Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3230312e37362e31362e302f32302d3234203d3e203238353733.roa
File:                     3230312e37362e31362e302f32302d3234203d3e203238353733.roa (raw, json)
Hash identifier:          XxCYuV3zb2bHrd2H4t1ZrEEolOLQ0IOqVLJY2qnhELo=
Subject key identifier:   1D:4D:38:DB:42:A4:D5:AC:6F:84:35:CA:A9:75:93:D8:1D:3A:1E:65
Certificate issuer:       /CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
Certificate serial:       6204D355EDD58BC5229F75CD0B0D405B1AA0ABC5
Authority key identifier: 74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3230312e37362e31362e302f32302d3234203d3e203238353733.roa
Signing time:             Fri 16 Feb 2024 19:00:03 +0000
ROA not before:           Fri 16 Feb 2024 18:55:03 +0000
ROA not after:            Fri 14 Feb 2025 19:00:03 +0000
asID:                     28573
IP address blocks:        201.76.16.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:04:d3:55:ed:d5:8b:c5:22:9f:75:cd:0b:0d:40:5b:1a:a0:ab:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
        Validity
            Not Before: Feb 16 18:55:03 2024 GMT
            Not After : Feb 14 19:00:03 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:3e:ea:b1:4f:7b:f9:64:fb:66:5e:4a:c1:03:
                    35:75:90:d6:90:33:e5:e5:aa:e8:bf:c7:b8:46:bf:
                    41:3d:b1:ae:98:dc:ec:7f:f6:49:36:dc:6a:01:86:
                    f3:0d:07:cb:ec:a4:5d:0f:01:bd:9f:2e:e7:75:b1:
                    0b:35:9c:b5:39:27:93:1d:62:71:61:69:49:c3:28:
                    08:33:14:36:81:61:00:06:2b:97:93:5b:db:02:84:
                    22:16:88:31:5b:7d:f3:ba:1e:55:fa:21:fd:0e:4b:
                    40:7a:68:ca:f5:31:cd:68:5b:ba:6f:2b:eb:fa:60:
                    ff:c3:08:42:36:98:bd:49:b0:c4:37:8f:ee:79:2c:
                    da:85:43:a3:27:00:a8:be:e7:bc:e9:fd:f4:72:62:
                    ba:ce:83:9e:64:89:c0:24:a4:03:ce:b7:42:44:89:
                    3f:8b:94:b3:7c:d0:27:ce:f5:a3:97:c6:5a:21:f4:
                    ad:a3:1d:c6:e1:1a:08:b9:b4:0e:20:79:4b:80:a4:
                    78:6e:19:d3:e7:d0:92:dc:f6:99:66:60:f0:1b:4c:
                    9a:6f:d2:41:92:19:29:08:36:cd:1f:3a:e8:f3:04:
                    73:50:82:f5:87:05:60:e9:7e:28:1d:af:1c:14:2c:
                    80:51:a8:9b:4e:1e:4e:a3:5f:32:6f:34:e2:45:b1:
                    09:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:4D:38:DB:42:A4:D5:AC:6F:84:35:CA:A9:75:93:D8:1D:3A:1E:65
            X509v3 Authority Key Identifier:
                keyid:74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3230312e37362e31362e302f32302d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.76.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7a:59:e0:48:46:90:e4:e1:c5:bf:56:e1:0e:ba:c2:63:f2:3a:
         1c:79:52:94:6b:eb:09:30:17:fc:7f:4a:4b:62:13:7c:ae:54:
         9c:fa:e9:d1:8e:2d:a5:af:e3:0f:5f:6b:2f:8c:ab:ff:52:f8:
         fc:f1:72:6f:68:e5:d9:63:fa:04:8f:2e:c9:09:86:3b:f7:31:
         37:39:aa:c8:78:72:a2:bf:62:09:c3:70:8c:66:e8:1d:30:87:
         ed:df:64:a1:3d:52:e9:b3:b7:d5:65:b7:7d:ba:29:fc:ca:6b:
         37:3b:5e:6e:fe:0a:cc:98:1f:d6:80:8c:55:ce:55:e3:54:5f:
         3f:c2:8d:7b:b0:e1:ab:9c:eb:dd:72:52:70:18:30:a1:38:b0:
         01:e9:26:a4:21:54:4c:c9:36:8e:2d:e3:6e:97:32:e5:f0:f1:
         cf:2c:05:70:66:0b:fb:11:81:96:2e:40:59:08:2a:ae:35:6b:
         63:b0:7a:da:05:36:0c:a3:d5:e1:44:55:30:b1:cd:a4:e6:d3:
         36:00:01:43:ac:c2:54:05:9f:49:63:82:f2:21:df:20:ee:2b:
         c0:9f:e5:9f:23:fd:1a:f1:5b:2b:e0:5d:f3:84:48:4f:e0:ea:
         21:47:04:81:27:52:cd:a7:b7:8f:17:79:53:ed:af:8a:4b:16:
         68:4a:48:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org