Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3137372e3139322e302e302f31342d3234203d3e203238353733.roa
File:                     3137372e3139322e302e302f31342d3234203d3e203238353733.roa (raw, json)
Hash identifier:          18PsxZmDz0C89Fat4zMKYVCBxtCY+TGd6FCk6/YCS+c=
Subject key identifier:   47:D5:DD:45:A5:1F:27:89:E4:72:89:C1:FE:62:C7:AA:E6:5D:32:B7
Certificate issuer:       /CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
Certificate serial:       34DE60F3D0D8B216F546A3CD11F0D3310EBE779D
Authority key identifier: 74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3137372e3139322e302e302f31342d3234203d3e203238353733.roa
Signing time:             Fri 16 Feb 2024 19:00:03 +0000
ROA not before:           Fri 16 Feb 2024 18:55:03 +0000
ROA not after:            Fri 14 Feb 2025 19:00:03 +0000
asID:                     28573
IP address blocks:        177.192.0.0/14 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:de:60:f3:d0:d8:b2:16:f5:46:a3:cd:11:f0:d3:31:0e:be:77:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
        Validity
            Not Before: Feb 16 18:55:03 2024 GMT
            Not After : Feb 14 19:00:03 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:a5:15:db:9c:1b:72:80:d4:cd:c6:4f:bc:65:
                    e9:dd:81:dd:3a:3e:ab:29:1c:af:e1:5b:34:76:ed:
                    31:df:f7:af:7a:49:a9:db:d5:23:f0:10:b9:02:13:
                    52:73:24:1f:65:fa:2e:2f:95:8e:b5:48:7c:10:1d:
                    b7:93:34:a1:7d:7e:48:d5:0f:94:e4:66:78:d3:a2:
                    a6:c1:95:af:ef:d9:50:aa:75:56:4c:8c:5d:fc:72:
                    ab:c5:33:7e:69:e5:5f:c5:15:51:4b:61:93:31:89:
                    8e:8b:56:26:65:8b:3f:4c:26:df:fe:c0:36:84:d6:
                    22:a9:cb:85:b9:e4:d1:5a:48:77:be:87:f1:18:62:
                    54:8c:23:6a:72:35:1a:e7:6d:ef:b8:05:56:3c:12:
                    91:fe:6c:73:c8:9c:d8:15:e4:32:6a:d2:75:e0:f1:
                    74:22:71:92:95:67:09:c7:e9:96:df:44:67:cb:38:
                    d2:11:08:fd:56:f7:7e:84:52:c0:7e:a7:23:78:5d:
                    c8:92:1c:ef:e5:bf:75:f9:da:3d:eb:a1:3e:99:81:
                    f7:47:75:5b:46:7a:70:b2:e7:bf:48:54:7f:c7:d9:
                    3b:1e:9e:77:8b:8b:88:a1:7f:42:36:34:09:f8:38:
                    8f:47:5e:24:61:46:73:e3:6a:e1:1d:73:0b:7e:1d:
                    63:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:D5:DD:45:A5:1F:27:89:E4:72:89:C1:FE:62:C7:AA:E6:5D:32:B7
            X509v3 Authority Key Identifier:
                keyid:74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3137372e3139322e302e302f31342d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.192.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         79:25:84:40:d6:02:7e:d9:b5:dc:34:d5:22:aa:d5:ce:ef:86:
         66:1a:cb:f6:3c:16:58:0b:a6:2a:08:74:78:6e:fe:b1:a0:ed:
         36:46:2a:66:87:0a:4e:97:f8:2d:54:d7:44:1b:51:24:a0:54:
         0c:8d:5d:15:bd:07:97:6b:8a:b3:b4:e6:ca:fe:02:16:33:99:
         10:9e:cc:00:2a:58:59:62:61:02:fd:bf:e3:4a:f4:98:ad:16:
         3d:5f:ce:2e:a5:48:2f:a1:35:d3:82:b2:d7:86:88:7d:c9:9d:
         1e:e4:80:16:19:f3:62:be:3b:2e:41:25:ba:55:6b:f7:56:5e:
         ab:12:27:6c:15:09:f4:cc:fd:64:1b:5f:9f:aa:54:18:44:12:
         2b:e7:eb:4b:35:02:b6:6b:92:6b:48:2b:18:52:b9:e3:be:0e:
         1b:a6:14:d0:7b:cf:ac:65:64:3c:6f:b8:33:83:86:9e:75:d9:
         da:db:d8:ec:50:25:30:ec:6b:36:90:34:ad:96:f8:1c:f5:4d:
         a1:99:da:4c:cd:79:ee:ca:fb:07:34:54:6c:07:ac:a4:f5:24:
         c5:1d:0e:9d:10:ef:9b:91:7d:49:ee:43:e7:2c:e9:30:57:81:
         e4:7b:d8:01:af:cf:1a:7c:5d:f6:99:f1:35:1c:a1:e8:26:3a:
         f8:f3:aa:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:04 2024 by rpki-client on console-ams.rpki-client.org