Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3139312e3137362e302e302f31322d3234203d3e203238353733.roa
File:                     3139312e3137362e302e302f31322d3234203d3e203238353733.roa (raw, json)
Hash identifier:          CX3fcjs5NQ/C1qDJtOBznlvA09ID4sw5rfyTOmNh7OU=
Subject key identifier:   07:28:B0:F3:A6:11:7B:42:59:BF:EC:67:77:50:68:E3:79:70:C9:C6
Certificate issuer:       /CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
Certificate serial:       55D494CA072D5996F3699F79C5DD3DF05146F63F
Authority key identifier: 74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3139312e3137362e302e302f31322d3234203d3e203238353733.roa
Signing time:             Fri 16 Feb 2024 19:00:01 +0000
ROA not before:           Fri 16 Feb 2024 18:55:01 +0000
ROA not after:            Fri 14 Feb 2025 19:00:01 +0000
asID:                     28573
IP address blocks:        191.176.0.0/12 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:d4:94:ca:07:2d:59:96:f3:69:9f:79:c5:dd:3d:f0:51:46:f6:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
        Validity
            Not Before: Feb 16 18:55:01 2024 GMT
            Not After : Feb 14 19:00:01 2025 GMT
        Subject: CN=3082010A0282010100DD2D5E9E5B5B7B83FAD8D796FA3ECEF39981D5D45B3A8C957936B20C5560874DF52DE7D79A925C7337C3B8E03D7BBFDBC22538452A7CB086F69A566A83D7B58BF6382841C994EE94369BED52113D85D5B923A9B5E809B246ADFA50DA13D5D9F904CF07092025AEBC1F4911270EB025BE9101A5763F625AB4C29A1F74BBB06DF576D0F3D4D24BDDAACF991E362D25FB6336B9C8E72823DC01F4BBEA5A9B029FFA6D2704B81B8EA8102E069345E40F38380CE4D5AAD30401870ACEB6C11C0DC667498F510F3577C01B2C49025434DA6C2C9E714F75BB38662EADA95CA45FE08782DC26F48ACEA51B5B471A7815F8C2A06247A6EEF0EAD738052909BDB0BC514C190203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:2d:5e:9e:5b:5b:7b:83:fa:d8:d7:96:fa:3e:
                    ce:f3:99:81:d5:d4:5b:3a:8c:95:79:36:b2:0c:55:
                    60:87:4d:f5:2d:e7:d7:9a:92:5c:73:37:c3:b8:e0:
                    3d:7b:bf:db:c2:25:38:45:2a:7c:b0:86:f6:9a:56:
                    6a:83:d7:b5:8b:f6:38:28:41:c9:94:ee:94:36:9b:
                    ed:52:11:3d:85:d5:b9:23:a9:b5:e8:09:b2:46:ad:
                    fa:50:da:13:d5:d9:f9:04:cf:07:09:20:25:ae:bc:
                    1f:49:11:27:0e:b0:25:be:91:01:a5:76:3f:62:5a:
                    b4:c2:9a:1f:74:bb:b0:6d:f5:76:d0:f3:d4:d2:4b:
                    dd:aa:cf:99:1e:36:2d:25:fb:63:36:b9:c8:e7:28:
                    23:dc:01:f4:bb:ea:5a:9b:02:9f:fa:6d:27:04:b8:
                    1b:8e:a8:10:2e:06:93:45:e4:0f:38:38:0c:e4:d5:
                    aa:d3:04:01:87:0a:ce:b6:c1:1c:0d:c6:67:49:8f:
                    51:0f:35:77:c0:1b:2c:49:02:54:34:da:6c:2c:9e:
                    71:4f:75:bb:38:66:2e:ad:a9:5c:a4:5f:e0:87:82:
                    dc:26:f4:8a:ce:a5:1b:5b:47:1a:78:15:f8:c2:a0:
                    62:47:a6:ee:f0:ea:d7:38:05:29:09:bd:b0:bc:51:
                    4c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:28:B0:F3:A6:11:7B:42:59:BF:EC:67:77:50:68:E3:79:70:C9:C6
            X509v3 Authority Key Identifier:
                keyid:74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3139312e3137362e302e302f31322d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.176.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         39:32:9c:a7:61:d5:4c:d5:fe:26:04:83:c9:36:4b:ab:1c:b6:
         da:8b:9a:e3:8d:fe:d7:af:51:46:cf:4e:71:11:97:a0:ab:84:
         fe:a2:f3:1e:00:92:5b:8b:1b:43:1b:fd:48:5f:54:ef:e3:1f:
         67:0e:30:f8:18:69:e1:59:30:3d:94:a2:28:dc:54:e7:29:e0:
         b4:0f:cb:f5:93:6e:ea:9b:f6:a0:b1:3e:38:76:66:95:8f:2c:
         59:6a:03:55:9d:06:f4:fb:4a:9d:9c:81:bc:df:61:f8:4e:76:
         f3:41:01:7c:a9:5a:3a:b4:d4:67:a6:08:57:96:12:94:8b:03:
         5b:b8:b4:1b:89:32:77:50:00:a4:06:ed:63:43:a9:56:45:63:
         b3:3b:94:f1:92:00:f8:92:6a:7b:38:09:97:35:3e:5b:0b:b9:
         7a:e6:5d:f9:8b:16:eb:0a:4e:4c:78:b8:2f:f3:0c:66:51:1f:
         4f:a1:c6:34:c6:20:be:8f:69:1b:fc:2f:56:00:1c:0d:ad:e2:
         3c:a0:01:64:34:3a:f8:c9:3a:fa:f6:51:6f:4a:f5:4a:bb:c3:
         3e:11:22:21:29:17:48:b1:fb:1b:41:e6:13:46:01:ab:25:a1:
         c1:86:f3:15:c8:85:c2:33:e2:2f:32:e8:20:a6:71:5f:fb:20:
         ae:93:ed:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org