Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3138372e3138302e302e302f31342d3234203d3e203238353733.roa
File:                     3138372e3138302e302e302f31342d3234203d3e203238353733.roa (raw, json)
Hash identifier:          ac5j4zMHehv5RpRWG1oxjBudEdISOV/kJIZPnDawBCg=
Subject key identifier:   F3:90:EE:EF:2F:D0:14:3E:F7:5D:20:12:57:04:D1:BC:9B:B7:0D:56
Certificate issuer:       /CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
Certificate serial:       0F35E63D4BFE8086F97F85A0BCC7A68670BA52D9
Authority key identifier: 74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3138372e3138302e302e302f31342d3234203d3e203238353733.roa
Signing time:             Fri 16 Feb 2024 19:00:05 +0000
ROA not before:           Fri 16 Feb 2024 18:55:05 +0000
ROA not after:            Fri 14 Feb 2025 19:00:05 +0000
asID:                     28573
IP address blocks:        187.180.0.0/14 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:35:e6:3d:4b:fe:80:86:f9:7f:85:a0:bc:c7:a6:86:70:ba:52:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
        Validity
            Not Before: Feb 16 18:55:05 2024 GMT
            Not After : Feb 14 19:00:05 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:a2:98:cf:e9:f9:e4:f8:f4:a6:7d:f1:a8:65:
                    20:09:d6:5c:aa:99:51:53:16:0a:22:a5:07:64:0d:
                    9a:84:b7:47:6a:a7:10:77:d4:71:78:3e:0e:9c:e2:
                    d0:a8:6e:69:54:c2:25:38:1c:a5:32:3b:02:aa:7a:
                    33:9f:c3:63:ad:8b:eb:21:f9:57:cb:75:f9:7e:1b:
                    6f:79:28:29:7c:27:74:0c:92:56:62:82:90:7c:16:
                    7a:15:04:9d:a4:45:24:9c:bf:20:0b:2d:ee:bf:16:
                    de:f6:16:5e:20:55:6d:c7:cf:a0:3d:f8:c5:60:4f:
                    80:68:ea:bf:27:12:fd:75:e5:8b:71:a6:93:b6:7e:
                    49:0c:ff:70:d4:86:02:c2:ad:01:ed:f2:2d:27:8f:
                    d7:55:4d:10:37:c7:06:0e:2d:e6:70:4d:f9:69:21:
                    03:08:d0:89:bb:09:6d:6c:56:62:f0:9b:84:2a:64:
                    32:47:1b:a3:11:23:f2:39:29:5b:06:5f:2c:0f:0a:
                    c5:08:da:45:12:45:22:ca:fe:f0:1e:2d:28:4a:ca:
                    3e:27:12:a1:41:27:91:e0:72:a6:3f:09:fe:aa:a9:
                    7d:09:9e:6d:17:b8:42:9c:61:56:ec:64:5d:ac:70:
                    11:36:83:b7:76:04:48:5c:2a:d2:92:6b:a4:44:e4:
                    3e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:90:EE:EF:2F:D0:14:3E:F7:5D:20:12:57:04:D1:BC:9B:B7:0D:56
            X509v3 Authority Key Identifier:
                keyid:74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3138372e3138302e302e302f31342d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.180.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         58:6c:e1:75:68:3f:27:54:ba:f0:63:e9:1b:37:5e:a0:e3:e1:
         64:b3:4d:59:f8:9e:bf:5d:d7:1b:36:44:1c:c5:28:ea:04:1c:
         e4:3c:2c:89:83:1b:98:14:2c:f4:d7:1c:6c:3f:61:06:91:21:
         70:62:7f:8c:ef:bf:f3:b7:93:14:c8:f9:2b:12:f4:20:37:9a:
         2a:9d:35:0e:2f:76:95:4a:62:bf:8a:1f:42:e2:9a:e3:c6:d6:
