Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3138392e31342e3132382e302f31382d3234203d3e203238353733.roa
File:                     3138392e31342e3132382e302f31382d3234203d3e203238353733.roa (raw, json)
Hash identifier:          ivZTyYNrQsDl9IdCQgJM5DJs5k/2oyBCgBSKyVNePHw=
Subject key identifier:   D6:6C:A8:45:A3:DC:BB:AB:04:0A:65:52:33:59:1D:1F:04:72:2B:C0
Certificate issuer:       /CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
Certificate serial:       664FE3131B25E3A5681E4BB7B270FC7211D97762
Authority key identifier: 74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3138392e31342e3132382e302f31382d3234203d3e203238353733.roa
Signing time:             Fri 16 Feb 2024 19:00:00 +0000
ROA not before:           Fri 16 Feb 2024 18:55:00 +0000
ROA not after:            Fri 14 Feb 2025 19:00:00 +0000
asID:                     28573
IP address blocks:        189.14.128.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:4f:e3:13:1b:25:e3:a5:68:1e:4b:b7:b2:70:fc:72:11:d9:77:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
        Validity
            Not Before: Feb 16 18:55:00 2024 GMT
            Not After : Feb 14 19:00:00 2025 GMT
        Subject: CN=3082010A0282010100CC0785159F255FFB531C96FDE1C45FA5E72154EFA3B049520AF46D03BA3145A3E34CDD8363C2146E019F00A9E0D9F6E74406A99EBF080F919C226D57F66E0DE8279A2582BB1F363BBD6439E679D7E1F4349EB889ABA07FCC8FF4E1D85B09661EB73BEC746E32F65F25623A6D05F49BFCDBAD507EFA84BA5567FFCE2EA6E56B587238874B5B6EE16E1DF5A73BA2B6978A8CDBC462BCD02FB19F8533C7F22E52FF8AF57F5BAFA397A12E6394200262E1D0E1B6047227EA42F92A90528A70DCA01074827FD30931B4368A6FB3328C347235C91E62BED0EC0238F7064FEE40A0FE8A2605E6B189D8343FE419437DAE3124FC229E99FD0248F23972CF102D872C691D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:07:85:15:9f:25:5f:fb:53:1c:96:fd:e1:c4:
                    5f:a5:e7:21:54:ef:a3:b0:49:52:0a:f4:6d:03:ba:
                    31:45:a3:e3:4c:dd:83:63:c2:14:6e:01:9f:00:a9:
                    e0:d9:f6:e7:44:06:a9:9e:bf:08:0f:91:9c:22:6d:
                    57:f6:6e:0d:e8:27:9a:25:82:bb:1f:36:3b:bd:64:
                    39:e6:79:d7:e1:f4:34:9e:b8:89:ab:a0:7f:cc:8f:
                    f4:e1:d8:5b:09:66:1e:b7:3b:ec:74:6e:32:f6:5f:
                    25:62:3a:6d:05:f4:9b:fc:db:ad:50:7e:fa:84:ba:
                    55:67:ff:ce:2e:a6:e5:6b:58:72:38:87:4b:5b:6e:
                    e1:6e:1d:f5:a7:3b:a2:b6:97:8a:8c:db:c4:62:bc:
                    d0:2f:b1:9f:85:33:c7:f2:2e:52:ff:8a:f5:7f:5b:
                    af:a3:97:a1:2e:63:94:20:02:62:e1:d0:e1:b6:04:
                    72:27:ea:42:f9:2a:90:52:8a:70:dc:a0:10:74:82:
                    7f:d3:09:31:b4:36:8a:6f:b3:32:8c:34:72:35:c9:
                    1e:62:be:d0:ec:02:38:f7:06:4f:ee:40:a0:fe:8a:
                    26:05:e6:b1:89:d8:34:3f:e4:19:43:7d:ae:31:24:
                    fc:22:9e:99:fd:02:48:f2:39:72:cf:10:2d:87:2c:
                    69:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:6C:A8:45:A3:DC:BB:AB:04:0A:65:52:33:59:1D:1F:04:72:2B:C0
            X509v3 Authority Key Identifier:
                keyid:74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3138392e31342e3132382e302f31382d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.14.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1a:36:87:21:e3:ad:58:b2:4e:57:a2:f1:6a:9f:ab:fb:64:86:
         42:9c:cc:90:1c:ce:98:6a:13:f8:37:ee:3b:e2:44:24:2e:0d:
         e6:4f:6a:7b:94:12:f3:56:9f:de:51:cc:a9:c3:78:7f:1e:65:
         db:de:be:c6:fd:ae:9d:09:c4:86:e3:76:5e:cf:ca:b1:4b:f7:
         96:31:f8:2f:88:d7:36:b1:7b:c7:75:f0:d6:78:7d:e1:c8:dc:
         c9:93:79:fb:3a:49:b3:e1:72:c0:07:f5:57:ac:e0:43:a9:b2:
         df:8e:72:95:69:28:23:68:fc:99:7c:45:1e:9f:36:4e:ee:8b:
         44:26:a0:1c:b3:43:02:48:6a:b1:4e:7f:75:88:14:96:fe:02:
         e3:42:f7:37:c5:a5:37:8f:d5:7e:f0:97:3d:23:a9:05:d9:0a:
         46:ab:81:25:94:01:be:9b:4e:98:ff:d7:e9:0a:ec:05:e7:b7:
         4b:7d:39:a7:ad:4f:ab:e2:9e:49:1e:21:cb:fe:3e:bf:ae:ca:
         a9:4b:1c:45:ea:60:9b:81:37:0f:4c:5d:4d:6a:c5:03:81:f1:
         c6:65:13:d1:04:68:a3:e4:7a:82:6f:c2:13:cd:b9:3f:56:00:
         36:2b:34:31:53:ea:89:7e:9f:ed:b5:4a:9b:ad:a7:57:eb:85:
         ac:76:12:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:04 2024 by rpki-client on console-ams.rpki-client.org