Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3230302e3138392e38302e302f32302d3234203d3e203238353733.roa
File:                     3230302e3138392e38302e302f32302d3234203d3e203238353733.roa (raw, json)
Hash identifier:          aZxf2PvL/8wWX31rvFOBVOqbp5Gs8+ujhEWguqTq114=
Subject key identifier:   FC:7A:AE:52:9D:5F:E9:42:82:4A:9C:04:9D:1B:77:51:D4:D2:1B:F5
Certificate issuer:       /CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
Certificate serial:       371949737A97F75703D761E1823E3FCD0FB4B63F
Authority key identifier: 74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3230302e3138392e38302e302f32302d3234203d3e203238353733.roa
Signing time:             Fri 16 Feb 2024 19:00:03 +0000
ROA not before:           Fri 16 Feb 2024 18:55:03 +0000
ROA not after:            Fri 14 Feb 2025 19:00:03 +0000
asID:                     28573
IP address blocks:        200.189.80.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:19:49:73:7a:97:f7:57:03:d7:61:e1:82:3e:3f:cd:0f:b4:b6:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
        Validity
            Not Before: Feb 16 18:55:03 2024 GMT
            Not After : Feb 14 19:00:03 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:a1:3d:3f:51:44:fe:37:cc:0e:de:a6:ef:84:
                    29:64:f0:8a:3b:82:27:7d:07:47:6e:0f:3d:8b:e9:
                    2b:ec:0f:2f:67:47:55:f3:2c:3f:ed:6d:dc:80:06:
                    07:70:51:b1:ce:10:39:ac:44:f5:51:c4:e1:d7:49:
                    d8:81:15:4c:cc:3f:14:71:66:97:2a:50:c8:7a:19:
                    1c:1a:1a:2c:99:38:2a:8c:3e:d8:cb:b3:90:26:1e:
                    8d:27:1a:41:86:fc:2c:20:b7:a5:cb:6a:72:06:ec:
                    1b:d2:64:91:40:2e:69:6d:9e:ed:0c:1a:34:6c:9f:
                    4b:9f:e8:37:11:27:91:c0:0d:bf:53:b3:bd:41:3f:
                    fc:eb:88:53:b7:d9:66:13:50:97:4e:8c:f9:0e:8c:
                    9d:d9:63:2b:fe:8b:10:46:3f:49:48:28:65:ce:e8:
                    e4:41:59:a9:f7:32:d4:35:d4:1a:5e:31:8e:f2:4a:
                    3b:20:fa:75:bb:eb:81:34:c6:62:68:5f:2e:26:b7:
                    71:2d:da:48:dc:93:9b:8e:9a:38:64:bd:3a:0e:1d:
                    3c:16:a0:9e:82:44:3f:ab:e6:fe:f2:1a:7a:68:14:
                    54:73:73:6d:ad:84:7b:5c:4e:c6:18:06:94:ec:75:
                    d8:32:89:35:e0:29:a0:12:3a:6a:9b:77:55:05:0f:
                    3c:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:7A:AE:52:9D:5F:E9:42:82:4A:9C:04:9D:1B:77:51:D4:D2:1B:F5
            X509v3 Authority Key Identifier:
                keyid:74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3230302e3138392e38302e302f32302d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.189.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4b:a9:32:1b:8f:cb:ae:ff:5b:f7:d8:09:3c:de:5e:12:d2:d9:
         7d:6c:e2:a1:d7:8c:28:77:ce:c1:88:32:5f:ab:e4:c9:da:3b:
         e5:5a:7c:71:74:7e:fa:42:a6:f6:de:52:98:13:97:1c:93:6a:
         81:b5:2c:80:48:49:03:2d:71:a0:2b:b6:dc:ea:e6:30:47:db:
         8d:f7:c6:55:c1:80:4c:4d:06:b2:8d:d7:c0:76:d7:0b:13:e1:
         d1:c6:eb:fa:26:d6:f5:96:c5:ee:0e:4f:46:71:45:63:c7:c0:
         e9:15:3b:44:97:6c:6f:56:b9:1b:4f:35:04:b6:2b:03:84:43:
         8a:91:22:81:f3:46:cf:ec:a5:a4:da:44:70:02:bc:6d:a4:aa:
         52:ca:cb:09:da:5b:51:01:14:58:9f:9a:01:bc:cd:7f:28:f2:
         52:65:39:09:66:7b:34:6a:ac:3e:f9:70:3a:58:19:6b:9c:d3:
         3e:c3:c8:d7:69:70:07:4a:42:10:25:fb:77:0d:ba:aa:d2:57:
         54:72:7c:af:09:6c:34:34:01:c8:30:a5:8b:26:7e:b6:3b:a6:
         85:02:11:0d:7e:0a:0a:76:74:d0:b3:c3:76:78:b0:40:e0:47:
         8a:35:d8:94:b9:fa:7f:9c:6a:fc:50:9d:71:09:d5:d6:eb:4e:
         5e:0c:e8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org