Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3138372e322e302e302f31352d3234203d3e203238353733.roa
File:                     3138372e322e302e302f31352d3234203d3e203238353733.roa (raw, json)
Hash identifier:          DImCgxO3zF276++uoWjwqpazpf2ZIdmff66qFAPEvns=
Subject key identifier:   B2:B0:E7:B5:86:A9:7D:E8:80:8D:E4:60:3C:A9:45:EE:6A:4F:6F:E4
Certificate issuer:       /CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
Certificate serial:       5F835DE48E4AEA3D6319CE040EF81976048C5737
Authority key identifier: 74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3138372e322e302e302f31352d3234203d3e203238353733.roa
Signing time:             Fri 16 Feb 2024 19:00:03 +0000
ROA not before:           Fri 16 Feb 2024 18:55:03 +0000
ROA not after:            Fri 14 Feb 2025 19:00:03 +0000
asID:                     28573
IP address blocks:        187.2.0.0/15 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:83:5d:e4:8e:4a:ea:3d:63:19:ce:04:0e:f8:19:76:04:8c:57:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
        Validity
            Not Before: Feb 16 18:55:03 2024 GMT
            Not After : Feb 14 19:00:03 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d4:f1:f2:0d:a3:7a:ac:7b:8f:d4:bc:55:b8:
                    97:34:e3:b5:f6:fa:09:ce:2f:1e:0f:17:ba:e9:7d:
                    bd:10:c6:80:f7:c1:3b:84:1e:0a:5d:ad:b0:cb:b4:
                    9b:78:ac:d3:41:03:cb:73:44:eb:b7:c7:04:f9:5c:
                    60:c9:03:e6:1b:a1:f5:54:b5:88:4a:99:71:00:e1:
                    0c:40:4d:a2:85:71:63:40:60:63:e4:70:d9:4d:e5:
                    a8:5f:67:3f:f9:94:78:7b:ba:b4:41:02:39:aa:cd:
                    f2:d6:0a:59:2f:8c:22:a8:0d:fd:7c:e0:5a:40:4a:
                    91:c6:ca:5a:30:18:93:30:bb:e7:16:58:7b:16:d4:
                    0c:0a:32:74:4b:ca:9b:1e:ae:07:6c:f8:3b:1f:9e:
                    d3:4e:23:97:ab:ef:f4:be:ab:05:c2:11:a4:21:be:
                    d4:e8:d9:71:22:75:d0:b4:e3:d4:b3:34:af:9f:e7:
                    fd:6f:da:d7:d2:08:c5:dd:61:16:61:38:94:73:e9:
                    35:9f:1a:e8:0b:14:a1:1b:90:0c:1e:3a:ce:51:b4:
                    0e:32:d7:49:85:f1:10:ac:be:00:31:24:04:b6:df:
                    21:00:e3:22:f8:f5:e0:07:4b:7e:dd:a8:f3:e9:5f:
                    9c:6f:da:68:54:82:8f:e7:22:38:cc:92:67:4a:0f:
                    03:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B0:E7:B5:86:A9:7D:E8:80:8D:E4:60:3C:A9:45:EE:6A:4F:6F:E4
            X509v3 Authority Key Identifier:
                keyid:74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3138372e322e302e302f31352d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.2.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         1d:51:95:12:a5:10:24:e5:a3:6f:f3:23:16:f0:f1:f0:91:b8:
         68:c8:cc:1b:58:23:89:29:c7:4f:01:13:3a:ac:27:97:8d:61:
         76:92:41:85:24:8c:4a:c2:de:44:6c:be:d4:3d:49:73:54:70:
         64:c8:f7:81:1e:10:e0:3e:06:88:db:cd:b8:a5:01:3d:8d:71:
         eb:d5:68:60:2b:a5:26:9d:23:e4:47:ad:e3:15:40:15:5b:7f:
         ce:c9:0a:be:1e:03:3e:68:c1:f0:fd:43:3c:9c:3d:4b:9e:7d:
         9c:98:7d:36:18:1a:83:7f:84:93:19:1a:02:29:25:4d:62:cf:
         14:19:b0:bb:99:4b:3b:ce:f5:00:93:64:fd:46:09:d4:40:68:
         ad:52:80:0e:f2:02:c3:57:41:58:33:bc:2c:ec:7d:87:42:f8:
         f2:40:f1:8b:4a:89:d2:26:0a:d5:90:7c:eb:c3:9f:15:a2:d5:
         e5:98:b0:34:f9:d8:50:74:99:2d:e0:22:aa:32:8a:43:c0:b3:
         69:66:cb:f8:5e:4b:3e:99:32:00:cd:d6:74:3e:15:e0:7d:95:
         75:d2:9a:0c:91:0f:2b:70:53:ac:68:6b:ca:10:3d:5e:0f:c5:
         a4:e8:35:a2:36:01:81:cf:83:5e:c4:2e:2c:8d:e2:d5:51:87:
         24:3d:f6:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:04 2024 by rpki-client on console-ams.rpki-client.org