Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3230312e37362e36342e302f31392d3234203d3e203238353733.roa
File:                     3230312e37362e36342e302f31392d3234203d3e203238353733.roa (raw, json)
Hash identifier:          QtNCCDhPyUpPI6pFpUvhk/a/Mw/+vBDHiyPu1O8k3c0=
Subject key identifier:   EB:28:78:69:B9:FD:7B:8D:A3:49:27:64:E8:D9:33:15:39:FA:58:B7
Certificate issuer:       /CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
Certificate serial:       1755BA509D3C050465B01D448F0135492F5CFF98
Authority key identifier: 74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3230312e37362e36342e302f31392d3234203d3e203238353733.roa
Signing time:             Fri 16 Feb 2024 19:00:05 +0000
ROA not before:           Fri 16 Feb 2024 18:55:05 +0000
ROA not after:            Fri 14 Feb 2025 19:00:05 +0000
asID:                     28573
IP address blocks:        201.76.64.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:55:ba:50:9d:3c:05:04:65:b0:1d:44:8f:01:35:49:2f:5c:ff:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
        Validity
            Not Before: Feb 16 18:55:05 2024 GMT
            Not After : Feb 14 19:00:05 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1b:bc:d8:ec:7d:c0:f6:24:02:98:8d:19:b9:
                    90:95:16:03:39:a3:19:ae:ff:31:0d:58:5d:54:bc:
                    94:10:67:93:da:ce:e2:f4:fa:79:c4:56:d3:33:6d:
                    b0:2e:ba:3a:76:cc:67:08:c0:92:5e:89:29:db:ff:
                    aa:4b:24:92:eb:11:39:ae:32:ab:59:ba:58:92:dc:
                    7e:e9:a7:04:35:5f:c9:bc:90:7b:13:b4:e5:aa:5f:
                    38:cf:28:ec:14:32:b1:28:ff:77:cf:8b:ef:2d:c6:
                    57:bc:e5:db:e9:98:5e:54:ae:38:59:c0:ac:5b:70:
                    2b:b3:96:89:b9:ed:e2:85:e8:b0:c4:ca:a7:79:a2:
                    10:f8:25:c4:14:c1:9a:5d:1a:bd:af:b5:db:6f:8e:
                    84:ef:81:e9:37:bf:86:56:6b:a7:ce:d9:ad:43:e0:
                    63:24:b2:1d:e4:d4:9b:10:c6:86:76:91:0c:1b:67:
                    6e:57:85:59:10:20:08:04:9e:e2:c2:fe:35:ab:47:
                    81:4a:1e:ab:db:b3:8a:94:f1:0c:5d:88:10:7b:52:
                    3e:ce:df:22:15:e6:34:8d:df:80:dd:9b:d9:c5:71:
                    f9:6d:a0:4c:a7:fc:ea:c2:6b:4d:2f:ac:7b:87:9a:
                    ee:29:be:e1:c7:90:3d:7e:7a:db:dd:06:17:27:09:
                    3d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:28:78:69:B9:FD:7B:8D:A3:49:27:64:E8:D9:33:15:39:FA:58:B7
            X509v3 Authority Key Identifier:
                keyid:74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3230312e37362e36342e302f31392d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.76.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4c:89:81:0b:df:f3:04:28:5d:d5:f1:b7:93:26:08:2c:18:7a:
         bc:e2:f2:a1:19:fb:45:fb:78:56:80:d4:46:54:90:08:cd:93:
         9d:f0:39:b6:8d:25:3e:56:78:ba:0f:bc:6d:db:83:7f:53:0a:
         8f:0e:89:4b:89:a6:77:e5:aa:ff:48:70:53:96:88:7e:14:fa:
         11:58:18:d4:1e:1a:e8:0c:ce:01:0e:c7:28:30:43:e8:d8:d0:
         c6:17:13:d6:0d:bd:e2:34:19:89:ca:4a:5a:62:63:d1:e8:17:
         d9:01:b0:84:34:fa:c9:a5:7a:e1:e1:75:51:ec:9d:3f:86:65:
         00:4b:c0:81:07:c2:29:1b:2a:6a:b7:ab:30:63:46:2e:a6:9e:
         5b:26:0f:68:f8:d0:7e:be:63:1b:61:7f:c9:a9:c9:8e:df:9c:
         a4:ef:75:5c:d9:56:79:3b:f7:7e:00:db:d6:33:69:2e:7f:da:
         de:e7:43:47:ef:f1:5a:b4:92:8b:ea:b7:d7:00:6f:d2:ef:86:
         9a:06:f7:2a:0b:60:61:90:f7:ad:81:78:34:d8:59:9e:1b:d6:
         a6:39:66:62:11:0c:64:78:11:4d:a5:2e:44:3a:56:0b:c9:70:
         6d:bc:6c:c5:f8:5e:cd:bb:ba:82:7a:ab:4f:91:16:8a:d2:4f:
         e2:6f:ec:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:25 2024 by rpki-client on console-ams.rpki-client.org