         02:03:01:fc:58:d6:5d:30:1a:98:f9:93:2b:5c:26:c9:16:7f:
         de:4a:e7:16:95:94:98:86:02:61:4b:5e:87:1b:dd:68:41:f2:
         6d:09:47:ef:1b:46:0a:34:20:f2:d1:d2:d2:94:1f:e7:cf:30:
         46:c6:6e:2f:e5:84:5c:48:89:1e:f2:94:15:09:fa:ea:bd:b8:
         38:f7:91:13:91:df:5c:a9:07:9c:2e:1f:37:eb:5c:b7:43:db:
         fc:84:5f:cb:20:f7:93:56:de:c9:4a:3c:56:3e:56:60:3e:07:
         d7:8b:33:a1:d3:f2:47:60:12:f4:fc:16:1f:a1:d3:14:c3:f1:
         3f:44:06:04:31:44:ab:d4:c0:71:53:69:23:f9:45:e9:d7:ee:
         74:46:59:a3:d4:8b:10:c4:f7:c8:04:33:8d:42:2a:7f:f6:96:
         54:26:bb:45
-----BEGIN CERTIFICATE-----
MIIHPjCCBiagAwIBAgIUDzXmPUv+gIb5f4WgvMemhnC6UtkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzRFM0IwRDJDM0YwQTVFNkJBNzdBODcxMEVFOUI5QkNC
RDU2OUU5RDAeFw0yNDAyMTYxODU1MDVaFw0yNTAyMTQxOTAwMDVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkJBMjk4Q0ZFOUY5RTRGOEY0
QTY3REYxQTg2NTIwMDlENjVDQUE5OTUxNTMxNjBBMjJBNTA3NjQwRDlBODRCNzQ3
NkFBNzEwNzdENDcxNzgzRTBFOUNFMkQwQTg2RTY5NTRDMjI1MzgxQ0E1MzIzQjAy
QUE3QTMzOUZDMzYzQUQ4QkVCMjFGOTU3Q0I3NUY5N0UxQjZGNzkyODI5N0MyNzc0
MEM5MjU2NjI4MjkwN0MxNjdBMTUwNDlEQTQ0NTI0OUNCRjIwMEIyREVFQkYxNkRF
RjYxNjVFMjA1NTZEQzdDRkEwM0RGOEM1NjA0RjgwNjhFQUJGMjcxMkZENzVFNThC
NzFBNjkzQjY3RTQ5MENGRjcwRDQ4NjAyQzJBRDAxRURGMjJEMjc4RkQ3NTU0RDEw
MzdDNzA2MEUyREU2NzA0REY5NjkyMTAzMDhEMDg5QkIwOTZENkM1NjYyRjA5Qjg0
MkE2NDMyNDcxQkEzMTEyM0YyMzkyOTVCMDY1RjJDMEYwQUM1MDhEQTQ1MTI0NTIy
Q0FGRUYwMUUyRDI4NEFDQTNFMjcxMkExNDEyNzkxRTA3MkE2M0YwOUZFQUFBOTdE
MDk5RTZEMTdCODQyOUM2MTU2RUM2NDVEQUM3MDExMzY4M0I3NzYwNDQ4NUMyQUQy
OTI2QkE0NDRFNDNFMjkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAu6KYz+n55Pj0pn3xqGUgCdZcqplRUxYKIqUHZA2ahLdHaqcQd9Rx
eD4OnOLQqG5pVMIlOBylMjsCqnozn8NjrYvrIflXy3X5fhtveSgpfCd0DJJWYoKQ
fBZ6FQSdpEUknL8gCy3uvxbe9hZeIFVtx8+gPfjFYE+AaOq/JxL9deWLcaaTtn5J
DP9w1IYCwq0B7fItJ4/XVU0QN8cGDi3mcE35aSEDCNCJuwltbFZi8JuEKmQyRxuj
ESPyOSlbBl8sDwrFCNpFEkUiyv7wHi0oSso+JxKhQSeR4HKmPwn+qql9CZ5tF7hC
nGFW7GRdrHARNoO3dgRIXCrSkmukROQ+KQIDAQABo4ICTDCCAkgwHQYDVR0OBBYE
FPOQ7u8v0BQ+910gElcE0bybtw1WMB8GA1UdIwQYMBaAFHTjsNLD8KXmuneocQ7p
uby9Vp6dMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZRQXF5WXlHTFd4eFJi
SDVLY3BoejUxNzlkd2NCcThoWU5jMVFzaWFrTUwyLzAvNzRFM0IwRDJDM0YwQTVF
NkJBNzdBODcxMEVFOUI5QkNCRDU2OUU5RC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC83NEUzQjBEMkMzRjBBNUU2QkE3N0E4NzEwRUU5QjlCQ0JENTY5
RTlELmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GUUFxeVl5R0xXeHhSYkg1S2Nw
aHo1MTc5ZHdjQnE4aFlOYzFRc2lha01MMi8wLzMxMzgzNzJlMzEzODMwMmUzMDJl
MzAyZjMxMzQyZDMyMzQyMDNkM2UyMDMyMzgzNTM3MzMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwK7tDAN
BgkqhkiG9w0BAQsFAAOCAQEAWGzhdWg/J1S68GPpGzdeoOPhZLNNWfiev13XGzZE
HMUo6gQc5DwsiYMbmBQs9NccbD9hBpEhcGJ/jO+/87eTFMj5KxL0IDeaKp01Di92
lUpiv4ofQuKa48bWAgMB/FjWXTAamPmTK1wmyRZ/3krnFpWUmIYCYUtehxvdaEHy
bQlH7xtGCjQg8tHS0pQf588wRsZuL+WEXEiJHvKUFQn66r24OPeRE5HfXKkHnC4f
N+tct0Pb/IRfyyD3k1beyUo8Vj5WYD4H14szodPyR2AS9PwWH6HTFMPxP0QGBDFE
q9TAcVNpI/lF6dfudEZZo9SLEMT3yAQzjUIqf/aWVCa7RQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org