Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3137392e3135322e302e302f31332d3234203d3e203238353733.roa
File:                     3137392e3135322e302e302f31332d3234203d3e203238353733.roa (raw, json)
Hash identifier:          u3lqom4P+Ub3FFq/E2oPTrOVUiYw3ZkbMBrisDOjGas=
Subject key identifier:   BF:E1:EC:CB:17:57:21:A0:6A:3D:80:5B:5F:D0:94:F5:DC:98:48:F7
Certificate issuer:       /CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
Certificate serial:       2825800331040FB07EC7BACD11CCA670A4CBCA91
Authority key identifier: 74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3137392e3135322e302e302f31332d3234203d3e203238353733.roa
Signing time:             Fri 16 Feb 2024 19:00:02 +0000
ROA not before:           Fri 16 Feb 2024 18:55:02 +0000
ROA not after:            Fri 14 Feb 2025 19:00:02 +0000
asID:                     28573
IP address blocks:        179.152.0.0/13 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:25:80:03:31:04:0f:b0:7e:c7:ba:cd:11:cc:a6:70:a4:cb:ca:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
        Validity
            Not Before: Feb 16 18:55:02 2024 GMT
            Not After : Feb 14 19:00:02 2025 GMT
        Subject: CN=3082010A0282010100B26961C31BAD918CCE09EAA0B092EF72C2F02ABA304BB49E837D52EE49C7BC7BF6F6F980C8715A2B2A3CD662B08EF244DE0D33E0698487D32D0CCA0EBE1F2FD5508E7B6952886305A5BB667611620F30F58EF180C248E4F2760EE05ACE5B3D55BA781E286867B26F54E6D10D22B19DF2C92C1807951C69F178B49DCC14BF0C43CE6DBFCD8F497CEAD363EC927B8A5C5734008B612E29D0ACD7748C230460CEEF159C91F032ED34A268F5AEE77E17463D429CA1F2211EEA7093CB0B285AA05383DC5F2D89572F93E971E52F1899F33B0B655CFE7B61E437E5138640827ADA99393E36DD15F8EDE7AE9C7133C0211628B020B64E1446C73E3579294970B4729DE30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:69:61:c3:1b:ad:91:8c:ce:09:ea:a0:b0:92:
                    ef:72:c2:f0:2a:ba:30:4b:b4:9e:83:7d:52:ee:49:
                    c7:bc:7b:f6:f6:f9:80:c8:71:5a:2b:2a:3c:d6:62:
                    b0:8e:f2:44:de:0d:33:e0:69:84:87:d3:2d:0c:ca:
                    0e:be:1f:2f:d5:50:8e:7b:69:52:88:63:05:a5:bb:
                    66:76:11:62:0f:30:f5:8e:f1:80:c2:48:e4:f2:76:
                    0e:e0:5a:ce:5b:3d:55:ba:78:1e:28:68:67:b2:6f:
                    54:e6:d1:0d:22:b1:9d:f2:c9:2c:18:07:95:1c:69:
                    f1:78:b4:9d:cc:14:bf:0c:43:ce:6d:bf:cd:8f:49:
                    7c:ea:d3:63:ec:92:7b:8a:5c:57:34:00:8b:61:2e:
                    29:d0:ac:d7:74:8c:23:04:60:ce:ef:15:9c:91:f0:
                    32:ed:34:a2:68:f5:ae:e7:7e:17:46:3d:42:9c:a1:
                    f2:21:1e:ea:70:93:cb:0b:28:5a:a0:53:83:dc:5f:
                    2d:89:57:2f:93:e9:71:e5:2f:18:99:f3:3b:0b:65:
                    5c:fe:7b:61:e4:37:e5:13:86:40:82:7a:da:99:39:
                    3e:36:dd:15:f8:ed:e7:ae:9c:71:33:c0:21:16:28:
                    b0:20:b6:4e:14:46:c7:3e:35:79:29:49:70:b4:72:
                    9d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:E1:EC:CB:17:57:21:A0:6A:3D:80:5B:5F:D0:94:F5:DC:98:48:F7
            X509v3 Authority Key Identifier:
                keyid:74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3137392e3135322e302e302f31332d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.152.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         9d:e8:06:c1:89:79:f8:12:76:8b:64:27:4e:a0:a4:23:1b:85:
