Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3230312e34362e3234302e302f32302d3234203d3e203238353733.roa
File:                     3230312e34362e3234302e302f32302d3234203d3e203238353733.roa (raw, json)
Hash identifier:          xQseKjab8hQdZ4v6u0uAQVTMbn+yvifkBShxA6TV+3Y=
Subject key identifier:   A5:DA:B7:3F:3D:86:C4:96:67:68:31:2C:3F:58:27:96:EF:77:CB:86
Certificate issuer:       /CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
Certificate serial:       4750EC07209D95BB5F538C46EF330CE3AFE762ED
Authority key identifier: 74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3230312e34362e3234302e302f32302d3234203d3e203238353733.roa
Signing time:             Fri 16 Feb 2024 19:00:03 +0000
ROA not before:           Fri 16 Feb 2024 18:55:03 +0000
ROA not after:            Fri 14 Feb 2025 19:00:03 +0000
asID:                     28573
IP address blocks:        201.46.240.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:50:ec:07:20:9d:95:bb:5f:53:8c:46:ef:33:0c:e3:af:e7:62:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
        Validity
            Not Before: Feb 16 18:55:03 2024 GMT
            Not After : Feb 14 19:00:03 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:99:4f:f6:82:95:ff:94:e2:8b:97:73:15:82:
                    16:58:93:0f:8f:02:e7:2c:9d:da:66:f9:7d:f8:61:
                    09:33:61:24:eb:b5:20:64:69:2f:94:37:a9:cd:90:
                    94:16:3e:c7:bb:64:dd:cc:cd:51:4a:d7:b7:21:2b:
                    7e:ac:ea:9a:a7:e5:96:0f:2b:70:5f:b4:34:14:3c:
                    0e:c8:b4:c4:04:7b:b8:de:4c:dd:b4:72:52:4a:eb:
                    03:ce:eb:9d:15:82:e5:2a:14:9b:27:a5:dc:a8:37:
                    0c:05:a3:0f:be:de:1f:9e:71:a5:0e:4c:eb:9e:db:
                    4d:d0:bc:8e:35:10:13:14:37:b1:f5:95:6f:c8:be:
                    07:34:48:8f:4f:75:ff:d3:ec:28:9c:1e:20:10:a3:
                    a1:27:2a:f6:ce:07:de:5d:95:7b:a8:a0:52:9f:19:
                    3a:8b:1b:20:17:63:3c:f1:44:92:84:da:c6:c3:78:
                    ad:18:2d:f9:c8:03:5c:f5:92:4e:e2:e6:3a:e4:31:
                    b7:d6:1d:d4:f4:97:2b:29:6e:22:ad:0b:dc:a0:f5:
                    50:de:40:b9:88:bb:38:59:41:63:7d:eb:c6:d9:f5:
                    18:0f:5b:d7:8f:ee:5d:bf:59:67:8f:4f:4c:10:7d:
                    1d:38:7f:76:45:0b:20:79:6c:3b:31:aa:73:b5:e3:
                    d9:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:DA:B7:3F:3D:86:C4:96:67:68:31:2C:3F:58:27:96:EF:77:CB:86
            X509v3 Authority Key Identifier:
                keyid:74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3230312e34362e3234302e302f32302d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.46.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         69:8d:7e:70:a0:1f:cc:80:02:be:bf:b3:9d:8b:33:f5:34:ab:
         40:aa:60:5e:8d:56:09:68:51:dd:84:75:19:e9:78:f8:a8:4b:
         9a:96:53:29:70:03:3b:b9:19:ed:d8:df:f5:ae:d5:11:a4:68:
         41:18:7c:6e:e4:d0:15:b0:e6:52:63:4c:ce:e1:2d:7b:35:10:
         c0:a5:97:8e:1f:fe:35:f9:53:70:eb:f0:30:1a:45:b4:e2:72:
         53:7b:39:d8:93:4d:0d:63:44:c8:e8:1b:38:a6:f2:5a:e2:6e:
         99:cf:66:8b:c7:b8:76:cf:2d:17:92:cb:a3:8b:73:af:6c:79:
         81:e5:80:70:4e:ac:19:0e:9b:9f:ee:d3:86:55:90:93:f1:58:
         9e:40:96:35:d9:82:b8:91:d7:8e:f5:27:fa:24:65:28:95:a2:
         63:a8:53:41:ca:22:7d:3e:9c:88:f7:91:c0:bf:ea:47:6d:8a:
         b3:35:0e:7b:59:85:d1:4a:fe:f8:96:b3:24:25:d7:e9:0c:b2:
         fc:86:a4:0e:05:cc:0f:e5:9c:35:22:ac:2b:50:ac:88:26:d9:
         63:1a:6c:ec:33:b4:8c:ec:19:33:43:77:35:e3:75:e9:8f:0e:
         39:59:35:1b:ff:8d:9b:75:39:fa:27:e9:86:c7:c3:c1:12:fd:
         af:9f:cf:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:01:43 2025 by rpki-client