Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3230312e362e302e302f31362d3234203d3e203238353733.roa
File:                     3230312e362e302e302f31362d3234203d3e203238353733.roa (raw, json)
Hash identifier:          gi0SVuBTq/LxwiG6rgL46QgkOR1gMy6nINXaprbYvVc=
Subject key identifier:   60:6B:18:D4:EA:A9:61:FF:CD:6B:F4:2B:43:A1:6F:0B:AA:8C:EB:DA
Certificate issuer:       /CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
Certificate serial:       6040DB62CDB4A8475438D6960412E07DAA1F0AFD
Authority key identifier: 74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3230312e362e302e302f31362d3234203d3e203238353733.roa
Signing time:             Fri 16 Feb 2024 19:00:04 +0000
ROA not before:           Fri 16 Feb 2024 18:55:04 +0000
ROA not after:            Fri 14 Feb 2025 19:00:04 +0000
asID:                     28573
IP address blocks:        201.6.0.0/16 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:40:db:62:cd:b4:a8:47:54:38:d6:96:04:12:e0:7d:aa:1f:0a:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
        Validity
            Not Before: Feb 16 18:55:04 2024 GMT
            Not After : Feb 14 19:00:04 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3e:5c:1c:be:7e:f9:06:cf:0b:81:52:fc:c1:
                    11:07:41:76:94:9e:33:1c:03:e3:13:c3:7b:d7:e5:
                    77:3f:b8:bc:da:bc:ac:5f:49:5f:18:a1:3e:48:7b:
                    a7:9f:34:da:25:8d:e7:f5:c9:c3:4a:10:46:14:c5:
                    ff:0a:22:f4:7a:80:b1:6f:b2:61:5a:71:e2:29:f9:
                    de:a5:45:2c:38:6a:52:89:7a:75:67:48:51:11:a3:
                    cf:d2:96:86:00:e9:e1:6e:5d:97:2a:74:43:3e:c2:
                    94:fd:84:89:a4:d3:71:c3:c3:5f:1a:92:7a:83:dc:
                    c7:25:7c:22:16:8d:c0:1b:78:db:46:2b:9e:3f:51:
                    e0:16:89:a3:a6:a3:fe:a5:47:72:8e:31:d6:7a:fb:
                    e7:74:51:40:1a:fe:26:b6:27:81:bf:40:4e:15:ab:
                    25:93:4a:2e:45:b8:56:f9:04:30:9b:bf:f1:94:bd:
                    db:a0:8b:c2:94:88:60:02:9b:1d:68:7f:ea:bf:b5:
                    54:8a:11:2f:71:ff:7b:39:70:e9:b9:5f:e4:13:45:
                    0f:c0:f3:b5:da:75:02:e4:27:51:a0:b5:43:ef:0c:
                    fc:78:87:62:d4:e0:ea:46:26:8c:89:37:9d:7a:b1:
                    08:6a:1a:6b:0c:03:c5:22:0b:fa:39:74:dc:04:3d:
                    7e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:6B:18:D4:EA:A9:61:FF:CD:6B:F4:2B:43:A1:6F:0B:AA:8C:EB:DA
            X509v3 Authority Key Identifier:
                keyid:74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3230312e362e302e302f31362d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.6.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         66:2f:98:de:f5:7a:50:fc:89:8a:55:45:e9:2f:bd:18:0c:61:
         4f:4f:c8:af:53:dc:ec:ef:49:d1:a9:a7:a3:76:a4:9f:74:25:
         9e:3f:8d:9a:f8:11:11:ce:5d:f8:a6:fa:3d:df:f5:16:78:2b:
         3e:41:c8:51:03:3a:5a:f4:f2:f0:0b:83:56:95:3b:bc:26:3a:
         e7:48:d2:dd:ff:8f:53:ca:e2:7f:aa:49:61:a2:b1:00:a5:72:
         03:f0:8b:c7:94:22:49:b3:bd:aa:25:9d:5e:8b:1b:63:5c:6f:
         54:67:b5:77:2b:ac:c0:cb:1c:8f:5e:98:72:be:1b:c8:58:d1:
         ea:1f:fc:a7:56:4b:86:37:1d:13:c0:ff:ca:25:86:d9:1e:fa:
         03:58:9f:9b:cc:d6:b0:16:11:d6:e4:3e:b6:5b:d6:9c:e3:88:
         52:c3:f9:4a:34:cc:68:10:1e:37:01:df:10:b4:1f:a7:1e:aa:
         cc:02:b4:ad:aa:83:74:5c:f8:52:e3:6c:99:51:6e:dd:21:80:
         26:96:69:c2:f6:b1:f9:f0:0a:42:29:af:79:b8:42:10:1d:45:
         f0:b1:8f:e9:37:94:d8:c6:12:de:3e:9d:2b:10:fe:9c:f6:a3:
         4b:c0:92:fe:42:37:0f:b9:0e:62:2d:4f:5c:dd:14:40:d1:2f:
         7a:4d:3a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:04 2024 by rpki-client on console-ams.rpki-client.org