Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3137372e3130302e302e302f31362d3234203d3e203238353733.roa
File:                     3137372e3130302e302e302f31362d3234203d3e203238353733.roa (raw, json)
Hash identifier:          9VgyIYboHeC2TLmID9jPpQaeRbysAxf7gtub67IR5xU=
Subject key identifier:   9D:49:D6:69:21:05:7E:D4:D6:EF:53:80:E8:F7:F4:21:80:56:CF:4D
Certificate issuer:       /CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
Certificate serial:       77758A8F73C137BDE829549D22B9326ABBE51152
Authority key identifier: 74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3137372e3130302e302e302f31362d3234203d3e203238353733.roa
Signing time:             Fri 16 Feb 2024 19:00:04 +0000
ROA not before:           Fri 16 Feb 2024 18:55:04 +0000
ROA not after:            Fri 14 Feb 2025 19:00:04 +0000
asID:                     28573
IP address blocks:        177.100.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:75:8a:8f:73:c1:37:bd:e8:29:54:9d:22:b9:32:6a:bb:e5:11:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
        Validity
            Not Before: Feb 16 18:55:04 2024 GMT
            Not After : Feb 14 19:00:04 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:52:9a:a6:56:5b:60:37:4a:ab:ae:c1:a3:d7:
                    1f:e2:ef:00:c6:a0:ed:1c:5b:a4:a5:d9:38:94:08:
                    94:93:09:5a:d8:ce:38:e1:74:43:32:cc:f6:c1:db:
                    4f:02:f0:07:8a:22:c8:f1:59:4a:d3:26:8e:13:23:
                    55:b7:70:c9:5f:3e:73:e6:04:23:90:ae:79:3c:26:
                    07:25:75:f3:05:37:98:0c:26:9b:20:b2:87:dd:9e:
                    3d:62:6a:19:8c:c5:c4:5d:e3:2a:d1:7c:f4:c6:03:
                    8f:3c:ff:55:cc:50:47:a8:be:9f:93:a3:d8:0b:bd:
                    dd:58:7a:82:21:6e:78:c2:cb:0a:af:a6:9a:34:80:
                    9d:31:c3:f3:89:86:38:7e:c9:2a:02:d2:db:9f:01:
                    12:b2:72:b5:a3:ef:c9:d0:f0:f9:46:a8:f7:ca:c3:
                    e3:4f:7e:70:f6:d1:9f:ea:b7:14:1b:32:c0:2f:aa:
                    e7:f1:3f:07:74:6f:21:81:c5:3b:5b:c3:c8:cf:e3:
                    34:bd:dd:f6:c6:9f:19:b5:02:2e:28:0c:76:8a:82:
                    80:12:07:ff:58:7a:f9:fe:00:b0:92:dc:58:35:02:
                    89:d4:64:e7:59:7a:4c:09:0d:d0:62:13:0a:57:a2:
                    2e:7c:91:23:c5:2e:ed:8f:46:a5:ee:2e:00:b9:1f:
                    af:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:49:D6:69:21:05:7E:D4:D6:EF:53:80:E8:F7:F4:21:80:56:CF:4D
            X509v3 Authority Key Identifier:
                keyid:74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3137372e3130302e302e302f31362d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.100.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1c:dd:f8:f2:cd:d0:5f:5f:7c:4b:6f:73:50:3f:9b:55:84:86:
         42:45:66:fd:ab:90:82:c0:ac:3f:33:9d:d3:54:02:48:a4:9d:
         61:36:e5:85:b4:01:b9:37:14:20:df:d1:48:2c:11:2d:b7:d4:
         a6:42:3f:28:eb:86:c3:c8:70:11:1b:5a:86:41:83:9a:9a:fd:
         59:8f:83:61:9a:0f:73:d8:ba:43:35:80:8b:80:35:e9:c5:81:
         27:4c:fc:f8:67:76:29:bb:c0:67:7f:f0:34:ad:d7:fd:2f:bc:
         77:b7:f0:18:02:5c:59:86:4c:13:78:9c:3b:84:73:69:25:09:
         56:e9:97:1d:ec:e4:86:4c:ff:25:98:58:64:ef:7a:37:5e:3c:
         2b:59:d8:58:68:96:d0:d3:3c:e6:0f:5c:73:10:aa:5c:d1:4b:
         5d:6b:b2:fc:c5:59:5e:69:57:56:79:0c:37:e4:ce:f4:89:ec:
         d6:1d:78:ee:8a:8c:a2:c8:55:8b:1a:3d:9d:83:b7:65:a8:1f:
         34:87:3d:65:81:d0:40:9d:08:ae:42:aa:d0:f4:d5:f2:19:8f:
         ad:99:d3:23:33:14:a4:75:c8:cd:a4:8d:14:49:f7:6c:56:9a:
         df:ce:8c:1e:0c:8c:57:e0:f5:3d:43:59:f6:6a:89:7a:f3:4d:
         b8:19:b6:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org