Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3230312e37342e302e302f31352d3234203d3e203238353733.roa
File:                     3230312e37342e302e302f31352d3234203d3e203238353733.roa (raw, json)
Hash identifier:          so9EkVOicpeTFw556WvG7eajQWdrcfPv4CN170HxQtI=
Subject key identifier:   B0:E9:21:31:C8:17:6E:34:E2:F0:85:8B:53:EE:50:7C:54:5A:AF:20
Certificate issuer:       /CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
Certificate serial:       445D67FBB8FB8446C7B860C43F9E725EEE0D1404
Authority key identifier: 74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3230312e37342e302e302f31352d3234203d3e203238353733.roa
Signing time:             Fri 16 Feb 2024 19:00:02 +0000
ROA not before:           Fri 16 Feb 2024 18:55:02 +0000
ROA not after:            Fri 14 Feb 2025 19:00:02 +0000
asID:                     28573
IP address blocks:        201.74.0.0/15 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:5d:67:fb:b8:fb:84:46:c7:b8:60:c4:3f:9e:72:5e:ee:0d:14:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
        Validity
            Not Before: Feb 16 18:55:02 2024 GMT
            Not After : Feb 14 19:00:02 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:67:a3:e9:5b:dc:d6:9f:41:a3:22:6e:65:34:
                    d6:db:4f:6b:ba:e4:07:9b:d8:2e:a0:7e:a8:b4:29:
                    11:3f:dd:4f:48:97:fb:73:37:07:91:33:d1:1e:b7:
                    27:97:3e:66:28:aa:77:44:cf:d5:06:cf:9e:ac:ee:
                    3d:20:8f:6e:e0:b6:d5:0b:93:16:aa:87:08:bb:01:
                    f3:a1:81:1e:b2:98:05:e7:66:be:f1:3a:f6:0e:52:
                    a1:19:c5:c0:07:02:1b:d2:de:ec:b9:45:60:46:2c:
                    9a:ce:ce:11:fb:29:86:dc:46:06:d2:6e:dc:62:de:
                    61:1b:fa:ce:9f:1c:c6:81:1f:e7:80:10:a7:d5:6d:
                    1c:55:0a:90:90:18:06:63:b7:eb:20:52:82:79:b8:
                    57:b5:a3:e5:7c:c3:13:0f:c7:14:fb:e8:dd:6e:67:
                    ee:a9:11:32:eb:c4:2c:30:12:3c:f2:0a:62:2d:1d:
                    5a:21:15:bc:67:b3:a3:a6:32:31:6e:49:4e:ac:79:
                    70:c3:31:2f:8a:02:8d:7e:6e:15:8f:2e:b2:b7:28:
                    10:aa:f5:ee:dc:49:87:37:5a:d7:d8:cf:fc:53:08:
                    f1:4d:1c:88:bb:20:7a:59:3a:a1:cf:5b:ac:ab:8d:
                    75:f8:e6:ec:3f:25:9d:ff:ba:93:1b:d5:ee:44:91:
                    aa:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:E9:21:31:C8:17:6E:34:E2:F0:85:8B:53:EE:50:7C:54:5A:AF:20
            X509v3 Authority Key Identifier:
                keyid:74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3230312e37342e302e302f31352d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.74.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         2e:06:bd:9a:73:f1:fe:9b:0b:48:61:88:57:a7:9f:cc:af:49:
         39:7d:e7:14:50:62:04:75:84:6e:35:f8:8a:09:fe:0c:f0:2b:
         95:e5:79:2b:8b:e3:4c:4a:41:a9:1b:2d:81:b0:bb:f0:71:f0:
         2c:46:4f:d4:2f:c1:39:d9:ff:34:a6:fe:3b:6f:0d:b9:68:1c:
         28:8c:5e:a8:d7:a9:4c:30:05:d6:c5:8b:ad:cf:e4:03:87:b3:
         47:b6:89:52:29:3f:4b:d0:0b:19:fb:9f:45:f1:41:40:70:cd:
         f5:6c:aa:e7:1f:78:f4:21:5f:a0:fe:96:9f:e6:df:41:aa:42:
         6b:2c:5d:17:b0:92:3c:68:0d:b8:bd:c8:13:f2:18:39:e7:e0:
         b5:b5:79:9a:0a:d5:5a:4b:86:2e:57:9a:eb:6e:12:1d:90:00:
         fe:a6:a3:4f:38:ee:a2:5f:63:46:e3:23:fd:71:cf:43:3f:11:
         ca:24:66:be:ec:bf:1c:3e:7d:fe:93:92:1e:91:11:b1:cc:2b:
         0b:98:c6:2e:a1:93:90:39:9f:64:3c:14:10:02:e4:d4:b7:6f:
         10:de:19:7a:87:ed:6c:aa:96:75:c2:d1:db:75:4d:fe:2c:25:
         cd:a7:e0:88:09:e8:18:d9:38:9e:2c:96:8f:f0:c4:a8:d3:27:
         2c:7f:3d:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org