Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3230312e35352e3232342e302f32302d3234203d3e203238353733.roa
File:                     3230312e35352e3232342e302f32302d3234203d3e203238353733.roa (raw, json)
Hash identifier:          m6had4c5kquRYw6wlmB1krCDgnJ6rXiGhQmn4gPZAoE=
Subject key identifier:   E4:D3:65:20:1E:25:20:21:19:2D:8A:0B:DA:ED:C4:FF:DE:56:22:CD
Certificate issuer:       /CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
Certificate serial:       0FA797E61B31750009EEAFAE0182B03447708F
Authority key identifier: 74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3230312e35352e3232342e302f32302d3234203d3e203238353733.roa
Signing time:             Fri 16 Feb 2024 19:00:00 +0000
ROA not before:           Fri 16 Feb 2024 18:55:00 +0000
ROA not after:            Fri 14 Feb 2025 19:00:00 +0000
asID:                     28573
IP address blocks:        201.55.224.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:a7:97:e6:1b:31:75:00:09:ee:af:ae:01:82:b0:34:47:70:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
        Validity
            Not Before: Feb 16 18:55:00 2024 GMT
            Not After : Feb 14 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2a:36:42:c5:45:67:70:dd:c0:a9:84:5a:32:
                    8a:d2:7f:63:e4:54:6d:0f:da:c5:37:ec:b1:2e:89:
                    50:34:0d:c4:7d:a4:96:13:ab:1e:86:e0:9e:67:7e:
                    cb:bb:52:73:28:e3:e9:a1:16:a7:81:2e:6d:1e:17:
                    26:63:2b:c3:60:3f:ec:61:19:bf:f7:ac:2b:31:eb:
                    5a:6e:7d:0b:f0:f3:1d:a1:42:ce:6d:c5:be:7f:d2:
                    76:76:fb:7b:6d:93:a2:43:60:86:20:cd:6a:e5:98:
                    6a:a4:ac:83:44:1a:2e:ea:b8:10:e8:ad:95:7b:fb:
                    44:c5:6e:fc:fe:35:2b:5c:d5:32:63:e8:c7:2a:2d:
                    84:43:4a:70:94:79:04:f0:43:ff:6b:60:12:53:98:
                    89:a8:c5:42:fb:97:7a:46:b7:1a:8e:99:7a:71:d6:
                    89:b9:7f:6e:5b:82:ae:55:b7:95:e6:14:f2:3b:dd:
                    8f:b3:e7:31:9b:78:4d:67:9e:85:40:e2:78:4c:06:
                    4b:a8:08:4a:1b:f7:6b:ae:b8:88:51:ba:a0:d4:06:
                    c7:33:4f:03:1f:f4:16:04:93:63:e9:1f:c7:4e:d5:
                    39:36:f2:a2:a7:f8:93:06:65:a0:1e:30:4b:20:6f:
                    99:f6:88:d3:15:3e:1e:7b:2c:e5:10:ef:34:77:25:
                    6b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:D3:65:20:1E:25:20:21:19:2D:8A:0B:DA:ED:C4:FF:DE:56:22:CD
            X509v3 Authority Key Identifier:
                keyid:74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3230312e35352e3232342e302f32302d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.55.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         44:a6:85:82:f0:88:a9:9a:9c:cc:29:69:73:1b:52:c4:c9:73:
         b3:1d:2c:34:fe:d7:0f:cc:be:5f:12:4d:fe:d2:55:81:e4:bf:
         21:f9:7a:48:ee:7a:e5:3c:42:8f:85:69:f1:aa:6f:b0:84:d6:
         56:69:b3:e9:f2:b4:a0:90:2f:1b:0c:cc:7b:19:2b:c7:95:c0:
         f6:92:19:69:dc:c0:2a:61:af:6d:58:5a:cc:11:11:fe:67:5e:
         d3:f6:11:fa:3c:e0:ad:af:8a:6b:a4:5c:8a:e9:df:62:53:c0:
         70:60:99:17:eb:7d:ad:82:89:cb:10:04:fa:02:18:c5:6f:00:
         ae:6b:8c:de:31:b8:61:82:9b:b1:96:a3:c7:10:64:92:c0:83:
         ea:3c:ae:b5:b2:b8:dc:cd:1e:c4:73:58:3e:6d:dc:e3:dc:19:
         2a:72:f9:56:a4:e6:dd:38:5f:bd:45:9d:46:00:1b:58:71:51:
         db:2c:21:f9:04:bd:f9:57:eb:bc:dc:ae:f7:2e:9b:34:72:45:
         63:0f:53:0d:86:76:c0:8a:2d:8a:84:e4:c5:d0:22:0e:80:48:
         9d:3d:96:d1:6c:0b:f3:e6:38:85:a5:5b:45:f6:a6:21:e2:04:
         5f:a7:75:a1:73:77:f3:fe:b4:11:47:ac:96:ea:8d:54:55:6a:
         0d:ca:34:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:25 2024 by rpki-client on console-ams.rpki-client.org