Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3138372e3235352e302e302f31362d3234203d3e203238353733.roa
File:                     3138372e3235352e302e302f31362d3234203d3e203238353733.roa (raw, json)
Hash identifier:          4LHRbsYbeNM1QLiTTrZ4CGqWY1znd0ifgPmnyA68ZDQ=
Subject key identifier:   5C:87:23:21:D9:EC:4E:EC:25:E8:9C:81:29:84:C5:56:08:84:DC:F7
Certificate issuer:       /CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
Certificate serial:       6D2CF99E817422331878353AE82931D1D3A41845
Authority key identifier: 74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3138372e3235352e302e302f31362d3234203d3e203238353733.roa
Signing time:             Fri 16 Feb 2024 19:00:02 +0000
ROA not before:           Fri 16 Feb 2024 18:55:02 +0000
ROA not after:            Fri 14 Feb 2025 19:00:02 +0000
asID:                     28573
IP address blocks:        187.255.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:2c:f9:9e:81:74:22:33:18:78:35:3a:e8:29:31:d1:d3:a4:18:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
        Validity
            Not Before: Feb 16 18:55:02 2024 GMT
            Not After : Feb 14 19:00:02 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:1c:27:2e:c9:eb:db:77:1e:c0:20:20:4b:77:
                    f4:cf:90:48:c7:bc:05:a3:27:b7:59:4d:08:91:b4:
                    43:1c:db:17:e6:ea:29:07:a0:71:fd:30:c5:92:eb:
                    58:81:cd:f3:68:2b:6a:0f:26:c7:3f:62:12:57:77:
                    14:77:bf:16:5e:80:d2:2f:0d:4a:95:f2:30:84:21:
                    b0:06:a3:68:db:1a:cf:41:91:10:12:b6:b2:d0:3f:
                    ee:d4:51:26:6d:60:33:5f:4c:ed:fc:85:bd:b2:9f:
                    e8:ec:b8:dd:57:ca:89:88:c4:1d:bf:e5:f6:47:0a:
                    c8:c7:78:e6:ad:e4:f7:72:9e:d2:68:2c:f1:07:93:
                    e6:f9:7e:6e:3a:68:2d:d5:1d:a5:c9:c1:85:a3:45:
                    4a:42:9a:4a:82:8c:f8:97:68:f4:69:45:3e:5c:14:
                    b0:92:c7:e2:aa:e9:70:72:35:b0:f9:d3:92:ef:c3:
                    02:d0:b4:d4:20:ad:74:2f:43:7d:3f:7b:14:5f:f4:
                    7a:92:d2:b0:db:08:2e:c1:24:2d:83:31:c7:f2:13:
                    af:d3:45:b7:fc:cc:4f:ca:e0:54:7f:4d:0f:ff:a8:
                    c2:d7:90:33:41:22:bd:40:5a:54:3d:98:14:bf:75:
                    aa:fd:5f:21:bb:4f:e4:77:a8:29:d4:ea:21:0d:9a:
                    e5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:87:23:21:D9:EC:4E:EC:25:E8:9C:81:29:84:C5:56:08:84:DC:F7
            X509v3 Authority Key Identifier:
                keyid:74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3138372e3235352e302e302f31362d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.255.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         66:ba:8d:42:df:a9:a7:f4:67:1a:b9:23:58:f2:af:5c:7c:c7:
         b3:a0:8b:55:a8:f4:9b:8a:74:45:44:d4:ce:2e:2a:1f:22:08:
         ed:f9:3f:e0:9b:9a:9c:d5:28:78:ce:1b:80:92:c6:4e:f2:3d:
         a2:ba:2f:80:14:11:fc:d4:57:af:c5:7f:82:1f:43:88:2e:2a:
         f3:65:06:90:ee:5c:d8:64:fe:bc:d4:70:0f:21:76:bc:21:87:
         89:cc:97:a9:9e:b4:aa:20:bd:36:1f:b2:e8:19:3a:6f:0f:95:
         32:e8:86:ad:f5:3e:28:70:f5:98:5b:7c:0a:fe:2c:3a:b9:0b:
         fa:57:b4:1a:6b:7e:af:b7:f7:f3:59:cb:b2:7c:6d:be:fd:cb:
         91:f7:30:c6:e3:83:97:8e:75:bb:17:20:32:3c:5d:0b:f1:97:
         e8:73:95:73:63:7e:ba:eb:9d:41:a6:20:9a:68:df:4c:14:46:
         5e:29:43:3f:18:36:08:ea:cf:ff:19:77:aa:1a:1b:fd:a2:30:
         81:e0:9f:63:ca:29:91:5c:d9:4d:4a:6e:ae:9d:eb:f3:bd:30:
         32:94:bb:c8:ae:94:e1:27:62:30:46:a9:03:df:93:ba:62:cd:
         24:03:0c:87:94:00:94:bd:bc:cc:b5:5e:14:45:c0:37:c3:cf:
         58:7b:6a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org