         09:70:d3:12:91:c5:dc:67:d8:ed:f1:1e:fa:ac:40:c9:d0:73:
         a7:a4:fc:d2:10:50:b4:fc:21:05:47:d9:c9:93:11:e3:1f:27:
         48:32:c5:3e:a1:87:0a:89:06:53:57:ca:10:db:49:68:17:fb:
         ee:67:0c:79:d4:85:5c:f5:c5:16:de:d7:62:15:01:7e:d3:ab:
         ee:1d:b2:a6:4c:31:c6:83:19:7d:b1:43:42:1f:1b:49:86:5b:
         bd:b4:83:02:a5:ea:6e:a2:6a:10:ca:79:36:58:22:70:77:66:
         3e:22:29:03:23:84:ad:29:6c:c8:c9:18:0b:7b:59:27:0d:1d:
         b8:f7:9a:5d:eb:53:de:45:d1:8a:30:0c:e4:fc:ae:21:dd:f0:
         de:40:81:09:57:39:a8:c0:35:4c:f7:77:84:34:f3:35:ec:fb:
         7a:e9:4e:6d:c8:8c:71:18:bc:b5:e1:94:7f:57:81:42:cb:bc:
         aa:9b:33:14:0b:26:2f:6e:79:a8:9f:3c:6c:76:9a:ef:25:c7:
         ea:b0:4c:ac:6b:a0:68:a7:78:91:56:6c:c0:30:4f:3e:57:c4:
         2e:7d:ca:d9:49:6c:d5:be:f6:ab:dd:ba:7c:43:41:ad:55:4b:
         96:30:00:6e
-----BEGIN CERTIFICATE-----
MIIHPjCCBiagAwIBAgIUKCWAAzEED7B+x7rNEcymcKTLypEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzRFM0IwRDJDM0YwQTVFNkJBNzdBODcxMEVFOUI5QkNC
RDU2OUU5RDAeFw0yNDAyMTYxODU1MDJaFw0yNTAyMTQxOTAwMDJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjI2OTYxQzMxQkFEOTE4Q0NF
MDlFQUEwQjA5MkVGNzJDMkYwMkFCQTMwNEJCNDlFODM3RDUyRUU0OUM3QkM3QkY2
RjZGOTgwQzg3MTVBMkIyQTNDRDY2MkIwOEVGMjQ0REUwRDMzRTA2OTg0ODdEMzJE
MENDQTBFQkUxRjJGRDU1MDhFN0I2OTUyODg2MzA1QTVCQjY2NzYxMTYyMEYzMEY1
OEVGMTgwQzI0OEU0RjI3NjBFRTA1QUNFNUIzRDU1QkE3ODFFMjg2ODY3QjI2RjU0
RTZEMTBEMjJCMTlERjJDOTJDMTgwNzk1MUM2OUYxNzhCNDlEQ0MxNEJGMEM0M0NF
NkRCRkNEOEY0OTdDRUFEMzYzRUM5MjdCOEE1QzU3MzQwMDhCNjEyRTI5RDBBQ0Q3
NzQ4QzIzMDQ2MENFRUYxNTlDOTFGMDMyRUQzNEEyNjhGNUFFRTc3RTE3NDYzRDQy
OUNBMUYyMjExRUVBNzA5M0NCMEIyODVBQTA1MzgzREM1RjJEODk1NzJGOTNFOTcx
RTUyRjE4OTlGMzNCMEI2NTVDRkU3QjYxRTQzN0U1MTM4NjQwODI3QURBOTkzOTNF
MzZERDE1RjhFREU3QUU5QzcxMzNDMDIxMTYyOEIwMjBCNjRFMTQ0NkM3M0UzNTc5
Mjk0OTcwQjQ3MjlERTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAsmlhwxutkYzOCeqgsJLvcsLwKrowS7Seg31S7knHvHv29vmAyHFa
Kyo81mKwjvJE3g0z4GmEh9MtDMoOvh8v1VCOe2lSiGMFpbtmdhFiDzD1jvGAwkjk
8nYO4FrOWz1VungeKGhnsm9U5tENIrGd8sksGAeVHGnxeLSdzBS/DEPObb/Nj0l8
6tNj7JJ7ilxXNACLYS4p0KzXdIwjBGDO7xWckfAy7TSiaPWu534XRj1CnKHyIR7q
cJPLCyhaoFOD3F8tiVcvk+lx5S8YmfM7C2Vc/nth5DflE4ZAgnramTk+Nt0V+O3n
rpxxM8AhFiiwILZOFEbHPjV5KUlwtHKd4wIDAQABo4ICTDCCAkgwHQYDVR0OBBYE
FL/h7MsXVyGgaj2AW1/QlPXcmEj3MB8GA1UdIwQYMBaAFHTjsNLD8KXmuneocQ7p
uby9Vp6dMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZRQXF5WXlHTFd4eFJi
SDVLY3BoejUxNzlkd2NCcThoWU5jMVFzaWFrTUwyLzAvNzRFM0IwRDJDM0YwQTVF
NkJBNzdBODcxMEVFOUI5QkNCRDU2OUU5RC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC83NEUzQjBEMkMzRjBBNUU2QkE3N0E4NzEwRUU5QjlCQ0JENTY5
RTlELmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GUUFxeVl5R0xXeHhSYkg1S2Nw
aHo1MTc5ZHdjQnE4aFlOYzFRc2lha01MMi8wLzMxMzczOTJlMzEzNTMyMmUzMDJl
MzAyZjMxMzMyZDMyMzQyMDNkM2UyMDMyMzgzNTM3MzMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwOzmDAN
BgkqhkiG9w0BAQsFAAOCAQEAnegGwYl5+BJ2i2QnTqCkIxuFCXDTEpHF3GfY7fEe
+qxAydBzp6T80hBQtPwhBUfZyZMR4x8nSDLFPqGHCokGU1fKENtJaBf77mcMedSF
XPXFFt7XYhUBftOr7h2ypkwxxoMZfbFDQh8bSYZbvbSDAqXqbqJqEMp5NlgicHdm
PiIpAyOErSlsyMkYC3tZJw0duPeaXetT3kXRijAM5PyuId3w3kCBCVc5qMA1TPd3
hDTzNez7eulObciMcRi8teGUf1eBQsu8qpszFAsmL255qJ88bHaa7yXH6rBMrGug
aKd4kVZswDBPPlfELn3K2Uls1b72q926fENBrVVLljAAbg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:04 2024 by rpki-client on console-ams.rpki-client.org