Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3138392e3132362e31362e302f32302d3234203d3e203238353733.roa
File:                     3138392e3132362e31362e302f32302d3234203d3e203238353733.roa (raw, json)
Hash identifier:          gHyclqPdnYAEe+cLzjWbF32LSEVlkipP3ltbxWoBdBY=
Subject key identifier:   A3:46:47:B0:B4:76:39:BD:27:01:2E:7D:85:37:B8:90:FE:47:3A:6B
Certificate issuer:       /CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
Certificate serial:       1C8439F393771641F97F05DBFB86585BE486B244
Authority key identifier: 74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3138392e3132362e31362e302f32302d3234203d3e203238353733.roa
Signing time:             Fri 16 Feb 2024 19:00:00 +0000
ROA not before:           Fri 16 Feb 2024 18:55:00 +0000
ROA not after:            Fri 14 Feb 2025 19:00:00 +0000
asID:                     28573
IP address blocks:        189.126.16.0/20 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:84:39:f3:93:77:16:41:f9:7f:05:db:fb:86:58:5b:e4:86:b2:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D
        Validity
            Not Before: Feb 16 18:55:00 2024 GMT
            Not After : Feb 14 19:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c4:c5:09:9c:57:d7:83:3e:cf:1e:70:4b:7d:
                    4e:93:77:e1:19:11:59:04:77:cd:61:c8:aa:d4:53:
                    f0:35:8e:95:22:98:f8:e1:87:31:20:58:a2:1b:68:
                    fb:77:dd:48:1b:52:b5:58:96:55:4d:d7:4d:70:74:
                    37:91:83:fd:3c:78:44:ca:0d:cd:79:39:aa:62:67:
                    4d:61:da:0a:e8:24:bf:76:98:6e:12:0f:70:83:e3:
                    f8:f1:15:e9:81:98:92:25:2b:c2:66:0e:70:8e:8f:
                    32:b1:3c:99:5d:57:ea:e9:70:11:cf:ab:7a:b1:ef:
                    92:4c:a3:13:e3:57:7e:27:f7:d1:0b:6b:8e:4b:4d:
                    8e:79:82:c3:12:14:ee:f0:4c:32:04:12:95:b4:6d:
                    1c:89:4c:8a:cf:4b:74:16:2f:fb:ea:15:0c:ee:1c:
                    92:2d:d3:1c:4d:b1:5b:92:0c:fc:62:3f:9d:a4:f8:
                    d2:a6:c4:6b:87:bc:4f:9d:41:44:33:83:3e:f3:a9:
                    cc:4a:bc:17:ee:a5:cc:44:b6:92:c6:0a:8c:44:65:
                    2b:57:da:36:64:db:f6:e8:87:e4:52:47:b4:56:73:
                    37:84:5a:bd:85:f7:17:aa:b2:0d:f5:c4:5e:2d:cb:
                    88:56:8d:76:24:d0:ab:4a:f0:76:39:a2:23:0d:51:
                    d4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:46:47:B0:B4:76:39:BD:27:01:2E:7D:85:37:B8:90:FE:47:3A:6B
            X509v3 Authority Key Identifier:
                keyid:74:E3:B0:D2:C3:F0:A5:E6:BA:77:A8:71:0E:E9:B9:BC:BD:56:9E:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74E3B0D2C3F0A5E6BA77A8710EE9B9BCBD569E9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/0/3138392e3132362e31362e302f32302d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.126.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         94:76:5b:ff:08:e3:cf:15:11:0b:41:36:0a:34:fe:d3:b4:17:
         79:4d:bf:9c:36:ec:8f:df:15:5a:3d:42:62:94:96:8f:80:d1:
         6d:39:9b:7c:ba:7a:46:7b:1b:c1:c4:be:a6:29:43:a1:a8:60:
         89:fc:de:d9:05:18:2f:7e:d7:fd:d1:b2:61:40:69:7f:6b:3a:
         67:6b:31:6c:c0:bc:79:9e:0d:27:c5:53:ea:6c:11:ca:9f:62:
