Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3138312e3231332e302e302f31362d3234203d3e203238353733.roa
File:                     3138312e3231332e302e302f31362d3234203d3e203238353733.roa (raw, json)
Hash identifier:          dg/sEhS9K7CYn6Y8RAwtY5piVSZW1pRQ2R6OCeIvz+s=
Subject key identifier:   7E:E5:56:88:9B:31:5B:F8:F6:29:D6:5C:48:9C:B0:0D:F3:16:BA:7A
Certificate issuer:       /CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
Certificate serial:       05A3C0A8200C6148FDEAF0E117E54C9F9B698D40
Authority key identifier: 74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3138312e3231332e302e302f31362d3234203d3e203238353733.roa
Signing time:             Fri 16 Feb 2024 19:00:00 +0000
ROA not before:           Fri 16 Feb 2024 18:55:00 +0000
ROA not after:            Fri 14 Feb 2025 19:00:00 +0000
asID:                     28573
IP address blocks:        181.213.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:a3:c0:a8:20:0c:61:48:fd:ea:f0:e1:17:e5:4c:9f:9b:69:8d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
        Validity
            Not Before: Feb 16 18:55:00 2024 GMT
            Not After : Feb 14 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:5a:a9:21:aa:e3:80:d8:f1:66:4c:e4:f2:56:
                    52:64:39:a2:c8:09:1c:63:7f:e6:97:aa:81:26:55:
                    99:50:40:e0:c2:68:cb:90:31:90:22:5a:78:48:77:
                    42:1c:53:bc:bc:5c:88:ba:a8:f5:74:85:46:f7:10:
                    29:9a:8f:2d:67:5b:a8:d1:68:a1:4e:1a:50:bd:12:
                    be:15:29:c5:f3:b4:59:84:3c:a6:5f:ef:6f:cf:76:
                    cc:0c:fe:b8:41:04:bf:ec:bb:fe:50:9c:47:37:99:
                    15:19:a2:d6:29:a9:f6:d5:bc:3e:f4:aa:15:d7:3e:
                    22:1e:0f:bd:63:f6:95:15:ab:ad:cc:d0:00:88:a1:
                    37:19:6b:17:75:8d:78:e4:3f:00:e9:c2:8d:de:5a:
                    51:3a:30:8f:e3:af:71:d3:63:fd:eb:1b:ff:d2:a8:
                    49:e9:01:b4:05:14:46:9c:4e:28:c2:d0:63:f0:d1:
                    15:c2:6e:44:bd:a1:f8:5a:79:35:bf:20:67:d7:c2:
                    11:ed:ef:55:31:12:41:29:18:d1:bf:3f:50:fc:f6:
                    fe:e1:b4:c2:1b:51:dd:d6:56:12:16:8f:34:c9:0b:
                    21:25:29:b3:83:fe:f7:f4:4b:5a:01:43:f6:86:5f:
                    4e:08:e7:e3:57:9f:f2:16:44:5d:24:07:51:1a:24:
                    92:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:E5:56:88:9B:31:5B:F8:F6:29:D6:5C:48:9C:B0:0D:F3:16:BA:7A
            X509v3 Authority Key Identifier:
                keyid:74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3138312e3231332e302e302f31362d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.213.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         98:04:98:06:d0:25:15:14:c7:0d:fb:1f:3d:41:1b:ec:3d:c9:
         4a:57:00:2d:2b:ba:c5:de:72:1a:a6:00:0b:5e:11:40:48:19:
         ef:d8:b3:6b:40:79:11:c7:a2:a8:2a:d1:ea:7c:56:2b:89:5e:
         58:0d:a1:9a:76:d8:c2:4f:99:aa:66:18:35:0f:a2:e5:53:2b:
         01:c6:5a:54:ca:b8:37:08:98:46:4a:4d:cb:6a:db:00:a8:2a:
         0f:8a:c4:72:4a:92:12:18:5c:0e:2c:01:85:91:d9:2c:d3:d5:
         f0:e1:be:9c:1b:3f:88:66:61:f6:74:74:d8:5f:a0:a5:d9:91:
         62:1d:9b:c6:28:16:0c:f3:46:7f:c2:61:b8:44:cb:fb:19:a5:
         e2:d2:36:5a:25:d4:74:fa:c8:4b:4f:fb:97:01:df:7f:7c:90:
         4b:e6:96:4f:9b:23:4c:4c:1f:16:58:a9:7c:78:6f:20:8d:59:
         70:96:1c:e9:b9:bf:83:c7:07:cf:0a:7e:13:35:cc:72:9e:e7:
         f6:87:a9:f5:39:4e:46:88:66:b5:a3:11:d4:8f:0f:24:7f:62:
         6d:fe:35:3b:90:9e:9c:bd:45:b6:25:32:61:53:53:14:07:d1:
         cd:d7:e6:21:49:90:ad:90:df:d7:54:ff:a6:40:60:c9:3c:94:
         b3:48:76:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org