Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3138372e36342e302e302f31342d3234203d3e203238353733.roa
File:                     3138372e36342e302e302f31342d3234203d3e203238353733.roa (raw, json)
Hash identifier:          Q5dadI4Nq56qL/yB5SWryTw7WdVZz5+bW/Bl3nMLUh0=
Subject key identifier:   7E:DE:D4:DD:C6:CA:F6:24:9B:12:00:DE:94:77:75:4E:A3:DA:64:82
Certificate issuer:       /CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
Certificate serial:       735D6CFC6E239E3E1E256F09C9433344D7C6C1C3
Authority key identifier: 74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3138372e36342e302e302f31342d3234203d3e203238353733.roa
Signing time:             Fri 16 Feb 2024 19:00:04 +0000
ROA not before:           Fri 16 Feb 2024 18:55:04 +0000
ROA not after:            Fri 14 Feb 2025 19:00:04 +0000
asID:                     28573
IP address blocks:        187.64.0.0/14 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:5d:6c:fc:6e:23:9e:3e:1e:25:6f:09:c9:43:33:44:d7:c6:c1:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
        Validity
            Not Before: Feb 16 18:55:04 2024 GMT
            Not After : Feb 14 19:00:04 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c8:d7:31:b6:5f:a3:da:27:cc:db:e0:2d:fa:
                    1d:6e:52:bf:94:65:d8:2b:a1:28:1c:f2:07:19:6e:
                    60:a1:fc:89:03:1a:34:0c:90:2d:78:38:95:76:da:
                    9d:1d:11:60:db:1e:cc:d3:35:ef:40:11:11:17:30:
                    06:21:d9:cc:93:be:2d:b0:d0:7b:81:bc:f8:11:65:
                    e1:da:90:6d:2e:40:25:7b:7d:eb:a0:a3:88:f0:a6:
                    87:15:7b:d3:ee:2f:98:6a:e7:73:5c:67:3e:a3:20:
                    ee:bc:f0:cd:9a:23:0a:f3:f6:a4:fc:68:2c:c2:16:
                    a2:03:b7:3d:19:5e:2e:9e:9b:18:69:d1:49:c9:e5:
                    a8:b3:8d:16:28:63:40:93:06:f1:23:85:04:eb:d3:
                    69:ae:7c:23:36:14:39:7d:fd:81:f3:af:a2:2b:d6:
                    dc:cf:57:48:34:35:13:2d:ff:a8:fa:71:53:5f:2a:
                    57:4a:6b:69:52:c1:a4:dc:63:11:07:f2:5e:b6:de:
                    46:37:f7:61:e0:7e:1a:6b:fd:0c:5f:ea:5d:52:70:
                    ae:fc:29:e9:4b:55:bd:75:90:46:34:45:d9:a1:9e:
                    a0:70:74:1d:12:a3:29:c6:12:8b:3f:03:db:34:49:
                    34:0e:6e:65:5d:8d:9f:b8:08:8f:3c:d7:e0:a1:fc:
                    64:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:DE:D4:DD:C6:CA:F6:24:9B:12:00:DE:94:77:75:4E:A3:DA:64:82
            X509v3 Authority Key Identifier:
                keyid:74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3138372e36342e302e302f31342d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.64.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         06:3e:8c:e4:c8:d4:51:fd:0a:48:03:44:e8:5e:e3:b0:7b:63:
         6f:be:4e:2c:be:9e:81:44:da:42:41:04:63:81:df:b3:f8:29:
         6c:54:4e:2d:b7:37:98:1a:1e:14:3d:23:16:ad:a2:e5:e6:7c:
         f1:4f:e2:5b:0e:62:49:51:f5:4e:db:a4:b5:ca:21:58:32:45:
         ac:d9:51:06:0d:fe:56:d7:c1:4c:64:ea:44:67:72:48:eb:e5:
         79:d6:e6:67:9b:ea:db:61:b4:3b:46:97:c4:b5:dd:09:ab:70:
         e7:c3:1b:54:8e:80:be:58:42:92:48:fa:c2:3e:b8:34:94:47:
         97:36:4f:14:b6:11:ed:51:12:14:d5:47:8e:d6:f7:5a:1e:1b:
         75:f7:84:d7:aa:c6:79:ca:5f:86:bb:b8:24:7c:d7:a4:70:5b:
         be:92:96:ae:a7:5f:ed:97:1d:b4:55:19:73:97:eb:db:0d:f2:
         94:fb:f2:10:e7:82:94:e7:d4:92:15:0c:b7:db:35:48:0c:a8:
         0c:df:6b:f4:d7:64:70:49:24:5e:5e:9d:5b:b1:f0:4d:ed:9a:
         25:fa:97:f6:91:04:de:c3:47:42:2d:20:90:2c:2e:6f:08:7e:
         5e:fb:9b:36:d0:aa:3d:73:eb:d2:8d:54:f1:c6:e0:e3:60:74:
         ad:8e:be:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org