Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3138392e342e302e302f31342d3234203d3e203238353733.roa
File:                     3138392e342e302e302f31342d3234203d3e203238353733.roa (raw, json)
Hash identifier:          VEEc2WyGSkf1DeN8oQ1bZIb0uJSHPBi/fSp9K1rRMVU=
Subject key identifier:   3A:8C:E3:D3:45:FD:31:36:1E:33:C2:BC:F1:84:4E:67:07:93:A7:60
Certificate issuer:       /CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
Certificate serial:       3B5CB924A28B26ED6563CE823C26AD82046D1478
Authority key identifier: 74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3138392e342e302e302f31342d3234203d3e203238353733.roa
Signing time:             Fri 16 Feb 2024 19:00:05 +0000
ROA not before:           Fri 16 Feb 2024 18:55:05 +0000
ROA not after:            Fri 14 Feb 2025 19:00:05 +0000
asID:                     28573
IP address blocks:        189.4.0.0/14 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:5c:b9:24:a2:8b:26:ed:65:63:ce:82:3c:26:ad:82:04:6d:14:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
        Validity
            Not Before: Feb 16 18:55:05 2024 GMT
            Not After : Feb 14 19:00:05 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:7d:12:30:7a:25:20:b5:50:8a:56:7d:40:32:
                    a4:58:82:b7:07:4e:05:5a:d1:0a:62:67:b0:1f:c0:
                    57:e7:bf:f2:a9:28:b4:71:11:0b:7d:e9:0f:45:58:
                    a4:70:d6:17:eb:4c:64:06:f6:66:fe:f7:e4:bf:48:
                    25:80:db:49:87:7d:a9:7f:7f:3e:90:88:58:ba:1a:
                    87:03:df:06:7c:16:86:67:26:9a:4d:9f:de:98:e6:
                    f1:f3:8b:5b:39:40:46:6f:35:5a:a0:4e:ce:aa:98:
                    c5:87:cd:f6:62:15:65:b7:d1:a7:9f:d8:78:0a:5d:
                    42:d5:9a:78:62:69:f4:ea:f3:ad:9d:46:66:3e:6e:
                    f1:d4:6f:9b:0f:a2:42:f6:62:1b:70:ef:6d:c7:00:
                    be:f1:6b:c2:10:dc:77:65:7b:85:5f:e8:00:5f:7e:
                    6d:19:55:f8:06:a0:2c:8a:bd:e6:1a:e3:5d:4a:ad:
                    1f:dd:76:53:82:ce:de:83:ef:4f:19:aa:62:26:2f:
                    41:a6:31:59:88:d8:01:b4:af:58:10:7c:c8:cb:e4:
                    15:b0:f5:d1:ae:30:8b:d7:c3:d8:d3:f6:1b:a3:af:
                    da:04:da:88:ee:20:9f:3b:37:05:b5:bc:4b:21:0b:
                    b9:a8:78:bc:ea:39:82:65:c6:1b:e4:bf:cb:ce:c8:
                    a6:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:8C:E3:D3:45:FD:31:36:1E:33:C2:BC:F1:84:4E:67:07:93:A7:60
            X509v3 Authority Key Identifier:
                keyid:74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3138392e342e302e302f31342d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.4.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         8e:d2:11:2a:32:7b:40:9c:46:26:83:bd:77:32:34:79:83:09:
         5b:d8:c2:3d:37:c2:db:f2:02:f1:30:28:49:70:2d:fe:f8:56:
         f6:f6:fc:34:b2:c2:92:4b:ac:7b:d4:84:c6:b4:a4:f5:d0:e1:
         6f:43:c7:cf:36:7a:03:08:01:c7:94:de:fb:ea:59:57:80:3b:
         f0:19:c4:00:26:5f:b8:b6:da:99:36:e5:31:f0:d6:2c:2d:89:
         13:06:e4:9b:56:c0:c4:76:e5:c9:50:18:5d:e5:77:05:fc:a3:
