Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3137372e36342e302e302f31352d3234203d3e203238353733.roa
File:                     3137372e36342e302e302f31352d3234203d3e203238353733.roa (raw, json)
Hash identifier:          3ZrIW7O0nPfRXEHJtyX/0ZeD4CY8FOFVrseBytIzgOQ=
Subject key identifier:   2C:CA:D2:C6:51:62:BA:4F:E5:53:98:18:68:FB:1D:97:A9:E6:48:1D
Certificate issuer:       /CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
Certificate serial:       2FD0779DEE4D90EBF6E5FBFBE048C482D1485304
Authority key identifier: 74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3137372e36342e302e302f31352d3234203d3e203238353733.roa
Signing time:             Fri 16 Feb 2024 19:00:03 +0000
ROA not before:           Fri 16 Feb 2024 18:55:03 +0000
ROA not after:            Fri 14 Feb 2025 19:00:03 +0000
asID:                     28573
IP address blocks:        177.64.0.0/15 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:d0:77:9d:ee:4d:90:eb:f6:e5:fb:fb:e0:48:c4:82:d1:48:53:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
        Validity
            Not Before: Feb 16 18:55:03 2024 GMT
            Not After : Feb 14 19:00:03 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:88:d4:c7:bc:23:67:31:a5:3f:b9:d3:c0:da:
                    6a:18:6c:ea:3a:ab:fd:e5:af:d6:71:ba:00:d8:f1:
                    4b:08:e6:83:97:46:41:c2:33:c3:ec:c6:15:20:9a:
                    85:2d:fb:79:77:2c:9a:12:16:6a:29:92:a0:4d:31:
                    9e:10:8a:d0:76:1b:e9:fc:6d:76:ea:3c:1d:bc:9b:
                    d5:2e:ef:70:44:fc:7a:b8:46:dc:c7:b3:7c:e7:f7:
                    cf:ca:42:3e:47:d5:d9:57:fa:44:48:8a:44:99:3d:
                    9a:65:c7:d8:c2:b7:01:79:86:1e:2e:fe:56:2b:31:
                    3f:74:b1:3b:cb:24:16:7b:02:ec:0e:17:9f:f4:8a:
                    b1:68:b0:9d:8e:0d:35:fe:c7:68:c2:64:81:b9:fc:
                    6b:e9:2b:59:d7:84:7b:6a:34:20:c2:b2:fc:69:3d:
                    8c:e1:e4:0e:13:2d:84:8c:c4:d6:01:de:92:fc:0b:
                    4a:1e:f6:fd:dd:95:e3:0e:06:21:5f:d3:3e:82:11:
                    f4:36:38:d7:e1:b8:9e:d2:c1:6f:44:fc:64:e2:0f:
                    0e:50:80:8f:20:1c:7e:1c:41:e5:10:e8:c0:e3:98:
                    f4:08:33:9a:59:d6:15:11:61:31:3c:14:43:87:4f:
                    6d:d5:77:e8:9d:67:fc:cd:e7:0a:c8:02:6b:53:72:
                    15:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:CA:D2:C6:51:62:BA:4F:E5:53:98:18:68:FB:1D:97:A9:E6:48:1D
            X509v3 Authority Key Identifier:
                keyid:74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3137372e36342e302e302f31352d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.64.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         92:63:1c:a6:36:d5:ea:23:de:50:bd:6c:c1:82:11:c5:98:4e:
         f6:c6:21:92:02:4a:12:bb:19:4f:12:0c:f1:98:1f:c7:d4:8c:
         12:d7:ca:70:4a:f9:c9:bf:8b:ad:72:b4:9a:11:16:d3:58:fe:
         c1:23:5f:f8:89:c3:f3:ec:08:25:e3:ab:d1:20:10:6e:93:68:
         2a:d8:f0:ab:5d:bc:c3:a3:bd:08:ce:a8:fa:bc:1b:ff:ac:a3:
         8f:3d:7b:87:1f:fb:8a:8b:1f:2b:47:d5:3f:58:fb:53:1a:57:
         59:ee:25:7c:fe:68:2c:64:93:f2:88:a4:da:65:6e:c3:30:87:
         09:95:5c:62:f0:09:99:8f:70:0c:90:3b:a5:e4:00:f6:1f:5c:
         88:d5:47:8d:d2:10:d1:b7:c8:f8:06:b8:0a:78:16:94:28:79:
         05:81:d2:e8:63:17:4c:bb:c3:68:78:32:91:51:bf:54:e1:53:
         57:a9:cd:7b:29:08:29:af:1b:d8:e1:e2:84:af:21:61:cc:47:
         97:0c:fb:d6:bb:75:b9:b1:e7:41:58:19:4d:eb:ad:8a:5a:b9:
         d1:b3:11:01:15:93:08:48:fa:75:37:c6:7b:39:e9:00:7b:d0:
         91:46:f8:d6:77:a4:d1:89:a3:4c:06:ea:8f:84:7b:1d:83:48:
         c0:53:1a:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:04 2024 by rpki-client on console-ams.rpki-client.org