:9c:2a:c9:8b:
                    f4:4a:1a:4c:f2:a6:08:d3:20:b8:68:23:7d:9a:68:
                    b9:b9:de:2b:8d:15:6c:7c:01:9b:bb:31:83:02:83:
                    bc:6a:fd:f6:f5:b2:1f:89:26:d5:ad:8f:b2:c1:e4:
                    28:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:37:85:E0:FA:D9:88:7B:00:51:17:CC:61:E7:99:E3:D1:53:95:80
            X509v3 Authority Key Identifier:
                keyid:74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3138392e3130302e302e302f31342d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.100.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         8d:5d:ed:bd:e4:a5:c3:cf:02:36:cf:b8:c6:09:3b:e6:ef:a2:
         f9:40:44:78:56:ad:d4:44:bb:4f:38:1f:75:2b:f9:a7:d5:26:
         46:60:54:6c:c9:9e:a3:50:fc:72:29:61:a6:77:a0:31:55:81:
         d1:0a:1a:ad:60:92:3b:cc:40:c9:c8:16:37:be:21:25:06:43:
         8f:03:fa:cf:1a:8a:e9:63:b1:50:52:e9:70:a6:ea:e5:96:4f:
         b7:40:4c:d7:2d:01:85:a4:f6:0e:ec:5c:ba:60:8d:77:9d:f7:
         00:01:38:5c:96:a4:d3:98:1a:95:88:45:be:13:84:9e:ad:82:
         d3:98:3c:7a:f2:ee:81:7f:46:4b:58:19:9c:fe:11:36:9d:37:
         a6:0f:90:7e:4a:6f:1c:36:55:1d:f0:8d:ee:e9:ea:22:e8:fc:
         b7:cc:38:20:88:f7:3a:44:a2:ea:5e:9a:25:9a:7d:42:4e:25:
         dc:32:6f:60:ef:80:38:cd:14:b2:fa:73:bf:49:fc:7e:9f:5a:
         89:fc:84:65:a9:33:0b:47:6e:a6:e9:d4:95:54:64:9d:80:bd:
         01:05:87:ee:7b:96:ec:8f:fe:ee:28:84:c4:4c:53:0a:c9:a7:
         9e:d2:b4:fc:7d:0c:1f:fe:ab:6b:f5:c7:c8:ae:d1:3e:8f:e9:
         4b:67:43:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:05 2024 by rpki-client on console-fra.rpki-client.org