Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3137372e33322e302e302f31342d3234203d3e203238353733.roa
File:                     3137372e33322e302e302f31342d3234203d3e203238353733.roa (raw, json)
Hash identifier:          Sbxpg98u7aIaSFEPf7VrcaaLNj3pLO30ynkBr3CiL3o=
Subject key identifier:   30:26:56:77:1A:F2:C3:5D:90:DA:6E:95:5A:3D:C6:70:33:44:D5:FE
Certificate issuer:       /CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
Certificate serial:       52750CAF84FC30556A2DF3DE7C3382C3931EA980
Authority key identifier: 74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3137372e33322e302e302f31342d3234203d3e203238353733.roa
Signing time:             Fri 16 Feb 2024 19:00:01 +0000
ROA not before:           Fri 16 Feb 2024 18:55:01 +0000
ROA not after:            Fri 14 Feb 2025 19:00:01 +0000
asID:                     28573
IP address blocks:        177.32.0.0/14 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:75:0c:af:84:fc:30:55:6a:2d:f3:de:7c:33:82:c3:93:1e:a9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
        Validity
            Not Before: Feb 16 18:55:01 2024 GMT
            Not After : Feb 14 19:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:5d:a4:96:a2:56:a8:47:14:f0:94:ce:4d:0b:
                    a3:c7:dc:b0:fc:3c:7e:57:26:75:fe:8b:b3:56:a9:
                    10:8f:80:a7:72:ce:be:58:e0:97:aa:b9:f3:cc:d0:
                    8e:78:7d:24:8d:84:0c:fe:19:b3:41:38:f0:df:ab:
                    8f:ed:cf:99:52:bf:c8:49:35:1b:2d:52:47:45:05:
                    86:c9:16:3e:13:cf:a2:6b:9f:2d:d1:c7:52:20:31:
                    63:ca:92:6d:34:b0:7f:c8:e9:6e:a4:e3:e9:a5:50:
                    50:76:fe:09:f0:21:00:ad:ad:a3:60:5c:9a:cc:b2:
                    c5:01:64:6c:a4:b2:fc:fc:f4:02:e2:e3:26:5e:ce:
                    77:b0:6e:cb:9f:d1:e5:8f:35:df:cc:81:84:d5:9c:
                    d2:a4:f8:7e:69:d2:5a:5b:d0:3f:cd:a3:66:67:da:
                    1b:b7:38:32:9b:c1:b2:1d:f4:1b:fd:f8:15:99:ca:
                    73:8b:e3:c8:aa:73:ed:12:7e:90:49:14:ce:d4:a1:
                    ce:cc:24:c5:63:33:fd:88:e9:23:91:79:c6:1c:77:
                    94:4e:37:e4:78:e2:6b:01:f0:94:b8:9d:48:75:8f:
                    9c:5f:65:93:96:75:7b:92:ec:99:d8:bc:7f:f0:17:
                    a4:75:e0:72:56:ba:0c:cd:b0:a7:0c:e6:c1:fa:5c:
                    15:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:26:56:77:1A:F2:C3:5D:90:DA:6E:95:5A:3D:C6:70:33:44:D5:FE
            X509v3 Authority Key Identifier:
                keyid:74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3137372e33322e302e302f31342d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.32.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         66:ad:a0:af:75:37:fd:bb:bc:d4:69:2b:80:9b:51:13:fb:6c:
         a7:20:ec:00:13:6d:b4:9f:ca:c2:c4:22:41:f5:e6:6d:90:e6:
         f6:b1:50:55:10:af:40:a3:de:11:4b:f8:20:70:02:57:39:a7:
         cf:02:f4:a1:25:e3:31:1e:d4:29:bd:7b:0b:0e:84:a6:84:3c:
         28:f4:e4:bb:2e:2b:ae:92:31:c4:55:f6:7c:8e:97:c9:1f:e4:
         7e:e7:dc:d2:3b:bd:4e:e7:22:98:b1:6c:2f:f9:1d:b2:5d:2d:
         d4:e6:95:0e:14:dd:1e:51:07:9e:3b:22:da:27:ea:ad:90:fd:
         a5:58:05:c4:e1:60:fe:25:8f:8a:9d:81:86:69:16:b1:01:ff:
         34:c8:29:94:9d:3d:76:ca:3c:d5:c5:db:86:59:8d:76:e0:54:
         10:34:b5:5d:ef:f0:7f:0f:8a:c5:75:7f:80:4c:67:c9:ce:af:
         1d:fb:c4:e6:8e:52:5c:cf:90:f8:8c:e9:54:ac:05:62:51:76:
         54:20:c2:59:e2:ae:69:35:e9:00:09:c7:e9:df:47:d0:83:4c:
         cc:d4:92:b5:78:d6:eb:bb:0f:a4:c1:51:d1:39:4f:05:6b:43:
         f8:7b:95:00:5a:3c:4f:4e:2d:d0:a3:7a:0c:6a:ab:76:60:81:
         9f:e1:9f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:04 2024 by rpki-client on console-ams.rpki-client.org