Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3138392e35312e3137362e302f32302d3230203d3e203238333531.roa
File:                     3138392e35312e3137362e302f32302d3230203d3e203238333531.roa (raw, json)
Hash identifier:          IFAybvAz7T/LJSce3Np/xXpBQXCg4RoW4wa4okwNNos=
Subject key identifier:   05:F3:96:B2:42:DD:A4:E9:0C:9D:A3:E7:33:90:AD:5B:13:19:7B:A8
Certificate issuer:       /CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
Certificate serial:       4B353B507FB57721CEBBFB8E014E1EBADB71EDEC
Authority key identifier: 74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3138392e35312e3137362e302f32302d3230203d3e203238333531.roa
Signing time:             Thu 03 Aug 2023 18:27:24 +0000
ROA not before:           Thu 03 Aug 2023 18:22:24 +0000
ROA not after:            Thu 01 Aug 2024 18:27:24 +0000
asID:                     28351
IP address blocks:        189.51.176.0/20 maxlen: 20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:35:3b:50:7f:b5:77:21:ce:bb:fb:8e:01:4e:1e:ba:db:71:ed:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
        Validity
            Not Before: Aug  3 18:22:24 2023 GMT
            Not After : Aug  1 18:27:24 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f4:52:8a:3f:55:da:0d:02:fb:4c:22:e5:fd:
                    b3:23:b6:fb:0d:ce:e2:5a:22:f9:4f:4c:63:a1:e2:
                    39:57:9a:66:71:e3:d6:f4:89:ec:c6:07:62:9d:95:
                    3c:a1:a6:e9:99:dd:4d:a8:e4:9b:47:01:42:56:8d:
                    63:c8:be:b8:7e:ac:f4:c9:8a:da:27:7f:0b:2a:fa:
                    00:a6:f0:da:44:a5:82:7f:6c:42:cf:e6:fa:f5:df:
                    ae:18:75:5b:55:1b:6c:df:db:ce:76:22:e9:d0:f5:
                    25:be:5e:81:fa:24:5b:20:95:ec:63:5a:fd:a9:4b:
                    2b:10:b0:35:fb:12:3c:72:7f:37:ba:86:23:75:ed:
                    0e:82:52:cd:0e:7a:8d:58:db:2c:b3:7f:50:2d:93:
                    e3:5c:ab:70:3f:0e:a3:78:8a:fe:70:ff:62:0f:24:
                    91:be:c7:66:81:2b:25:ca:61:9d:f2:d9:f0:c4:71:
                    53:66:85:4d:96:b8:af:c4:11:c1:16:1e:d1:69:74:
                    20:eb:a7:ae:4b:91:3e:e8:2d:a5:4f:18:40:51:6e:
                    1f:72:f9:e6:ce:ab:f4:a2:01:cd:8d:bb:e1:ca:15:
                    5b:55:55:a6:cf:70:d9:d8:c8:86:ad:db:59:b7:5d:
                    53:3a:8f:82:a3:b9:e7:dc:a3:57:5f:2c:f2:c1:cf:
                    8e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F3:96:B2:42:DD:A4:E9:0C:9D:A3:E7:33:90:AD:5B:13:19:7B:A8
            X509v3 Authority Key Identifier:
                keyid:74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3138392e35312e3137362e302f32302d3230203d3e203238333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1f:79:d7:c4:fb:51:bd:79:50:ba:83:e1:9d:7b:e8:89:76:24:
         46:1a:c6:9c:30:fc:1f:76:9c:a5:3e:0d:e0:ca:f2:c8:a9:e0:
         b0:ef:57:89:71:32:63:75:46:08:3c:89:f9:0e:d0:26:c9:37:
         9d:0b:ed:07:4c:09:85:54:22:b7:d1:45:f9:8c:b3:ca:04:7b:
         a2:06:f4:41:8a:d1:38:05:c4:42:c8:b0:fa:e6:58:cd:f8:f2:
         6e:c5:21:cb:c5:75:8b:0a:80:63:fa:b2:ef:64:a7:d8:1e:42:
         29:d0:58:25:13:24:a2:48:fa:33:4f:bb:d8:c5:d1:9c:8b:d2:
         a0:c1:cb:1a:8c:e5:ca:5a:35:a2:c8:87:e9:c8:2d:89:be:03:
         d6:ed:ad:90:6d:87:38:da:84:f2:8b:46:06:3c:6f:4e:3a:cb:
         e1:37:f6:66:a1:81:90:13:d8:f0:15:2d:f2:b5:c5:e4:76:80:
         29:bf:98:6b:15:c7:15:29:45:e0:77:e8:6c:2f:ec:0e:1d:8d:
         50:09:b1:7b:a0:65:63:48:60:e1:c1:19:2c:cd:9c:5a:8f:3c:
         c8:c6:c4:94:6b:55:79:30:c7:20:57:8d:23:54:dd:a5:fd:40:
         ca:fe:bc:ce:9e:e1:11:11:44:52:cd:9d:82:21:f8:ad:b3:a8:
         df:cb:95:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org