Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3230312e36322e39362e302f31392d3234203d3e203238353733.roa
File:                     3230312e36322e39362e302f31392d3234203d3e203238353733.roa (raw, json)
Hash identifier:          dllxYFgL/2c2clJVfwRoMxGjrgKqubfaOF9tgLfAiBE=
Subject key identifier:   32:99:D9:7A:17:2D:E3:B9:22:BD:EB:54:C9:C0:06:9D:9C:57:51:F6
Certificate issuer:       /CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
Certificate serial:       5816C2159FB27FE96DF9960C44284EC856227F10
Authority key identifier: 74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3230312e36322e39362e302f31392d3234203d3e203238353733.roa
Signing time:             Fri 16 Feb 2024 19:00:04 +0000
ROA not before:           Fri 16 Feb 2024 18:55:04 +0000
ROA not after:            Fri 14 Feb 2025 19:00:04 +0000
asID:                     28573
IP address blocks:        201.62.96.0/19 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:16:c2:15:9f:b2:7f:e9:6d:f9:96:0c:44:28:4e:c8:56:22:7f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
        Validity
            Not Before: Feb 16 18:55:04 2024 GMT
            Not After : Feb 14 19:00:04 2025 GMT
        Subject: CN=3082010A0282010100D603A70A1956BA6349185EC4F2BD8CB80CCDF46CF6AC09F1423E8B5AB862B1A4370B01B98788BB16AEA95941D7CF9C9D55B4D4357FFD52ADDAE8ADC6721BE7D21A64AF2B438D8C029CDC2C2C29389B1AFD1B29228FD82A3B84474095147A4E16C6636321DFADE60C450BAE6A07CE5F8E4BBB8F46AFFDE4392C838D43FACA4DBC196DF7CF6423F62FCCDAD53343123B92042819D217451A68B9D595609A84CA5F8E091EA29294454D9B370D125D879CEDD4E1277EC8A53E56DBB5B5B1D556B18A1339849737C6B85107343AA34279C6AB20CFB2E255BBDFC568F24DD932F25BE2F9B9BD948E4672C57795E075B431ACE19DBFA1B0F61068ED78598C8F779254AB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:03:a7:0a:19:56:ba:63:49:18:5e:c4:f2:bd:
                    8c:b8:0c:cd:f4:6c:f6:ac:09:f1:42:3e:8b:5a:b8:
                    62:b1:a4:37:0b:01:b9:87:88:bb:16:ae:a9:59:41:
                    d7:cf:9c:9d:55:b4:d4:35:7f:fd:52:ad:da:e8:ad:
                    c6:72:1b:e7:d2:1a:64:af:2b:43:8d:8c:02:9c:dc:
                    2c:2c:29:38:9b:1a:fd:1b:29:22:8f:d8:2a:3b:84:
                    47:40:95:14:7a:4e:16:c6:63:63:21:df:ad:e6:0c:
                    45:0b:ae:6a:07:ce:5f:8e:4b:bb:8f:46:af:fd:e4:
                    39:2c:83:8d:43:fa:ca:4d:bc:19:6d:f7:cf:64:23:
                    f6:2f:cc:da:d5:33:43:12:3b:92:04:28:19:d2:17:
                    45:1a:68:b9:d5:95:60:9a:84:ca:5f:8e:09:1e:a2:
                    92:94:45:4d:9b:37:0d:12:5d:87:9c:ed:d4:e1:27:
                    7e:c8:a5:3e:56:db:b5:b5:b1:d5:56:b1:8a:13:39:
                    84:97:37:c6:b8:51:07:34:3a:a3:42:79:c6:ab:20:
                    cf:b2:e2:55:bb:df:c5:68:f2:4d:d9:32:f2:5b:e2:
                    f9:b9:bd:94:8e:46:72:c5:77:95:e0:75:b4:31:ac:
                    e1:9d:bf:a1:b0:f6:10:68:ed:78:59:8c:8f:77:92:
                    54:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:99:D9:7A:17:2D:E3:B9:22:BD:EB:54:C9:C0:06:9D:9C:57:51:F6
            X509v3 Authority Key Identifier:
                keyid:74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3230312e36322e39362e302f31392d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.62.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         42:08:f7:fa:69:74:68:dd:c0:0d:09:b8:6c:83:9f:b0:19:23:
         ad:2f:19:75:d8:90:d7:9a:dc:ac:64:68:20:a2:5c:8f:4a:44:
         6f:21:02:85:e9:0d:fb:90:76:58:12:8b:99:98:aa:dc:e4:5c:
         0e:c4:d6:fc:9f:30:d1:f2:85:66:44:7e:ea:c6:85:65:d8:10:
         1c:44:a3:57:14:62:ae:f6:45:46:70:cf:33:05:61:ca:ad:06:
         0c:54:82:cc:22:d7:0e:36:76:83:09:bd:76:f3:7c:92:be:be:
         47:a2:46:1a:7e:92:37:5a:f8:41:4e:87:d3:dc:93:6e:1d:97:
         f3:69:47:f8:bf:a7:44:90:54:8e:1d:96:7a:6e:46:a8:91:e0:
         3e:d7:a9:b1:7f:52:d7:87:f9:4b:97:f3:86:80:5e:92:cc:59:
         02:0a:e9:56:65:07:e2:f6:b7:e5:54:64:0b:47:bb:30:0f:7d:
         46:df:0b:bc:3b:8e:9d:fc:bd:45:1a:90:7a:a4:c5:a2:87:98:
         04:d6:3b:fc:8a:02:a5:3a:33:8b:f5:d2:eb:32:d4:c2:92:70:
         4c:7c:ee:52:b9:8e:07:1d:d2:76:1b:76:22:c2:cf:a4:c0:00:
         6b:30:4b:64:7d:83:bc:6c:f0:24:b0:ec:71:6c:c1:17:75:fd:
         0a:ab:8c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:04 2024 by rpki-client on console-ams.rpki-client.org