Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/3230312e36322e38302e302f32302d3332203d3e203238363334.roa
File:                     3230312e36322e38302e302f32302d3332203d3e203238363334.roa (raw, json)
Hash identifier:          VwGDp5qPyJtagqlMoefg79n3taB0a1j2IIyezyfSxfc=
Subject key identifier:   4F:4C:C6:86:32:4F:D1:1D:A2:CF:A7:DA:24:CB:07:D3:59:A5:30:C4
Certificate issuer:       /CN=0D6FFD3C3204618EF3CCEB297FD1A42073CD712A
Certificate serial:       24218BD68DEF4AB2C90AB81F2D6D6229262FF63A
Authority key identifier: 0D:6F:FD:3C:32:04:61:8E:F3:CC:EB:29:7F:D1:A4:20:73:CD:71:2A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/3230312e36322e38302e302f32302d3332203d3e203238363334.roa
Signing time:             Thu 06 Mar 2025 08:18:51 +0000
ROA not before:           Thu 06 Mar 2025 08:13:51 +0000
ROA not after:            Thu 05 Mar 2026 08:18:51 +0000
asID:                     28634
IP address blocks:        201.62.80.0/20 maxlen: 32
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:21:8b:d6:8d:ef:4a:b2:c9:0a:b8:1f:2d:6d:62:29:26:2f:f6:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D6FFD3C3204618EF3CCEB297FD1A42073CD712A
        Validity
            Not Before: Mar  6 08:13:51 2025 GMT
            Not After : Mar  5 08:18:51 2026 GMT
        Subject: CN=4F4CC686324FD11DA2CFA7DA24CB07D359A530C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:f6:a3:79:8f:4f:69:f2:99:81:71:ee:de:ee:
                    38:6f:cb:3f:b6:7c:89:95:f4:2c:c5:3b:81:4b:4b:
                    7e:c8:2f:c3:c4:f8:92:e8:3f:7a:d2:cd:78:61:e9:
                    db:f6:07:8e:8b:d8:8b:7a:91:85:ff:50:7c:07:93:
                    74:cd:0e:8b:68:6a:f7:d1:ee:76:fd:f6:a1:fd:fe:
                    21:cb:3c:42:44:70:8d:b0:75:08:9b:69:6a:d6:04:
                    64:5a:2f:3e:78:5e:d9:3c:64:43:cb:96:b9:62:64:
                    34:20:c2:31:c7:39:db:ad:f5:63:27:be:d4:9c:f2:
                    fd:59:72:74:13:1b:f6:9c:79:ed:09:34:a0:86:1b:
                    78:fb:9e:95:e0:b8:64:cb:d6:b2:97:e6:e7:fd:5b:
                    e4:72:0a:dd:4c:d0:d9:50:99:6d:11:8c:54:b7:3f:
                    14:49:9d:3d:78:ce:ae:f5:6f:e7:7a:6e:b8:10:21:
                    f7:e4:8e:10:11:2b:c4:5b:53:5b:bb:2a:da:86:fa:
                    de:66:28:70:4e:23:03:27:3e:a2:22:b7:69:4d:47:
                    ef:8f:de:54:66:1e:f3:a2:91:92:43:ed:2e:6b:70:
                    38:8b:ea:52:eb:ed:2c:a3:2d:98:6c:17:33:c2:81:
                    4e:10:1f:b4:39:ff:37:ef:f1:17:1f:2e:b0:c1:2e:
                    56:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:4C:C6:86:32:4F:D1:1D:A2:CF:A7:DA:24:CB:07:D3:59:A5:30:C4
            X509v3 Authority Key Identifier:
                keyid:0D:6F:FD:3C:32:04:61:8E:F3:CC:EB:29:7F:D1:A4:20:73:CD:71:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0D6FFD3C3204618EF3CCEB297FD1A42073CD712A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FKQwVoADyEP5KN96fhziqNHAZRXTkDBpAY2WqcHhMZ5g/3/3230312e36322e38302e302f32302d3332203d3e203238363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.62.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         13:c1:db:72:0e:21:90:7b:72:61:0c:5b:37:eb:d2:9e:11:4c:
         35:4a:fd:7e:db:b6:1e:c7:fe:35:7c:4d:fd:50:68:56:8e:b4:
         9a:f5:ab:e5:9c:8f:38:02:4a:d1:c5:f2:da:01:b5:76:e8:e8:
         59:24:8f:6f:25:cc:99:65:be:59:f7:c5:50:04:c7:0c:94:f7:
         59:17:5d:a7:6c:a0:4e:6b:dd:c7:ce:cd:f0:50:c0:a0:6c:ab:
         4d:ef:92:83:99:55:d9:54:7b:2f:ad:5c:95:80:86:6b:1c:29:
         fe:68:11:6e:1b:dc:93:49:46:60:d1:2d:ac:8c:74:ec:69:cf:
         e6:6c:1e:44:a9:4c:8f:2a:4d:25:95:f5:71:0e:1d:6c:78:c5:
         55:b5:d9:b8:26:7f:5e:00:db:33:b9:95:5a:15:d3:94:32:45:
         63:e1:6e:5e:b8:4e:c9:42:db:1b:79:97:4f:28:4b:d8:12:4c:
         ed:4b:54:93:04:e9:71:1d:0c:8e:c3:d0:18:65:1b:f2:70:c4:
         77:a1:3f:02:cf:43:7d:b1:97:b9:2f:16:b1:a9:4d:4a:a6:78:
         cc:4e:83:54:d9:00:f8:95:50:6f:5b:d4:98:61:47:fb:64:df:
         b5:54:eb:da:b6:ce:f1:ee:a9:59:e1:8c:2c:f7:33:66:4a:07:
         8e:77:86:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 02:59:19 2025 by rpki-client