Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3230312e38302e302e302f31342d3234203d3e203238353733.roa
File:                     3230312e38302e302e302f31342d3234203d3e203238353733.roa (raw, json)
Hash identifier:          H8G56GvNdVi5y+hSg4bIcI2JQqAVJlCQ0zue3a3W70g=
Subject key identifier:   21:C3:92:0F:B6:7B:57:F3:3A:FC:ED:57:01:BD:76:44:5A:21:22:50
Certificate issuer:       /CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
Certificate serial:       0F6E0FD49099F7C9909AE27ADF311AD9D114970E
Authority key identifier: 74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3230312e38302e302e302f31342d3234203d3e203238353733.roa
Signing time:             Fri 16 Feb 2024 19:00:00 +0000
ROA not before:           Fri 16 Feb 2024 18:55:00 +0000
ROA not after:            Fri 14 Feb 2025 19:00:00 +0000
asID:                     28573
IP address blocks:        201.80.0.0/14 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:6e:0f:d4:90:99:f7:c9:90:9a:e2:7a:df:31:1a:d9:d1:14:97:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
        Validity
            Not Before: Feb 16 18:55:00 2024 GMT
            Not After : Feb 14 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ca:e6:d8:d6:10:32:b7:97:fe:49:fa:a6:3f:
                    e7:38:03:4f:dd:6f:49:62:31:a5:21:32:dc:ce:6f:
                    48:25:f9:b9:e2:4a:bd:e1:1f:3e:b8:4a:ac:5c:47:
                    77:66:f5:f0:02:45:29:72:bc:43:1e:b8:3a:2e:7e:
                    3d:1e:83:a1:f5:4f:db:b5:d5:cb:f2:1a:31:dd:22:
                    08:13:50:49:d2:ba:e6:67:60:ab:60:05:45:1d:d9:
                    e9:33:ce:55:75:5c:ac:df:53:17:74:ca:ca:6e:cc:
                    13:09:37:53:8f:be:b2:37:16:1b:39:29:c1:b8:91:
                    57:3c:1c:4a:08:ad:bf:0d:4d:69:41:f1:73:8d:5b:
                    e1:b1:ed:eb:d6:74:3b:55:68:56:34:81:1c:9d:46:
                    56:7b:2a:e3:fa:69:33:13:51:55:ca:f5:72:24:d0:
                    8c:f5:66:64:73:97:ff:fe:a6:0f:fb:27:0a:35:ff:
                    a5:e9:c4:1a:b0:d8:4a:6e:f1:cd:89:87:d4:ea:ec:
                    30:09:dd:12:10:0e:75:25:60:43:b8:8a:c5:b9:7d:
                    f9:7b:8b:5e:f0:89:62:7a:66:1a:ac:24:6e:a4:6e:
                    48:48:01:05:b1:4a:d5:e9:4d:6c:51:16:23:4b:0a:
                    6c:a1:36:d7:92:a5:f9:f7:d7:ca:e5:c0:05:05:3c:
                    82:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:C3:92:0F:B6:7B:57:F3:3A:FC:ED:57:01:BD:76:44:5A:21:22:50
            X509v3 Authority Key Identifier:
                keyid:74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3230312e38302e302e302f31342d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.80.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         88:fb:62:a9:f4:af:17:97:35:4a:e2:d6:fa:ab:fe:1d:4e:05:
         03:71:f2:34:71:51:35:93:d4:b6:20:44:fc:89:61:86:7c:d8:
         bb:f4:07:9b:18:9c:7a:58:f1:8e:49:df:eb:23:6a:30:9d:80:
         62:30:0d:05:38:47:be:24:8a:ed:f3:33:e7:91:0a:c2:74:01:
         dc:e4:c3:80:a9:c3:10:10:eb:93:15:78:d0:46:5b:2d:bf:da:
         dd:a4:bf:2d:ea:c5:04:cb:2e:a9:35:39:df:91:52:f3:00:a9:
         ad:5e:49:c6:82:3d:25:d5:00:b0:69:d8:cd:d0:0d:90:a7:a8:
         7e:60:bc:58:3c:56:4f:62:69:cd:d3:0f:28:70:a6:aa:50:ef:
         61:28:19:90:d1:f9:52:75:eb:de:f8:bd:e5:a1:38:82:fc:63:
         55:4b:f3:93:02:a0:ea:92:92:99:ed:4b:af:a2:c8:10:b3:ea:
         2b:01:0b:a3:98:89:80:97:e5:a8:fc:76:b4:0b:67:48:7e:a0:
         67:f2:27:8e:b9:83:e8:ff:54:5b:88:ea:78:b7:71:27:49:2c:
         6a:49:1a:1c:3f:d3:84:f0:c5:35:51:7b:ac:8a:24:d5:ae:eb:
         ad:73:3f:69:f4:ef:5e:ed:48:b4:85:d8:9c:97:35:f5:16:30:
         e1:da:60:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:04 2024 by rpki-client on console-ams.rpki-client.org