Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3138392e33322e302e302f31342d3234203d3e203238353733.roa
File:                     3138392e33322e302e302f31342d3234203d3e203238353733.roa (raw, json)
Hash identifier:          c6uyctfd6500LhcXFFQEd3YwHKhIcTQN35Brt4VFFBI=
Subject key identifier:   80:90:F9:5C:F3:55:8A:FA:9B:8F:15:A8:6A:DF:EF:79:D9:3D:14:8A
Certificate issuer:       /CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
Certificate serial:       6256C0C3C5319188050B400128FA5FA7AE28DD27
Authority key identifier: 74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3138392e33322e302e302f31342d3234203d3e203238353733.roa
Signing time:             Fri 16 Feb 2024 19:00:05 +0000
ROA not before:           Fri 16 Feb 2024 18:55:05 +0000
ROA not after:            Fri 14 Feb 2025 19:00:05 +0000
asID:                     28573
IP address blocks:        189.32.0.0/14 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:56:c0:c3:c5:31:91:88:05:0b:40:01:28:fa:5f:a7:ae:28:dd:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
        Validity
            Not Before: Feb 16 18:55:05 2024 GMT
            Not After : Feb 14 19:00:05 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c9:b9:8e:1e:3e:8c:fe:aa:e1:84:ad:88:dd:
                    d1:84:16:36:87:ac:e6:36:13:b9:15:90:19:42:38:
                    be:3c:fd:3f:7c:97:d3:6e:8f:f5:b8:7c:d0:57:11:
                    53:72:40:c7:47:52:97:c7:38:ab:28:df:f6:27:81:
                    f0:08:eb:98:00:77:52:7c:f4:2c:b3:82:f2:c2:bb:
                    1b:ea:aa:ea:f9:a0:1c:d7:e5:af:1f:39:4d:68:bf:
                    18:5e:12:a6:29:3a:f6:aa:c0:d5:cb:0e:70:98:5c:
                    15:8c:06:94:2b:dd:28:0c:6f:15:c6:6e:7d:53:37:
                    98:01:40:35:61:1d:c1:01:a3:e2:05:aa:b2:8e:b6:
                    4d:55:1e:65:de:72:ce:06:ee:fb:03:bb:fd:3c:80:
                    a9:74:52:5a:2d:c8:3c:a3:f6:78:d4:ce:8b:eb:20:
                    28:d3:37:1a:ea:81:ca:39:f4:d5:b9:ea:e1:de:ad:
                    ad:52:81:3e:12:b8:78:e0:c6:33:88:42:fd:9f:27:
                    88:a7:9c:4e:2e:55:52:b3:0e:0c:50:b7:92:bb:42:
                    eb:6c:4b:8b:a8:ea:ce:b9:c6:ab:e9:84:fd:4f:3e:
                    e9:a5:4d:8e:20:ac:d3:1a:bd:f6:87:87:07:d0:f4:
                    9f:85:9e:37:5d:86:71:41:f8:92:ac:a7:61:5c:95:
                    70:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:90:F9:5C:F3:55:8A:FA:9B:8F:15:A8:6A:DF:EF:79:D9:3D:14:8A
            X509v3 Authority Key Identifier:
                keyid:74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3138392e33322e302e302f31342d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.32.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         42:a6:71:b2:9c:07:84:2b:36:5a:63:ab:c8:5b:4f:cb:7d:5f:
         2f:99:c9:49:0c:7c:2a:08:b3:81:26:e8:bc:36:53:f8:c8:35:
         c8:1d:59:cf:c4:ed:0e:4d:d7:47:07:ce:38:02:1f:1b:65:56:
         82:33:0b:89:0f:b5:3e:28:0a:ee:52:b4:31:f3:1a:ee:9b:7b:
         c9:ae:67:c5:2a:db:57:83:aa:bc:66:74:2c:6f:3c:13:08:24:
         50:28:26:9f:a2:01:a2:01:8c:d6:60:59:fa:93:41:57:ba:96:
         3e:fe:af:91:cf:89:80:53:62:bc:e5:19:0d:2d:9f:4c:a5:b4:
         99:7c:cf:1a:71:5b:d9:6e:01:dc:55:d5:60:7b:c5:c0:d8:e6:
         77:64:da:70:16:a7:47:6d:f2:d8:39:c0:35:00:b3:e4:b0:1e:
         a5:8d:1f:1b:e2:c2:d1:7d:5b:dd:dd:41:e5:e5:84:5a:6d:08:
         40:d8:e2:01:31:28:37:90:11:94:7d:dd:4f:8f:56:13:60:77:
         c8:f4:c1:bb:67:0c:ea:c5:25:18:08:43:65:1f:6e:f2:61:63:
         7a:88:4b:21:da:7a:b2:50:7a:45:9d:7f:fc:0c:d3:ad:00:4b:
         c8:b2:e0:f1:17:d0:5c:3a:29:3d:0d:55:1d:cb:69:1c:aa:e1:
         08:bb:f6:d6
-----BEGIN CERTIFICATE-----
MIIHPDCCBiSgAwIBAgIUYlbAw8UxkYgFC0ABKPpfp64o3ScwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzRFM0IwRDJDM0YwQTVFNkJBNzdBODcxMEVFOUI5QkNC
RDU2OUU5RDAeFw0yNDAyMTYxODU1MDVaFw0yNTAyMTQxOTAwMDVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzdDOUI5OEUxRTNFOENGRUFB
RTE4NEFEODhEREQxODQxNjM2ODdBQ0U2MzYxM0I5MTU5MDE5NDIzOEJFM0NGRDNG
N0M5N0QzNkU4RkY1Qjg3Q0QwNTcxMTUzNzI0MEM3NDc1Mjk3QzczOEFCMjhERkY2
Mjc4MUYwMDhFQjk4MDA3NzUyN0NGNDJDQjM4MkYyQzJCQjFCRUFBQUVBRjlBMDFD
RDdFNUFGMUYzOTRENjhCRjE4NUUxMkE2MjkzQUY2QUFDMEQ1Q0IwRTcwOTg1QzE1
OEMwNjk0MkJERDI4MEM2RjE1QzY2RTdENTMzNzk4MDE0MDM1NjExREMxMDFBM0Uy
MDVBQUIyOEVCNjRENTUxRTY1REU3MkNFMDZFRUZCMDNCQkZEM0M4MEE5NzQ1MjVB
MkRDODNDQTNGNjc4RDRDRThCRUIyMDI4RDMzNzFBRUE4MUNBMzlGNEQ1QjlFQUUx
REVBREFENTI4MTNFMTJCODc4RTBDNjMzODg0MkZEOUYyNzg4QTc5QzRFMkU1NTUy
QjMwRTBDNTBCNzkyQkI0MkVCNkM0QjhCQThFQUNFQjlDNkFCRTk4NEZENEYzRUU5
QTU0RDhFMjBBQ0QzMUFCREY2ODc4NzA3RDBGNDlGODU5RTM3NUQ4NjcxNDFGODky
QUNBNzYxNUM5NTcwNEQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAx8m5jh4+jP6q4YStiN3RhBY2h6zmNhO5FZAZQji+PP0/fJfTbo/1
uHzQVxFTckDHR1KXxzirKN/2J4HwCOuYAHdSfPQss4Lywrsb6qrq+aAc1+WvHzlN
aL8YXhKmKTr2qsDVyw5wmFwVjAaUK90oDG8Vxm59UzeYAUA1YR3BAaPiBaqyjrZN
VR5l3nLOBu77A7v9PICpdFJaLcg8o/Z41M6L6yAo0zca6oHKOfTVuerh3q2tUoE+
Erh44MYziEL9nyeIp5xOLlVSsw4MULeSu0LrbEuLqOrOucar6YT9Tz7ppU2OIKzT
Gr32h4cH0PSfhZ43XYZxQfiSrKdhXJVwTQIDAQABo4ICSjCCAkYwHQYDVR0OBBYE
FICQ+VzzVYr6m48VqGrf73nZPRSKMB8GA1UdIwQYMBaAFHTjsNLD8KXmuneocQ7p
uby9Vp6dMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZRQXF5WXlHTFd4eFJi
SDVLY3BoejUxNzlkd2NCcThoWU5jMVFzaWFrTUwyLzAvNzRFM0IwRDJDM0YwQTVF
NkJBNzdBODcxMEVFOUI5QkNCRDU2OUU5RC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC83NEUzQjBEMkMzRjBBNUU2QkE3N0E4NzEwRUU5QjlCQ0JENTY5
RTlELmNlcjCBqAYIKwYBBQUHAQsEgZswgZgwgZUGCCsGAQUFBzALhoGIcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GUUFxeVl5R0xXeHhSYkg1S2Nw
aHo1MTc5ZHdjQnE4aFlOYzFRc2lha01MMi8wLzMxMzgzOTJlMzMzMjJlMzAyZTMw
MmYzMTM0MmQzMjM0MjAzZDNlMjAzMjM4MzUzNzMzLnJvYTAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMCvSAwDQYJ
KoZIhvcNAQELBQADggEBAEKmcbKcB4QrNlpjq8hbT8t9Xy+ZyUkMfCoIs4Em6Lw2
U/jINcgdWc/E7Q5N10cHzjgCHxtlVoIzC4kPtT4oCu5StDHzGu6be8muZ8Uq21eD
qrxmdCxvPBMIJFAoJp+iAaIBjNZgWfqTQVe6lj7+r5HPiYBTYrzlGQ0tn0yltJl8
zxpxW9luAdxV1WB7xcDY5ndk2nAWp0dt8tg5wDUAs+SwHqWNHxviwtF9W93dQeXl
hFptCEDY4gExKDeQEZR93U+PVhNgd8j0wbtnDOrFJRgIQ2UfbvJhY3qISyHaerJQ
ekWdf/wM060AS8iy4PEX0Fw6KT0NVR3LaRyq4Qi79tY=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:04 2024 by rpki-client on console-ams.rpki-client.org