Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3230312e32312e302e302f31362d3234203d3e203238353733.roa
File:                     3230312e32312e302e302f31362d3234203d3e203238353733.roa (raw, json)
Hash identifier:          U25Q/rGAmveinM9qgjcAxL+sOtcosnUohJvBHIvAN9g=
Subject key identifier:   89:2B:CA:56:C9:BE:25:D6:37:6B:BF:59:DF:75:F4:2A:A9:3C:D3:AA
Certificate issuer:       /CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
Certificate serial:       27526109811C4023DA7069AF3A497B255517E01C
Authority key identifier: 74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3230312e32312e302e302f31362d3234203d3e203238353733.roa
Signing time:             Fri 16 Feb 2024 19:00:01 +0000
ROA not before:           Fri 16 Feb 2024 18:55:01 +0000
ROA not after:            Fri 14 Feb 2025 19:00:01 +0000
asID:                     28573
IP address blocks:        201.21.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:52:61:09:81:1c:40:23:da:70:69:af:3a:49:7b:25:55:17:e0:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
        Validity
            Not Before: Feb 16 18:55:01 2024 GMT
            Not After : Feb 14 19:00:01 2025 GMT
        Subject: CN=3082010A0282010100C521FD018A27E8341331FDA338F911C45836A62AAC1B6769FD23AC209EC0AA127D6354A7D99BF91AD2B05EC7D3D39E1A75D9A65D127598161886B824E437B607F65C8405E4FBB74420112444AE85325ED837BC408EEC4D2E3959269A172A81D0B79631D794685DDBDA3FC7568C5958140957CD5310308B544F05B483E4424642FFC91680C5866865EF12C06D0FC176E28FA7CBAF41FB4AB9DA1B4CA2AE84B8F0D9AD3D5DE060063749B0E24E614D88AD2899A5A08BCAC7586085C1FF31EEA1B2A5F1C920A7D53141FAE694C81A0E21AB7950FECE968A01149B4F996F2DA491D0DB54A109A350AA5E2160A63E68F414E2DAB2AA79878CF4FECA666333D837F7870203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:21:fd:01:8a:27:e8:34:13:31:fd:a3:38:f9:
                    11:c4:58:36:a6:2a:ac:1b:67:69:fd:23:ac:20:9e:
                    c0:aa:12:7d:63:54:a7:d9:9b:f9:1a:d2:b0:5e:c7:
                    d3:d3:9e:1a:75:d9:a6:5d:12:75:98:16:18:86:b8:
                    24:e4:37:b6:07:f6:5c:84:05:e4:fb:b7:44:20:11:
                    24:44:ae:85:32:5e:d8:37:bc:40:8e:ec:4d:2e:39:
                    59:26:9a:17:2a:81:d0:b7:96:31:d7:94:68:5d:db:
                    da:3f:c7:56:8c:59:58:14:09:57:cd:53:10:30:8b:
                    54:4f:05:b4:83:e4:42:46:42:ff:c9:16:80:c5:86:
                    68:65:ef:12:c0:6d:0f:c1:76:e2:8f:a7:cb:af:41:
                    fb:4a:b9:da:1b:4c:a2:ae:84:b8:f0:d9:ad:3d:5d:
                    e0:60:06:37:49:b0:e2:4e:61:4d:88:ad:28:99:a5:
                    a0:8b:ca:c7:58:60:85:c1:ff:31:ee:a1:b2:a5:f1:
                    c9:20:a7:d5:31:41:fa:e6:94:c8:1a:0e:21:ab:79:
                    50:fe:ce:96:8a:01:14:9b:4f:99:6f:2d:a4:91:d0:
                    db:54:a1:09:a3:50:aa:5e:21:60:a6:3e:68:f4:14:
                    e2:da:b2:aa:79:87:8c:f4:fe:ca:66:63:33:d8:37:
                    f7:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:2B:CA:56:C9:BE:25:D6:37:6B:BF:59:DF:75:F4:2A:A9:3C:D3:AA
            X509v3 Authority Key Identifier:
                keyid:74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3230312e32312e302e302f31362d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.21.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8d:3a:65:eb:00:89:fc:1d:27:21:52:30:e0:13:35:76:87:67:
         f4:31:4e:ec:63:75:a8:a5:10:bf:77:56:27:97:fb:60:b7:00:
         86:e3:12:71:49:e9:2c:38:58:b3:d7:a2:09:1d:f1:12:a8:b1:
         b2:dc:1e:a4:41:b9:be:d3:6f:15:a3:3c:83:76:29:ca:e4:b7:
         ff:cc:2d:8b:be:24:1b:af:ca:a8:ae:37:c4:98:04:ef:6f:22:
         ce:aa:69:e3:8a:1b:d6:0c:b6:6e:1a:96:2a:98:26:83:80:5c:
         d4:ea:4d:2b:10:12:d7:de:1b:28:33:9b:f2:9a:fa:d4:1e:b3:
         27:30:61:f0:57:2c:ec:72:5d:a1:0c:81:d0:56:60:21:a6:8c:
         57:1b:6c:fb:75:07:b8:c1:87:2e:8c:76:32:00:b2:42:a8:44:
         1b:8f:86:03:f3:be:d3:a0:04:06:18:01:6b:9a:0e:df:fb:ce:
         e9:b8:9f:28:58:b1:3d:81:56:93:c2:b2:4a:63:e3:9e:a4:8c:
         db:51:a6:94:7b:d3:18:e3:b7:be:9f:64:ea:1e:99:b6:63:f1:
         5d:d9:44:9d:35:4c:19:f1:20:62:b4:35:e5:f5:31:4c:1c:f7:
         64:ca:ed:ea:66:33:a4:40:f8:56:8f:c6:04:77:c5:b2:2f:e0:
         fd:08:8e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org