Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3230302e3135352e3139322e302f31382d3234203d3e203238353733.roa
File:                     3230302e3135352e3139322e302f31382d3234203d3e203238353733.roa (raw, json)
Hash identifier:          V/aerendDenYT78WgYXPbr/IAyl7JdTjL8Ea/2DCFsM=
Subject key identifier:   48:84:2D:78:1F:AC:6F:27:C2:39:13:B4:50:4F:CC:1A:FB:28:4C:82
Certificate issuer:       /CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
Certificate serial:       4D68271FD129884EA58721F488A8A079ED48B6E2
Authority key identifier: 74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3230302e3135352e3139322e302f31382d3234203d3e203238353733.roa
Signing time:             Fri 16 Feb 2024 19:00:01 +0000
ROA not before:           Fri 16 Feb 2024 18:55:01 +0000
ROA not after:            Fri 14 Feb 2025 19:00:01 +0000
asID:                     28573
IP address blocks:        200.155.192.0/18 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:68:27:1f:d1:29:88:4e:a5:87:21:f4:88:a8:a0:79:ed:48:b6:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
        Validity
            Not Before: Feb 16 18:55:01 2024 GMT
            Not After : Feb 14 19:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:3c:c9:66:cb:40:19:46:5d:78:1c:4f:31:d8:
                    b3:8d:0f:a0:51:9c:c8:36:d8:46:65:2b:f5:7c:a1:
                    cd:4b:30:e0:db:bd:15:8d:00:20:3c:77:4a:5e:47:
                    37:42:de:a1:8f:72:dc:77:e3:4f:c4:e7:14:62:b0:
                    d4:9b:fc:61:cf:7e:24:a0:a5:72:52:10:a9:e3:23:
                    21:f5:8d:aa:3d:80:f6:cf:f2:a8:76:7f:e9:65:77:
                    57:e3:2f:80:59:b9:6f:eb:63:fb:42:56:0a:99:a6:
                    ce:a0:98:53:81:07:07:e3:75:e6:cb:bc:3d:0f:1e:
                    a1:06:c8:18:56:21:2a:8f:54:f0:f8:7d:37:7c:a8:
                    fe:b8:58:42:a5:a5:b6:62:0f:9e:3e:30:2c:a2:b0:
                    a5:f6:3c:fe:cf:92:ab:fe:4e:75:5d:f7:c3:83:fb:
                    b7:c4:f3:de:ce:be:36:67:2b:46:81:4a:2d:0a:cf:
                    6c:d3:b6:68:d1:73:db:7f:e8:f6:e7:f8:f1:72:73:
                    cc:10:9e:3f:bd:b8:10:bc:02:0e:af:bd:cd:5f:42:
                    20:1b:4a:47:43:46:a0:62:94:52:f9:c9:c9:14:c9:
                    b0:35:04:3d:fb:fc:3a:f0:b5:90:e0:8d:7b:6e:5d:
                    62:fb:84:16:8d:16:c4:e0:a3:91:e2:ca:36:f6:c6:
                    56:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:84:2D:78:1F:AC:6F:27:C2:39:13:B4:50:4F:CC:1A:FB:28:4C:82
            X509v3 Authority Key Identifier:
                keyid:74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3230302e3135352e3139322e302f31382d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.155.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         6f:4e:c5:9e:3a:88:2d:35:72:3c:5c:0f:80:73:eb:bf:46:bf:
         01:15:01:45:ea:22:ff:da:10:ee:4d:c4:46:7c:fc:0a:88:7d:
         4b:2e:ec:43:54:72:69:1a:d6:29:64:19:60:16:0d:8a:dc:f4:
         63:1d:e3:fe:02:08:71:39:49:0b:db:ed:b5:05:68:70:3a:7c:
         13:8d:6c:5f:70:39:3d:ee:e5:3b:aa:0e:69:ac:ae:90:2d:f9:
         22:95:12:45:83:d2:a7:b3:64:01:8b:a8:bf:01:53:30:75:b7:
         87:fa:65:a3:09:2d:07:37:15:66:dd:ef:ed:19:14:71:b3:41:
         0a:b3:1d:91:6f:1e:83:f2:71:90:3d:8c:d4:68:5e:40:5d:2a:
         77:16:d3:aa:02:85:99:2b:0c:76:02:64:74:cb:f0:b4:31:a6:
         f7:5a:14:f5:a1:05:c5:47:43:33:ac:d9:b6:53:4d:5e:b3:f5:
         8a:9e:13:0a:9a:a0:b3:8a:ca:2c:f0:9b:35:44:c9:2e:04:03:
         39:01:cf:cd:41:6b:6a:c8:5d:ee:5e:56:ef:0b:06:0c:c9:c3:
         89:50:e6:cf:fa:f9:57:ba:66:70:ef:a7:a2:50:40:4e:e3:42:
         f2:78:67:1f:61:86:09:a1:8a:35:1d:1a:53:8a:90:4e:dd:7e:
         09:7b:42:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:56:01 2025 by rpki-client