Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3230312e31372e302e302f31362d3234203d3e203238353733.roa
File:                     3230312e31372e302e302f31362d3234203d3e203238353733.roa (raw, json)
Hash identifier:          vxquax/IQy1xDYwH/dBtB+enAaLrfPcyPl8ccX/D/j0=
Subject key identifier:   FC:5F:79:92:EB:27:65:96:B9:13:4C:74:FB:82:6B:CC:67:0A:09:7F
Certificate issuer:       /CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
Certificate serial:       733E7C942E95768F2D48B6C86F81EE7EB837C8FE
Authority key identifier: 74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3230312e31372e302e302f31362d3234203d3e203238353733.roa
Signing time:             Fri 16 Feb 2024 19:00:01 +0000
ROA not before:           Fri 16 Feb 2024 18:55:01 +0000
ROA not after:            Fri 14 Feb 2025 19:00:01 +0000
asID:                     28573
IP address blocks:        201.17.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:3e:7c:94:2e:95:76:8f:2d:48:b6:c8:6f:81:ee:7e:b8:37:c8:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
        Validity
            Not Before: Feb 16 18:55:01 2024 GMT
            Not After : Feb 14 19:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:45:4a:62:ce:a9:fd:48:03:a3:d6:2c:e9:b6:
                    3c:8e:da:9b:55:f6:f4:8e:58:af:54:22:83:c6:6f:
                    c1:18:62:55:22:23:3a:78:2c:ed:df:d5:45:f7:31:
                    58:ac:10:b2:12:a1:de:51:8d:61:9a:5b:0e:d1:42:
                    34:83:25:90:24:e3:7f:45:4b:5f:00:0f:8c:ed:b6:
                    3b:8a:7f:76:77:78:43:32:7d:14:21:94:5e:3b:5e:
                    88:bf:42:fe:fc:5d:f5:8f:48:f0:d4:cf:5e:a0:e1:
                    31:b0:c6:5f:8e:34:b1:d3:3d:a4:74:e6:63:93:f6:
                    81:d8:36:d4:9c:d8:a2:3e:da:d4:ff:da:8b:18:4f:
                    c4:a9:93:0c:c1:11:dc:17:b0:fa:14:cd:18:d4:be:
                    71:90:27:b3:d7:fd:05:f6:9a:9a:78:a8:22:69:df:
                    90:0f:81:87:ba:b4:1e:43:df:60:60:c5:9f:15:71:
                    44:76:f2:ef:80:0f:cc:bd:b0:d0:c3:fc:c6:5e:79:
                    18:4d:17:15:69:a4:3b:9c:dc:57:f6:61:e1:b0:da:
                    b8:16:a9:ec:f5:43:ff:52:fb:e2:36:eb:51:1c:80:
                    a3:63:e7:30:44:a4:ad:bd:3e:9d:09:76:71:b2:14:
                    fb:08:f1:77:f3:33:aa:cb:28:fc:df:7b:dc:4c:18:
                    67:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:5F:79:92:EB:27:65:96:B9:13:4C:74:FB:82:6B:CC:67:0A:09:7F
            X509v3 Authority Key Identifier:
                keyid:74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3230312e31372e302e302f31362d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.17.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0f:39:22:47:05:ea:1d:a5:34:68:33:ee:fe:62:d9:32:db:5d:
         30:3a:3e:c0:5b:44:c8:40:1c:88:db:45:1f:ac:0c:71:9f:dc:
         f5:59:23:59:3c:2d:e1:77:e1:99:0b:3e:ef:a4:ef:41:64:0d:
         7c:9f:aa:0e:ea:74:7f:70:59:83:cc:82:cd:aa:08:24:f5:e6:
         77:90:32:96:63:bd:35:c8:bb:10:16:87:2e:a4:7e:c3:e3:6e:
         de:6c:25:32:25:a5:42:c2:27:17:9c:95:17:64:8b:23:03:a9:
         f2:d4:d6:98:2a:65:f7:93:9b:b6:78:fc:ba:5b:3f:fa:dd:a0:
         9d:3f:71:ff:a9:3c:f8:fb:82:a8:0f:3d:b6:c8:13:ba:c9:2b:
         4d:62:64:53:df:0e:7b:1e:14:a3:07:3d:aa:50:14:62:7b:77:
         79:33:50:7a:6a:cb:f8:16:f8:37:5a:85:55:2b:87:27:f8:5b:
         8c:56:5e:ba:bd:92:fb:65:da:65:b5:36:52:cf:85:30:13:63:
         79:15:3a:9c:e8:1a:f9:e8:4a:3f:79:ec:91:9e:96:ba:f7:78:
         8f:5b:3a:05:16:61:62:ea:9f:26:3c:a8:7b:07:26:af:0e:a7:
         f7:46:d4:4e:30:3d:19:b7:9a:f6:2a:5b:a3:84:3a:84:3e:51:
         15:81:86:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:05 2024 by rpki-client on console-fra.rpki-client.org