         9d:19:2f:92:46:eb:aa:88:3b:69:83:e8:2d:e7:07:eb:cb:e5:
         b1:e3:b4:d8:43:ea:15:a1:cc:57:b5:6a:9b:3e:c4:a9:6d:99:
         f1:9a:30:1f:1e:f0:f1:98:6a:c1:f4:e6:0f:47:78:11:90:3d:
         80:54:81:e9:67:d6:f7:54:a3:38:41:b9:ab:0c:71:e1:73:21:
         9d:c0:a1:fa:40:09:24:f4:ea:b2:b4:a7:20:c9:67:d7:58:ec:
         3b:d6:de:7d:7d:70:33:de:d5:e1:b7:bc:8c:fd:87:cf:b7:2c:
         0e:f1:06:60:bd:aa:85:c8:fd:b8:3d:94:13:c4:74:ac:79:f2:
         d7:78:36:ae:5e:44:cc:bc:f6:64:20:e8:43:6a:42:1e:73:5e:
         e7:3e:48:ac:40:b4:0e:1d:68:fd:8e:91:86:68:d5:c9:ad:1b:
         04:62:b3:83
-----BEGIN CERTIFICATE-----
MIIHQTCCBimgAwIBAgIUHIQ585N3FkH5fwXb+4ZYW+SGskQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzRFM0IwRDJDM0YwQTVFNkJBNzdBODcxMEVFOUI5QkNC
RDU2OUU5RDAeFw0yNDAyMTYxODU1MDBaFw0yNTAyMTQxOTAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzhDNEM1MDk5QzU3RDc4MzNF
Q0YxRTcwNEI3RDRFOTM3N0UxMTkxMTU5MDQ3N0NENjFDOEFBRDQ1M0YwMzU4RTk1
MjI5OEY4RTE4NzMxMjA1OEEyMUI2OEZCNzdERDQ4MUI1MkI1NTg5NjU1NERENzRE
NzA3NDM3OTE4M0ZEM0M3ODQ0Q0EwRENENzkzOUFBNjI2NzRENjFEQTBBRTgyNEJG
NzY5ODZFMTIwRjcwODNFM0Y4RjExNUU5ODE5ODkyMjUyQkMyNjYwRTcwOEU4RjMy
QjEzQzk5NUQ1N0VBRTk3MDExQ0ZBQjdBQjFFRjkyNENBMzEzRTM1NzdFMjdGN0Qx
MEI2QjhFNEI0RDhFNzk4MkMzMTIxNEVFRjA0QzMyMDQxMjk1QjQ2RDFDODk0QzhB
Q0Y0Qjc0MTYyRkZCRUExNTBDRUUxQzkyMkREMzFDNERCMTVCOTIwQ0ZDNjIzRjlE
QTRGOEQyQTZDNDZCODdCQzRGOUQ0MTQ0MzM4MzNFRjNBOUNDNEFCQzE3RUVBNUND
NDRCNjkyQzYwQThDNDQ2NTJCNTdEQTM2NjREQkY2RTg4N0U0NTI0N0I0NTY3MzM3
ODQ1QUJEODVGNzE3QUFCMjBERjVDNDVFMkRDQjg4NTY4RDc2MjREMEFCNEFGMDc2
MzlBMjIzMEQ1MUQ0MTcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyMTFCZxX14M+zx5wS31Ok3fhGRFZBHfNYciq1FPwNY6VIpj44Ycx
IFiiG2j7d91IG1K1WJZVTddNcHQ3kYP9PHhEyg3NeTmqYmdNYdoK6CS/dphuEg9w
g+P48RXpgZiSJSvCZg5wjo8ysTyZXVfq6XARz6t6se+STKMT41d+J/fRC2uOS02O
eYLDEhTu8EwyBBKVtG0ciUyKz0t0Fi/76hUM7hySLdMcTbFbkgz8Yj+dpPjSpsRr
h7xPnUFEM4M+86nMSrwX7qXMRLaSxgqMRGUrV9o2ZNv26IfkUke0VnM3hFq9hfcX
qrIN9cReLcuIVo12JNCrSvB2OaIjDVHUFwIDAQABo4ICTzCCAkswHQYDVR0OBBYE
FKNGR7C0djm9JwEufYU3uJD+RzprMB8GA1UdIwQYMBaAFHTjsNLD8KXmuneocQ7p
uby9Vp6dMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZRQXF5WXlHTFd4eFJi
SDVLY3BoejUxNzlkd2NCcThoWU5jMVFzaWFrTUwyLzAvNzRFM0IwRDJDM0YwQTVF
NkJBNzdBODcxMEVFOUI5QkNCRDU2OUU5RC5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC83NEUzQjBEMkMzRjBBNUU2QkE3N0E4NzEwRUU5QjlCQ0JENTY5
RTlELmNlcjCBrAYIKwYBBQUHAQsEgZ8wgZwwgZkGCCsGAQUFBzALhoGMcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GUUFxeVl5R0xXeHhSYkg1S2Nw
aHo1MTc5ZHdjQnE4aFlOYzFRc2lha01MMi8wLzMxMzgzOTJlMzEzMjM2MmUzMTM2
MmUzMDJmMzIzMDJkMzIzNDIwM2QzZTIwMzIzODM1MzczMy5yb2EwGAYDVR0gAQH/
BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEBL1+
EDANBgkqhkiG9w0BAQsFAAOCAQEAlHZb/wjjzxURC0E2CjT+07QXeU2/nDbsj98V
Wj1CYpSWj4DRbTmbfLp6RnsbwcS+pilDoahgifze2QUYL37X/dGyYUBpf2s6Z2sx
bMC8eZ4NJ8VT6mwRyp9inRkvkkbrqog7aYPoLecH68vlseO02EPqFaHMV7Vqmz7E
qW2Z8ZowHx7w8ZhqwfTmD0d4EZA9gFSB6WfW91SjOEG5qwxx4XMhncCh+kAJJPTq
srSnIMln11jsO9befX1wM97V4be8jP2Hz7csDvEGYL2qhcj9uD2UE8R0rHny13g2
rl5EzLz2ZCDoQ2pCHnNe5z5IrEC0Dh1o/Y6RhmjVya0bBGKzgw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:23 2024 by rpki-client on console.sobornost.net