Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3138362e3232302e302e302f31342d3234203d3e203238353733.roa
File:                     3138362e3232302e302e302f31342d3234203d3e203238353733.roa (raw, json)
Hash identifier:          2BwzVcyyCZKLSvmULOnXjGt+/T67JPWJSBIZCG8YCo8=
Subject key identifier:   49:D3:2A:07:68:F1:C2:66:00:A4:4F:23:60:B3:B1:DA:67:48:9F:D3
Certificate issuer:       /CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
Certificate serial:       0C7AB0DCB8A9828DCDC434B9B931A90082D8D446
Authority key identifier: 74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3138362e3232302e302e302f31342d3234203d3e203238353733.roa
Signing time:             Fri 16 Feb 2024 19:00:02 +0000
ROA not before:           Fri 16 Feb 2024 18:55:02 +0000
ROA not after:            Fri 14 Feb 2025 19:00:02 +0000
asID:                     28573
IP address blocks:        186.220.0.0/14 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:7a:b0:dc:b8:a9:82:8d:cd:c4:34:b9:b9:31:a9:00:82:d8:d4:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
        Validity
            Not Before: Feb 16 18:55:02 2024 GMT
            Not After : Feb 14 19:00:02 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:e1:78:9c:34:17:2c:d2:d3:3b:df:f8:69:5a:
                    1a:12:65:f3:c7:9b:45:1c:82:6a:7b:e1:ed:99:07:
                    d6:2a:32:d5:42:1a:f1:9b:a3:b1:f8:e8:4d:ab:e4:
                    09:ce:de:f6:2d:53:9a:91:17:dd:d3:18:90:ac:f4:
                    6b:bf:e9:15:fc:08:08:4a:ce:80:db:bc:9e:91:c8:
                    85:55:8e:15:09:45:6a:1d:0f:ba:ba:05:f6:6c:6e:
                    3c:5c:ea:a7:b4:6e:b6:1a:22:9e:97:ef:d1:b9:54:
                    ec:3e:7c:fe:14:f9:13:f3:01:be:9b:c9:8d:d6:e1:
                    7d:9b:dd:d6:a5:23:7c:97:31:9c:51:e5:f8:de:19:
                    c1:46:4a:c9:09:e2:15:3a:27:c1:8d:d7:22:ec:7f:
                    cb:68:21:26:87:ac:ce:71:0e:a4:90:c4:19:af:01:
                    97:3e:db:ba:eb:17:1e:91:f6:80:19:c5:ae:ca:32:
                    9d:d2:0c:87:79:07:86:b8:22:01:59:1e:4e:5a:3a:
                    04:47:f8:f2:35:3c:b9:e9:a7:44:0c:d3:1d:11:ed:
                    ad:ff:7a:40:01:97:6a:06:9a:e2:65:67:af:9e:93:
                    6d:10:c6:91:13:31:64:66:60:de:2a:77:12:1c:34:
                    07:32:54:5c:b9:35:c1:f8:05:e1:80:95:83:b9:68:
                    7b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:D3:2A:07:68:F1:C2:66:00:A4:4F:23:60:B3:B1:DA:67:48:9F:D3
            X509v3 Authority Key Identifier:
                keyid:74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3138362e3232302e302e302f31342d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.220.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         3e:b5:67:3f:9c:69:0e:3b:f3:c6:28:d5:0e:e6:2d:80:b8:59:
         91:90:62:39:ea:47:e3:fa:48:4a:cd:9e:87:44:e9:db:db:89:
         85:bc:da:55:00:22:bd:fa:ee:e3:27:ab:47:b4:a7:cf:72:2d:
         35:ec:b3:50:63:06:d4:72:bb:14:d8:b9:ac:8f:b9:e2:26:38:
         84:b2:74:49:dc:02:b0:32:42:fa:02:c6:4c:15:57:69:c8:ee:
         87:6e:70:f4:f3:f5:65:ae:41:08:6b:ad:f4:b5:f1:81:c4:86:
         a4:7d:d8:49:6a:06:68:62:06:73:ce:4b:60:58:16:a2:12:fb:
         68:7f:ea:ae:3d:95:cb:d7:ca:9b:ed:86:13:7a:e0:ab:5e:6c:
         c7:6d:32:ce:04:1d:77:fa:9a:bc:7b:46:94:e9:c5:04:ef:7c:
         47:86:8e:df:ca:18:90:ca:b4:47:bd:dc:45:f0:05:46:e7:cd:
         11:10:b4:f3:d8:04:4f:50:00:f5:18:dc:dc:9a:71:b9:e0:01:
         d2:7a:6d:e8:0e:9d:0c:be:d7:c7:81:b4:49:ef:40:0e:c3:91:
         c5:ae:ee:fa:ea:e8:b3:20:ce:eb:e2:1d:5b:11:ad:28:6d:11:
         c4:34:b4:06:95:47:7b:34:b3:f3:77:2f:29:02:80:7a:93:6f:
         2d:56:73:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:04 2024 by rpki-client on console-ams.rpki-client.org