Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3137372e3138302e302e302f31342d3234203d3e203238353733.roa
File:                     3137372e3138302e302e302f31342d3234203d3e203238353733.roa (raw, json)
Hash identifier:          40855d9MDP/DUe+P70w60QbbkrPdvdnSoBYIn4MRkLY=
Subject key identifier:   1C:64:71:E1:10:79:4C:38:C7:E2:7A:D6:BA:A3:3D:4A:2F:1A:4C:0F
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       753D1453A815AFDB624B15E52E940DA4C9509A80
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3137372e3138302e302e302f31342d3234203d3e203238353733.roa
Signing time:             Wed 05 Mar 2025 19:00:10 +0000
ROA not before:           Wed 05 Mar 2025 18:55:10 +0000
ROA not after:            Wed 04 Mar 2026 19:00:10 +0000
asID:                     28573
IP address blocks:        177.180.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:3d:14:53:a8:15:af:db:62:4b:15:e5:2e:94:0d:a4:c9:50:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Mar  5 18:55:10 2025 GMT
            Not After : Mar  4 19:00:10 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7e:16:f6:cf:de:98:ff:b0:89:85:f2:6b:16:
                    91:80:b5:a0:6c:d8:31:80:68:55:b3:eb:2c:6d:20:
                    7a:49:4c:02:78:3d:31:a0:6b:41:73:3b:f3:99:aa:
                    65:0b:e2:dc:89:85:eb:a8:96:73:93:a2:90:9a:78:
                    87:c9:4a:f0:b1:ba:c3:a4:ac:b9:fc:15:35:75:de:
                    33:ab:22:4b:9e:ff:8a:29:f4:68:38:8e:08:21:32:
                    31:30:47:bb:c1:eb:ec:73:df:33:6a:fd:dc:83:0e:
                    a8:47:bc:a0:a7:93:43:da:b4:50:f5:ed:79:e3:5b:
                    14:df:36:b1:1c:74:fd:60:c7:f3:50:a4:62:f7:52:
                    8f:37:4c:77:f3:7a:aa:ac:61:2c:8d:3a:eb:44:d8:
                    62:3e:b3:80:11:df:0e:a7:bf:f8:62:c2:8b:ea:d6:
                    13:61:6f:2a:c1:98:f8:28:7c:43:fb:d5:a4:ac:1d:
                    2e:e4:6f:d8:6f:23:b5:30:48:23:fb:b6:ff:81:01:
                    c0:1f:82:be:63:b2:35:d8:c3:6e:38:0d:8e:69:ec:
                    a9:27:e5:74:a4:4f:e2:a6:c2:7f:f3:ff:8e:c9:4b:
                    13:f7:76:99:ac:a6:d5:1c:11:fe:bc:04:01:5e:d6:
                    23:cb:db:78:78:36:55:b7:15:76:8a:9e:6d:28:a4:
                    7d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:64:71:E1:10:79:4C:38:C7:E2:7A:D6:BA:A3:3D:4A:2F:1A:4C:0F
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3137372e3138302e302e302f31342d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.180.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         8c:07:a8:56:a7:b5:66:5d:11:5e:77:91:89:06:93:27:66:a4:
         33:55:8b:3f:c0:bb:bb:0e:e3:9e:97:67:ad:45:7c:ad:f8:2e:
         52:d3:78:2f:c1:8c:d1:35:ff:50:4a:30:21:1b:16:c8:99:eb:
         e9:5c:7e:0a:db:7e:3d:8b:28:52:83:e9:d7:8b:83:50:41:13:
         c9:80:91:cd:72:65:c7:0f:04:04:dc:91:7b:5f:ca:be:b5:9f:
         5b:8c:07:0e:23:b7:4c:bc:0c:5c:6f:d8:f9:e4:01:c0:65:10:
         a3:e3:3a:e5:1b:51:4d:4a:20:56:77:ef:6e:45:41:64:18:cf:
         dc:04:cb:90:8b:2b:04:4b:fa:16:c1:ad:b9:ce:eb:e5:aa:5b:
         68:16:bb:42:6f:63:0b:6f:03:fa:98:8c:2a:ad:53:1a:43:b8:
         9d:16:e1:8a:31:76:95:a0:bd:f7:41:0d:d1:8c:a5:4b:4a:a3:
         e3:07:22:dc:1a:53:c3:26:4c:8c:1d:74:46:f7:ce:4d:1a:d2:
         91:f8:f6:30:1e:44:53:f8:b3:6d:56:cc:7d:60:60:07:15:63:
         23:30:6f:ac:71:14:19:7d:20:d7:ab:e2:89:e6:f0:7b:eb:44:
         9d:9b:7b:db:fc:4d:49:02:37:73:a7:89:68:d7:f6:a6:9d:56:
         50:0c:30:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:31:14 2025 by rpki-client