Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3230312e39342e3136302e302f31392d3234203d3e203238353733.roa
File:                     3230312e39342e3136302e302f31392d3234203d3e203238353733.roa (raw, json)
Hash identifier:          YbT3V9LrfA0MzrxLry/CqQF1zOtYfvtVMaR5xitR+8U=
Subject key identifier:   FB:BE:9A:09:80:7B:DC:67:85:7E:05:BF:29:37:99:BD:AB:2F:0F:CA
Certificate issuer:       /CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
Certificate serial:       1C76F77863320A5ED2E5E1FA98A539164899F3C5
Authority key identifier: 74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3230312e39342e3136302e302f31392d3234203d3e203238353733.roa
Signing time:             Fri 16 Feb 2024 19:00:01 +0000
ROA not before:           Fri 16 Feb 2024 18:55:01 +0000
ROA not after:            Fri 14 Feb 2025 19:00:01 +0000
asID:                     28573
IP address blocks:        201.94.160.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:76:f7:78:63:32:0a:5e:d2:e5:e1:fa:98:a5:39:16:48:99:f3:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
        Validity
            Not Before: Feb 16 18:55:01 2024 GMT
            Not After : Feb 14 19:00:01 2025 GMT
        Subject: CN=3082010A0282010100C8AFE59A73FE01B8DB14F631D6240AEE9A3B9913055BDB5364B1C9071BDCEBB573B057A96D604CEF822A52D40EDA18D891B80E0B453E6518D69015D0AC744E869848F1704A5CD6994DFCF84ED2213236F1CD34A99E7006365DDFFE9851C337241964D1456ACAE581392644EB5300C8A25BEBC9464351917B484BAB94C9FF918AB4511A12403738ABA32B884E03F049F3491D61659C7B328DF19C72F2C96BC8C168E71EF5B0FCF3A1E01686F6F7B0CDB4CECA021DF20643A1A7F1EB32BF96392EC6CF15962F1D1DCD7583641DAA7BFBFB329588C5F77314AA8C51E6DC5FD3BA16F014DA02159E064853EE2266A72681FC013D213FB0783BC59444A9D23D1F08630203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:af:e5:9a:73:fe:01:b8:db:14:f6:31:d6:24:
                    0a:ee:9a:3b:99:13:05:5b:db:53:64:b1:c9:07:1b:
                    dc:eb:b5:73:b0:57:a9:6d:60:4c:ef:82:2a:52:d4:
                    0e:da:18:d8:91:b8:0e:0b:45:3e:65:18:d6:90:15:
                    d0:ac:74:4e:86:98:48:f1:70:4a:5c:d6:99:4d:fc:
                    f8:4e:d2:21:32:36:f1:cd:34:a9:9e:70:06:36:5d:
                    df:fe:98:51:c3:37:24:19:64:d1:45:6a:ca:e5:81:
                    39:26:44:eb:53:00:c8:a2:5b:eb:c9:46:43:51:91:
                    7b:48:4b:ab:94:c9:ff:91:8a:b4:51:1a:12:40:37:
                    38:ab:a3:2b:88:4e:03:f0:49:f3:49:1d:61:65:9c:
                    7b:32:8d:f1:9c:72:f2:c9:6b:c8:c1:68:e7:1e:f5:
                    b0:fc:f3:a1:e0:16:86:f6:f7:b0:cd:b4:ce:ca:02:
                    1d:f2:06:43:a1:a7:f1:eb:32:bf:96:39:2e:c6:cf:
                    15:96:2f:1d:1d:cd:75:83:64:1d:aa:7b:fb:fb:32:
                    95:88:c5:f7:73:14:aa:8c:51:e6:dc:5f:d3:ba:16:
                    f0:14:da:02:15:9e:06:48:53:ee:22:66:a7:26:81:
                    fc:01:3d:21:3f:b0:78:3b:c5:94:44:a9:d2:3d:1f:
                    08:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:BE:9A:09:80:7B:DC:67:85:7E:05:BF:29:37:99:BD:AB:2F:0F:CA
            X509v3 Authority Key Identifier:
                keyid:74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3230312e39342e3136302e302f31392d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.94.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         01:ad:32:57:22:0a:c5:1f:c3:56:f0:aa:b7:a7:a7:8e:4c:38:
         53:4a:52:36:ec:50:f4:ba:7c:85:72:d7:78:d6:9a:69:3b:42:
         11:03:64:99:58:f7:54:61:ad:09:85:ff:3d:cf:7b:d3:6f:8a:
         0e:3e:53:2a:1e:53:a9:07:cb:8e:a2:6e:14:15:9d:52:32:56:
         28:12:c9:41:81:c8:53:00:51:8b:57:e3:e5:b1:1f:01:73:86:
         ba:e6:1d:ce:15:c3:c9:1b:93:c4:2b:2b:cc:54:3e:9e:68:6c:
         c7:c0:88:9a:38:93:a4:ac:ca:20:44:8d:e7:01:da:54:0d:6a:
         f5:d2:57:dc:ed:89:6a:3d:d3:ca:db:32:a9:16:d2:f9:0d:66:
         a4:b6:6e:6b:95:1a:1d:a9:3e:fc:c0:2d:a3:ba:34:e3:4e:a9:
         1e:1b:07:fd:e2:6d:fa:59:c1:74:dc:11:ca:25:2a:ac:94:4d:
         18:bc:44:e6:ee:d4:fd:1d:37:01:20:d7:1b:72:20:04:17:cc:
         38:73:57:52:68:ba:d3:6b:0d:7d:7c:d4:78:4b:65:cc:9c:80:
         0c:1d:0c:f2:be:2c:9e:c0:73:1e:b0:65:63:5f:bf:63:8a:a0:
         05:67:8f:a5:71:5d:71:1f:89:1e:27:93:66:9d:c9:1a:44:9b:
         d3:a4:a6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:39:44 2025 by rpki-client