Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3138392e33392e3134342e302f32302d3234203d3e203238353733.roa
File:                     3138392e33392e3134342e302f32302d3234203d3e203238353733.roa (raw, json)
Hash identifier:          YfR0qtacfGQZyfD47wThcaJ4LV1BwYghDXKYGoD3DA8=
Subject key identifier:   11:BC:B5:B0:CE:C9:DF:7E:EF:15:F7:98:47:A1:4D:55:CD:0B:EF:6B
Certificate issuer:       /CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
Certificate serial:       40DF3D3A5ABCA7639013FB1E9C42EABF5DBCB02B
Authority key identifier: 74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3138392e33392e3134342e302f32302d3234203d3e203238353733.roa
Signing time:             Fri 16 Feb 2024 19:00:04 +0000
ROA not before:           Fri 16 Feb 2024 18:55:04 +0000
ROA not after:            Fri 14 Feb 2025 19:00:04 +0000
asID:                     28573
IP address blocks:        189.39.144.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:df:3d:3a:5a:bc:a7:63:90:13:fb:1e:9c:42:ea:bf:5d:bc:b0:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
        Validity
            Not Before: Feb 16 18:55:04 2024 GMT
            Not After : Feb 14 19:00:04 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e8:6a:5f:54:34:a9:da:d9:43:b7:f8:77:05:
                    9f:05:4b:07:04:75:e2:f0:06:19:2a:00:e0:00:f1:
                    0c:7f:e1:75:95:04:26:1b:40:e9:c5:d1:02:4a:3d:
                    76:b6:db:8a:31:d6:da:b9:ab:92:d8:c0:9d:ef:18:
                    39:54:13:83:54:bd:fe:7b:ac:dc:74:a3:61:37:33:
                    77:e9:59:ce:c0:57:ef:1e:f0:1b:30:5a:44:26:f4:
                    26:ec:c1:eb:3f:de:c9:4d:85:d1:78:75:f1:ec:4e:
                    42:26:1a:36:ce:f2:65:cb:56:e3:57:c6:0c:3c:47:
                    ae:06:9b:05:79:0d:35:56:96:84:bd:59:38:9d:a9:
                    dc:37:af:41:10:60:34:e1:39:65:7a:20:b0:b4:45:
                    bc:22:a3:fa:1f:50:ac:9f:29:2f:5d:65:1c:70:44:
                    06:bf:a2:bf:0d:35:f0:fd:28:27:73:27:60:9d:7a:
                    20:eb:20:6b:7a:53:bc:30:d1:b7:03:4d:89:a3:27:
                    50:4e:56:5c:14:7e:49:e0:5c:87:2b:d7:f7:33:40:
                    00:68:fb:cd:f4:c8:bc:4d:d3:81:8e:ea:9d:a0:4b:
                    71:8f:fe:75:14:df:93:30:f1:fd:45:b5:d5:fc:e0:
                    ee:f9:f5:32:15:33:15:cd:f8:a6:c9:45:f6:a4:5e:
                    0b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:BC:B5:B0:CE:C9:DF:7E:EF:15:F7:98:47:A1:4D:55:CD:0B:EF:6B
            X509v3 Authority Key Identifier:
                keyid:74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3138392e33392e3134342e302f32302d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.39.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5a:6e:19:24:b6:5e:74:28:ab:8f:43:ea:64:7a:f7:36:1a:83:
         ba:31:c4:f7:ca:9c:ef:2e:27:48:40:c9:87:2e:c1:5c:4b:0c:
         cf:38:b2:a6:9c:31:11:e4:c8:0e:9a:32:e6:1f:0c:69:e0:e6:
         4e:35:76:7e:27:03:34:2f:fd:a5:5c:32:59:5e:8c:56:fd:5d:
         13:27:fe:ed:b6:a0:7d:40:a8:62:07:f6:de:33:a1:7c:d4:37:
         8b:83:a6:53:b9:08:fe:12:36:76:ec:95:c2:97:63:3e:ad:8d:
         02:1d:41:30:49:3a:b1:f7:89:8c:d6:fc:d4:27:d8:0b:73:d3:
         df:07:64:03:08:2d:79:4e:be:57:0f:88:da:b0:84:0c:11:54:
         81:6c:68:a4:70:37:4c:30:a4:44:2a:2f:b6:43:ec:0c:55:0d:
         bf:39:c0:f7:90:f3:d8:ed:43:90:20:34:f1:46:4d:8f:24:11:
         7b:85:bf:45:24:86:59:db:4c:03:50:8b:a3:31:22:55:bb:1a:
         79:0a:65:9f:f1:25:bd:0d:fe:22:92:a7:39:bd:eb:c2:5a:6b:
         d9:ac:c9:3a:08:1c:c4:cb:f2:27:40:87:59:6e:18:e2:f1:bf:
         70:95:12:81:9d:e3:a4:9d:de:88:6c:ab:de:97:8c:0b:07:b3:
         f6:7c:2f:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org