Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3230312e35322e302e302f31352d3234203d3e203238353733.roa
File:                     3230312e35322e302e302f31352d3234203d3e203238353733.roa (raw, json)
Hash identifier:          ljx1AaS6bna4Lu/QqP6esxl+zgU0z5YgyJdleCSYfIQ=
Subject key identifier:   EB:59:37:01:98:78:70:E2:B6:DD:21:41:3F:5E:38:39:B0:7F:D8:3D
Certificate issuer:       /CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
Certificate serial:       4CC6F503AEB869CA5F40F5E1D41FB0AC14D8A350
Authority key identifier: 74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3230312e35322e302e302f31352d3234203d3e203238353733.roa
Signing time:             Fri 16 Feb 2024 19:00:03 +0000
ROA not before:           Fri 16 Feb 2024 18:55:03 +0000
ROA not after:            Fri 14 Feb 2025 19:00:03 +0000
asID:                     28573
IP address blocks:        201.52.0.0/15 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:c6:f5:03:ae:b8:69:ca:5f:40:f5:e1:d4:1f:b0:ac:14:d8:a3:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
        Validity
            Not Before: Feb 16 18:55:03 2024 GMT
            Not After : Feb 14 19:00:03 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:74:41:97:70:7e:3d:29:6b:85:4a:98:e8:ca:
                    d7:df:28:bd:b2:3a:2a:c6:1b:1b:67:ab:50:5a:bf:
                    a6:97:2a:f3:59:6a:c1:6b:0f:97:a2:9a:f8:1a:fb:
                    97:83:f5:92:27:ac:1f:09:a9:d6:ac:c9:bb:6e:d7:
                    b1:3e:68:f0:bc:da:11:ea:14:00:fe:1f:e3:e0:c0:
                    72:55:bb:25:81:84:e1:f1:08:37:fd:d9:2d:37:e9:
                    b1:78:75:4c:50:7e:76:7b:34:e8:4c:3f:78:39:a4:
                    45:05:08:ea:af:80:e3:f7:19:f4:ee:c4:69:3f:40:
                    7c:3a:71:84:51:12:7e:49:fb:48:fc:97:3f:87:a1:
                    b0:9d:27:e3:08:c9:ec:54:cb:f0:55:29:a6:ef:d5:
                    23:dd:de:59:2b:d2:69:0b:7d:11:3b:92:54:18:a5:
                    0d:4a:72:69:4a:0b:fd:12:07:19:7d:1c:5f:81:0a:
                    5d:6f:bb:f9:59:2d:ee:77:77:23:05:ad:f7:7a:f0:
                    03:20:0d:40:24:83:60:43:30:66:36:2a:61:45:d3:
                    a1:cc:4e:6c:8d:c9:c6:7b:7c:99:83:df:ae:5e:4e:
                    32:27:18:bf:d0:a4:9f:cd:7e:a4:3c:07:d4:0a:9a:
                    6f:df:f9:e0:4e:80:a7:e1:d2:ad:8a:c9:eb:af:a9:
                    b6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:59:37:01:98:78:70:E2:B6:DD:21:41:3F:5E:38:39:B0:7F:D8:3D
            X509v3 Authority Key Identifier:
                keyid:74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3230312e35322e302e302f31352d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.52.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         75:19:37:f5:4d:da:ba:0b:f0:d8:a9:08:72:54:bd:35:59:bd:
         e0:93:b4:2e:7a:23:ff:8b:83:df:59:44:c7:2b:bc:f1:e4:f5:
         b1:3a:e4:bd:35:bb:b5:f3:80:21:4e:9f:f6:8a:86:5d:e7:d4:
         4b:2f:b3:55:54:51:32:9e:be:e3:59:ab:d9:0d:ea:c7:f1:79:
         a4:0f:cb:82:0a:39:58:2e:e3:25:28:cd:dd:ea:83:00:8f:76:
         38:9a:72:21:c7:ee:fb:2a:47:06:c7:d5:d2:0b:31:68:85:4b:
         bb:d9:95:c8:c6:17:d0:b4:1c:4c:5f:94:8b:3b:a1:29:db:2e:
         3b:54:39:e8:b9:01:1e:f5:47:70:da:71:b0:45:0e:14:b6:ae:
         4b:72:cb:f2:21:c0:e6:ee:d1:88:4d:a6:55:cd:2e:1f:dc:49:
         66:93:bf:24:3a:21:02:e5:85:01:ba:b2:67:4b:1b:7e:92:5e:
         e8:bf:ef:46:0d:94:81:93:e0:ff:93:ec:37:fa:09:82:9e:d8:
         f1:a0:71:7b:1a:b6:b3:85:9b:22:ab:04:2f:44:6d:e2:8f:02:
         36:7e:b0:13:1b:2b:33:d1:f4:2a:a5:cf:a2:df:93:92:8e:47:
         06:94:e4:71:89:d7:10:04:da:63:ba:3e:e5:ea:41:eb:96:30:
         d0:37:52:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org