Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3138312e3231362e302e302f31332d3234203d3e203238353733.roa
File:                     3138312e3231362e302e302f31332d3234203d3e203238353733.roa (raw, json)
Hash identifier:          Usryhkc/vUj5Yd3THZIAzeUMDZ9GwewZzEmbCdSXYys=
Subject key identifier:   FB:D9:1F:75:CF:F1:95:0B:97:9A:10:32:6E:F5:D0:62:96:A0:AF:6C
Certificate issuer:       /CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
Certificate serial:       62BFAD72798F00A74C6CE5EE9FF01CF646AB5F17
Authority key identifier: 74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3138312e3231362e302e302f31332d3234203d3e203238353733.roa
Signing time:             Fri 16 Feb 2024 19:00:02 +0000
ROA not before:           Fri 16 Feb 2024 18:55:02 +0000
ROA not after:            Fri 14 Feb 2025 19:00:02 +0000
asID:                     28573
IP address blocks:        181.216.0.0/13 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:bf:ad:72:79:8f:00:a7:4c:6c:e5:ee:9f:f0:1c:f6:46:ab:5f:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
        Validity
            Not Before: Feb 16 18:55:02 2024 GMT
            Not After : Feb 14 19:00:02 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d3:f1:ed:74:06:7e:ce:f3:a3:34:be:81:a4:
                    8c:71:00:f3:f1:14:3e:53:f4:e9:99:fe:a6:9d:9b:
                    f1:d4:ea:ee:83:9b:b6:e1:5e:f2:03:19:14:05:c9:
                    31:61:f9:6f:23:48:43:41:ed:9e:a6:d9:9d:1c:17:
                    31:44:44:d2:db:aa:4c:f9:96:da:d2:7b:7c:5c:77:
                    0c:98:f8:3c:b4:ff:8e:07:cb:9d:64:22:cd:1a:65:
                    b0:c4:85:f9:29:51:42:3a:ae:5d:74:74:d3:17:a0:
                    af:aa:ec:23:28:7f:b8:81:ae:34:d5:d8:13:70:ed:
                    a1:1c:19:07:9b:21:98:98:60:ce:03:3d:4f:73:62:
                    f5:06:59:53:81:1c:d7:ac:76:57:61:2d:bf:44:b0:
                    a5:31:5c:96:51:ae:bb:7b:a2:ad:5f:f8:5e:b3:74:
                    41:c8:fd:0e:d9:23:f1:4e:e0:ad:f5:55:a4:38:5d:
                    83:6b:cb:08:23:8a:67:93:13:c1:f1:bd:cb:a9:c6:
                    fe:91:38:25:8a:da:c1:49:eb:5c:91:13:58:4c:92:
                    18:ac:28:8e:9d:bd:b8:fc:5b:43:18:29:89:d1:07:
                    f5:79:08:3f:e8:ae:95:34:b4:c6:7a:b1:b1:43:3d:
                    94:4c:a0:96:91:c5:41:82:33:97:5a:77:54:d9:1c:
                    2c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:D9:1F:75:CF:F1:95:0B:97:9A:10:32:6E:F5:D0:62:96:A0:AF:6C
            X509v3 Authority Key Identifier:
                keyid:74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3138312e3231362e302e302f31332d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.216.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         8b:f3:14:00:5f:9c:dc:61:f2:f3:ce:7e:bf:fc:76:54:cf:d3:
         1b:a4:d9:c0:e9:f5:a4:45:b0:bd:da:4a:01:78:43:f0:51:da:
         5c:07:35:fa:51:24:d9:43:98:ab:e7:3d:b7:2b:87:f5:c4:b3:
         64:fd:ba:c6:54:7f:2f:78:27:75:fa:87:32:ab:7a:d6:94:70:
         4c:ca:99:d9:31:37:c4:92:3a:e6:01:4f:32:ee:2a:07:46:b8:
         34:79:e2:65:b8:6b:4a:49:ee:d8:93:fb:6b:ee:9d:1b:ab:0e:
         f6:44:7d:59:1d:20:d5:a4:81:a1:78:32:80:76:17:45:24:ca:
         8e:c8:a4:d9:1e:47:d4:3d:5a:17:8c:63:3e:cc:a5:8d:8e:dc:
         2c:2f:9b:95:8d:6a:ca:80:2c:66:0f:a6:73:fa:fd:3c:1a:be:
         89:f0:b7:4c:c4:38:48:23:4c:f4:b6:68:56:b6:28:aa:76:46:
         da:6d:bd:0b:97:6a:b9:75:7a:72:cf:5e:20:c6:24:88:b4:a7:
         89:12:b8:cb:4c:fb:88:ca:ea:a5:24:46:48:6c:9b:1c:9e:5d:
         6d:5b:4d:53:1f:6d:bf:7f:ef:a8:d4:fd:bc:8d:59:a9:05:46:
         a0:b0:40:42:97:a7:f4:ff:a8:dc:01:99:f1:4a:c4:0e:a7:5b:
         df:63:d8:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org