Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3230302e3137302e302e302f31382d3234203d3e203238353733.roa
File:                     3230302e3137302e302e302f31382d3234203d3e203238353733.roa (raw, json)
Hash identifier:          AyMWeEiesnaq/cRsSk3iEy50siKRoM85Ce3uZsOinqI=
Subject key identifier:   97:80:2D:9D:B8:40:F7:6E:AC:C4:94:68:D7:59:D8:CD:F9:8E:E6:68
Certificate issuer:       /CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
Certificate serial:       76D458C77921E8F7EE722D5BEC6D16017AED573E
Authority key identifier: 74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3230302e3137302e302e302f31382d3234203d3e203238353733.roa
Signing time:             Fri 16 Feb 2024 19:00:01 +0000
ROA not before:           Fri 16 Feb 2024 18:55:01 +0000
ROA not after:            Fri 14 Feb 2025 19:00:01 +0000
asID:                     28573
IP address blocks:        200.170.0.0/18 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:d4:58:c7:79:21:e8:f7:ee:72:2d:5b:ec:6d:16:01:7a:ed:57:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
        Validity
            Not Before: Feb 16 18:55:01 2024 GMT
            Not After : Feb 14 19:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:84:52:a8:28:3d:49:68:57:11:29:ed:0c:eb:
                    7b:bc:08:b4:45:f8:4f:c0:30:7a:ff:bc:9d:32:75:
                    f6:2c:22:7c:fc:f3:fd:0c:70:14:6d:6c:91:c2:ce:
                    ab:5e:ef:83:85:66:61:af:46:6e:e4:86:46:67:4e:
                    0c:5a:6f:22:86:23:cb:a2:37:3b:85:32:07:b2:2b:
                    24:00:c7:c9:0f:06:c8:df:35:90:78:e6:f3:ff:25:
                    b2:30:7c:da:e4:aa:d4:44:19:23:57:81:38:bf:1e:
                    22:74:3c:2b:2a:43:c8:62:60:c5:70:56:96:f9:99:
                    e6:44:f8:64:e4:c2:b9:16:d4:4c:0c:c0:36:cd:3c:
                    b8:d9:33:40:e0:c2:61:9d:8a:aa:da:5c:fc:1a:f7:
                    41:f1:fe:f1:9a:69:de:e5:e1:c7:5c:37:75:a3:44:
                    f8:a1:3b:c1:de:d8:c4:ee:07:7e:fb:d6:0f:c8:69:
                    79:2a:b7:56:37:8a:63:04:7b:9b:59:31:7b:f0:00:
                    c5:0f:90:bb:48:cf:30:2c:c9:17:22:da:e2:e5:9c:
                    12:24:2d:f6:ca:1a:05:a9:72:08:fe:85:e1:68:a4:
                    d0:d4:bc:c7:61:d6:95:4d:66:a8:4b:65:cf:3b:9d:
                    29:f7:16:c8:14:11:9c:f5:09:6c:85:1c:b9:3e:1a:
                    7e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:80:2D:9D:B8:40:F7:6E:AC:C4:94:68:D7:59:D8:CD:F9:8E:E6:68
            X509v3 Authority Key Identifier:
                keyid:74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3230302e3137302e302e302f31382d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.170.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1d:3e:09:06:9a:7a:4f:0e:23:bb:a2:cf:28:08:41:01:a4:4e:
         38:db:d4:f6:46:dc:af:be:95:e9:0b:94:10:b4:a4:fe:1c:9b:
         30:b3:a0:64:40:77:aa:52:2c:75:da:79:06:49:7c:40:98:57:
         6e:b7:c5:6f:91:db:c0:8f:89:8b:8a:51:85:3d:86:43:a1:62:
         4f:0e:19:b5:8a:f2:2c:a7:cf:1f:30:4b:7f:c6:ff:28:bd:12:
         dd:a0:3d:2b:3e:94:04:26:19:4a:5e:75:17:16:41:c2:85:fd:
         0c:d6:c6:59:66:a4:29:6d:ad:28:b9:22:99:f6:02:c7:43:31:
         e6:ed:dc:3f:b5:01:a8:8c:df:09:4f:e0:78:80:a6:ea:97:19:
         47:af:74:75:f1:be:90:13:88:01:fe:60:2d:cf:e2:1f:bc:b0:
         dd:63:95:c6:a7:ad:e4:17:29:7e:f8:74:8f:1c:c3:d7:35:42:
         5a:78:bb:26:3d:49:93:d4:18:90:17:df:d1:a0:f4:3e:09:25:
         13:29:d5:2e:f4:32:ec:ba:75:3e:90:d0:a6:1a:83:2d:c0:4a:
         a9:e9:98:26:63:ac:20:82:04:ab:20:10:08:29:53:3e:c7:04:
         41:bf:5a:a3:64:9b:2e:10:45:af:ad:34:b1:45:d3:71:02:f2:
         d2:d5:ac:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:04 2024 by rpki-client on console-ams.rpki-client.org