Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3137392e3130352e302e302f31362d3234203d3e203238353733.roa
File:                     3137392e3130352e302e302f31362d3234203d3e203238353733.roa (raw, json)
Hash identifier:          WAXW676r8dwdCyBq3qDu+ZLl6+e5A7rUZSG7xgz39Pw=
Subject key identifier:   80:2B:D3:C1:F1:27:7A:2E:D3:D3:0E:40:D4:21:3A:FB:D5:D7:99:63
Certificate issuer:       /CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
Certificate serial:       144710240D5ADB9345ABBDE90C2A0D364A0ACDE0
Authority key identifier: 74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3137392e3130352e302e302f31362d3234203d3e203238353733.roa
Signing time:             Fri 16 Feb 2024 19:00:00 +0000
ROA not before:           Fri 16 Feb 2024 18:55:00 +0000
ROA not after:            Fri 14 Feb 2025 19:00:00 +0000
asID:                     28573
IP address blocks:        179.105.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:47:10:24:0d:5a:db:93:45:ab:bd:e9:0c:2a:0d:36:4a:0a:cd:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
        Validity
            Not Before: Feb 16 18:55:00 2024 GMT
            Not After : Feb 14 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b5:4e:7d:59:73:43:df:b5:a6:c0:45:11:be:
                    c7:9e:97:fb:9f:21:10:4e:6d:e5:96:34:ca:1c:06:
                    24:27:52:fc:80:fc:6f:ab:0b:3a:c4:51:c4:f6:35:
                    40:40:a6:df:6c:cd:12:39:a9:2d:63:8c:90:f3:d4:
                    9e:a8:84:ca:7d:65:e0:8a:93:13:da:1a:63:5a:30:
                    d6:a5:4a:4e:75:3e:de:c8:8b:79:e5:52:59:a1:2e:
                    35:a9:00:de:0e:9e:bd:20:0f:38:f3:0a:72:0d:34:
                    bf:1e:c8:fa:65:8d:cb:8a:ba:9f:45:90:c8:f5:a5:
                    89:e6:af:30:f5:19:4f:96:dd:f3:90:8b:52:80:3b:
                    36:12:cc:2e:69:ee:16:61:f2:97:0b:e8:fd:4b:db:
                    5b:37:70:7c:6e:7b:16:df:ff:7c:ad:57:a3:d7:91:
                    96:65:12:5a:79:e2:32:ed:65:03:f6:ed:c2:8c:af:
                    59:34:b2:4b:88:72:1a:d2:3d:62:3d:3d:78:0f:16:
                    48:ed:71:b9:25:59:9d:a5:a4:f7:4e:4d:61:6c:2c:
                    d6:a2:3f:65:b2:86:f1:0e:fe:88:f4:c9:8b:33:bd:
                    1a:94:b1:92:a5:43:49:f1:6e:c6:21:4e:be:1b:ce:
                    3b:c5:36:4d:b3:01:cb:ab:cc:d2:e8:0a:07:ab:23:
                    25:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:2B:D3:C1:F1:27:7A:2E:D3:D3:0E:40:D4:21:3A:FB:D5:D7:99:63
            X509v3 Authority Key Identifier:
                keyid:74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3137392e3130352e302e302f31362d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.105.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         55:7a:9e:72:76:c4:b3:60:5a:b9:d6:9f:0d:9d:16:13:6e:d1:
         02:26:87:65:f2:a2:8b:f2:33:fa:91:da:9e:1f:15:85:25:a9:
         e7:7c:81:41:5c:87:2d:62:a2:97:a2:46:c5:e7:b6:1b:da:2a:
         bf:28:b3:0d:91:2d:0b:5a:a8:94:8c:31:b8:aa:d3:b9:aa:e3:
         f5:d4:24:0a:2a:27:6d:fb:dc:a0:9f:80:90:76:28:47:17:b3:
         4a:dc:17:3d:21:97:07:31:4d:ab:bd:e4:56:b3:82:34:cd:c2:
         29:4c:5a:c6:fd:e7:49:e0:75:93:2c:97:70:1a:d2:5c:0e:6e:
         59:42:6e:f5:88:97:3c:17:3c:1f:0d:08:74:92:c6:da:cf:2e:
         f5:42:d4:4e:ea:62:1f:ce:7f:dd:cf:3f:14:05:bd:49:bd:a4:
         70:44:6d:5f:2c:8e:86:79:b6:f8:7e:bc:59:00:a6:ac:64:65:
         b4:ab:e1:58:9d:70:c3:15:07:85:3c:e7:58:e7:f2:0b:4a:e0:
         30:1c:e5:4b:0f:28:55:f7:0e:2a:37:da:44:4d:7c:23:42:43:
         e9:a8:4f:99:2a:eb:ad:f7:bb:d8:bc:df:c7:8e:ad:5f:5d:5b:
         a4:13:fd:5e:8c:35:6b:3e:cc:4f:93:70:8d:97:f1:12:50:90:
         82:d1:e0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org