Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/323830343a3134633a3a2f33312d3634203d3e203238353733.roa
File:                     323830343a3134633a3a2f33312d3634203d3e203238353733.roa (raw, json)
Hash identifier:          zT5hryjCHPoIxwolI/6239Hk4hxVxiRKUVmHvnshiYg=
Subject key identifier:   C0:98:75:95:03:B4:A1:FB:05:64:22:3B:A0:D1:6B:36:EC:CD:8A:5F
Certificate issuer:       /CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
Certificate serial:       02E75D52A2BC2858D6579D3B9455B5CE5D4A6764
Authority key identifier: 74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/323830343a3134633a3a2f33312d3634203d3e203238353733.roa
Signing time:             Tue 20 Feb 2024 19:00:02 +0000
ROA not before:           Tue 20 Feb 2024 18:55:02 +0000
ROA not after:            Tue 18 Feb 2025 19:00:02 +0000
asID:                     28573
IP address blocks:        2804:14c::/31 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:e7:5d:52:a2:bc:28:58:d6:57:9d:3b:94:55:b5:ce:5d:4a:67:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
        Validity
            Not Before: Feb 20 18:55:02 2024 GMT
            Not After : Feb 18 19:00:02 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:70:5f:0a:2f:05:61:b4:8f:dd:0e:0d:87:b3:
                    b9:e6:7e:b6:4c:42:23:ae:3e:a1:92:b3:79:ce:f3:
                    ed:6b:9f:1e:25:11:3a:46:6b:6e:18:a8:41:42:b4:
                    50:fd:f2:59:1b:42:db:29:58:aa:8b:1c:a9:5f:00:
                    68:a5:6f:24:3f:1a:ea:a5:08:e6:fb:32:e5:5b:8e:
                    a6:6e:da:43:8b:01:60:af:ab:93:2b:1d:0a:05:c0:
                    6c:74:94:1f:0f:ff:66:09:65:da:b5:9b:bf:5f:40:
                    de:24:29:f2:25:e4:4d:a7:42:2d:e3:d3:b1:5c:39:
                    02:0b:4c:a4:fc:aa:8c:12:f9:94:e1:ab:5f:b4:71:
                    08:73:4d:4e:be:8d:b8:2c:4d:a4:39:f0:37:c9:b4:
                    6d:41:e2:39:9d:5f:20:13:35:ed:c0:35:b8:85:ea:
                    14:45:33:13:b9:8d:3b:77:65:4e:06:3b:cb:8a:3b:
                    de:7c:68:3a:f7:fe:33:c9:52:e8:4b:e1:12:a8:28:
                    62:3c:99:d3:37:62:b6:40:34:9d:e4:3f:16:f8:1e:
                    db:06:99:5f:85:17:7a:ae:72:bc:ae:f9:82:6b:4c:
                    96:a6:77:8c:ac:e0:eb:64:c5:0e:f4:66:78:1c:da:
                    12:63:c8:28:75:4c:c7:7d:c4:f0:3b:ba:1a:f7:c5:
                    6e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:98:75:95:03:B4:A1:FB:05:64:22:3B:A0:D1:6B:36:EC:CD:8A:5F
            X509v3 Authority Key Identifier:
                keyid:74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/323830343a3134633a3a2f33312d3634203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14c::/31

    Signature Algorithm: sha256WithRSAEncryption
         a0:3b:14:1d:43:e5:53:65:94:79:29:8c:02:66:29:77:1a:c5:
         c8:e1:13:4e:a4:7d:66:4d:d9:a6:37:68:72:e3:6f:0f:92:53:
         ff:8a:c1:e2:e7:f4:f9:d9:5d:83:8f:2b:ba:56:c1:c5:21:6f:
         57:85:25:05:27:80:78:f8:af:58:1f:1a:f4:89:f5:ae:a8:1c:
         45:1b:80:c7:bb:2f:6a:6f:80:f3:ae:6e:68:b6:54:49:6b:36:
         2e:ec:49:ca:83:2b:cb:e3:4d:f8:0e:15:cb:b2:ed:96:40:20:
         fb:ef:8a:14:c7:5c:8f:12:6d:14:18:8b:14:c9:39:3d:22:e9:
         de:13:59:42:96:bf:63:47:a5:d2:86:c6:71:15:87:89:b6:47:
         19:4f:ad:ac:64:26:fc:9b:89:ea:73:b0:57:55:50:11:aa:a7:
         75:ca:15:8e:58:5d:89:05:76:46:2d:f7:d5:92:fa:31:28:0b:
         7b:c8:55:d3:a3:3b:50:a0:c8:cc:86:ee:35:97:3a:13:93:c9:
         1b:b2:a0:c9:b7:11:2e:fa:b6:c9:1f:d3:de:35:46:39:a1:23:
         00:af:21:ae:59:f3:1f:94:03:70:6d:6a:05:c5:da:c2:2a:65:
         4d:91:da:ee:a1:20:13:13:b1:ac:b0:f1:38:a8:93:d2:d9:36:
         1b:ef:37:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:46 2024 by rpki-client on console-fra.rpki-client.org