         a0:03:34:26:32:b2:70:c7:ce:4e:87:e5:4c:9e:b9:ea:d3:83:
         7b:2b:5a:18:85:3e:35:31:32:ff:e0:2f:52:b6:97:39:24:35:
         9a:9f:04:ac:83:e4:1d:7b:75:9f:e5:8a:90:d3:5f:92:d6:7e:
         e0:f1:95:65:06:d8:02:0d:15:54:9b:dc:c4:45:2e:bb:8b:91:
         e7:84:d0:a6:8a:e1:0b:03:32:70:91:15:4c:a0:b5:66:54:8c:
         5b:ab:95:84:56:99:4d:9c:61:ff:14:c0:4b:fc:26:34:0e:2a:
         30:f7:3b:0a:f4:4a:27:d1:45:dc:24:fb:f8:b1:36:0f:0b:86:
         c2:87:49:71:c1:d3:d8:4b:2d:0a:f7:50:a7:c0:ec:a8:86:dc:
         da:38:dd:6b
-----BEGIN CERTIFICATE-----
MIIHOjCCBiKgAwIBAgIUO1y5JKKLJu1lY86CPCatggRtFHgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzRFM0IwRDJDM0YwQTVFNkJBNzdBODcxMEVFOUI5QkNC
RDU2OUU5RDAeFw0yNDAyMTYxODU1MDVaFw0yNTAyMTQxOTAwMDVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzI3RDEyMzA3QTI1MjBCNTUw
OEE1NjdENDAzMkE0NTg4MkI3MDc0RTA1NUFEMTBBNjI2N0IwMUZDMDU3RTdCRkYy
QTkyOEI0NzExMTBCN0RFOTBGNDU1OEE0NzBENjE3RUI0QzY0MDZGNjY2RkVGN0U0
QkY0ODI1ODBEQjQ5ODc3REE5N0Y3RjNFOTA4ODU4QkExQTg3MDNERjA2N0MxNjg2
NjcyNjlBNEQ5RkRFOThFNkYxRjM4QjVCMzk0MDQ2NkYzNTVBQTA0RUNFQUE5OEM1
ODdDREY2NjIxNTY1QjdEMUE3OUZEODc4MEE1RDQyRDU5QTc4NjI2OUY0RUFGM0FE
OUQ0NjY2M0U2RUYxRDQ2RjlCMEZBMjQyRjY2MjFCNzBFRjZEQzcwMEJFRjE2QkMy
MTBEQzc3NjU3Qjg1NUZFODAwNUY3RTZEMTk1NUY4MDZBMDJDOEFCREU2MUFFMzVE
NEFBRDFGREQ3NjUzODJDRURFODNFRjRGMTlBQTYyMjYyRjQxQTYzMTU5ODhEODAx
QjRBRjU4MTA3Q0M4Q0JFNDE1QjBGNUQxQUUzMDhCRDdDM0Q4RDNGNjFCQTNBRkRB
MDREQTg4RUUyMDlGM0IzNzA1QjVCQzRCMjEwQkI5QTg3OEJDRUEzOTgyNjVDNjFC
RTRCRkNCQ0VDOEE2MTkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwn0SMHolILVQilZ9QDKkWIK3B04FWtEKYmewH8BX57/yqSi0cREL
fekPRVikcNYX60xkBvZm/vfkv0glgNtJh32pf38+kIhYuhqHA98GfBaGZyaaTZ/e
mObx84tbOUBGbzVaoE7OqpjFh832YhVlt9Gnn9h4Cl1C1Zp4Ymn06vOtnUZmPm7x
1G+bD6JC9mIbcO9txwC+8WvCENx3ZXuFX+gAX35tGVX4BqAsir3mGuNdSq0f3XZT
gs7eg+9PGapiJi9BpjFZiNgBtK9YEHzIy+QVsPXRrjCL18PY0/Ybo6/aBNqI7iCf
OzcFtbxLIQu5qHi86jmCZcYb5L/LzsimGQIDAQABo4ICSDCCAkQwHQYDVR0OBBYE
FDqM49NF/TE2HjPCvPGETmcHk6dgMB8GA1UdIwQYMBaAFHTjsNLD8KXmuneocQ7p
uby9Vp6dMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZRQXF5WXlHTFd4eFJi
SDVLY3BoejUxNzlkd2NCcThoWU5jMVFzaWFrTUwyLzAvNzRFM0IwRDJDM0YwQTVF
NkJBNzdBODcxMEVFOUI5QkNCRDU2OUU5RC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC83NEUzQjBEMkMzRjBBNUU2QkE3N0E4NzEwRUU5QjlCQ0JENTY5
RTlELmNlcjCBpgYIKwYBBQUHAQsEgZkwgZYwgZMGCCsGAQUFBzALhoGGcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GUUFxeVl5R0xXeHhSYkg1S2Nw
aHo1MTc5ZHdjQnE4aFlOYzFRc2lha01MMi8wLzMxMzgzOTJlMzQyZTMwMmUzMDJm
MzEzNDJkMzIzNDIwM2QzZTIwMzIzODM1MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAr0EMA0GCSqG
SIb3DQEBCwUAA4IBAQCO0hEqMntAnEYmg713MjR5gwlb2MI9N8Lb8gLxMChJcC3+
+Fb29vw0ssKSS6x71ITGtKT10OFvQ8fPNnoDCAHHlN776llXgDvwGcQAJl+4ttqZ
NuUx8NYsLYkTBuSbVsDEduXJUBhd5XcF/KOgAzQmMrJwx85Oh+VMnrnq04N7K1oY
hT41MTL/4C9Stpc5JDWanwSsg+Qde3Wf5YqQ01+S1n7g8ZVlBtgCDRVUm9zERS67
i5HnhNCmiuELAzJwkRVMoLVmVIxbq5WEVplNnGH/FMBL/CY0Diow9zsK9Eon0UXc
JPv4sTYPC4bCh0lxwdPYSy0K91CnwOyohtzaON1r
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:04 2024 by rpki-client on console-ams.rpki-client.org