Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3137372e3233352e302e302f31362d3234203d3e203238353733.roa
File:                     3137372e3233352e302e302f31362d3234203d3e203238353733.roa (raw, json)
Hash identifier:          aBr5MWomES0Wkg+Fjpm8DKfTnLW0Url4nftLd6XOdGQ=
Subject key identifier:   77:2A:06:71:8D:76:8C:E9:71:0B:35:A4:54:38:D1:E2:F8:39:1C:1D
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       5462C1ED9BC69BF319229A89C9C8E824C5404555
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3137372e3233352e302e302f31362d3234203d3e203238353733.roa
Signing time:             Wed 05 Mar 2025 19:00:11 +0000
ROA not before:           Wed 05 Mar 2025 18:55:11 +0000
ROA not after:            Wed 04 Mar 2026 19:00:11 +0000
asID:                     28573
IP address blocks:        177.235.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:62:c1:ed:9b:c6:9b:f3:19:22:9a:89:c9:c8:e8:24:c5:40:45:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Mar  5 18:55:11 2025 GMT
            Not After : Mar  4 19:00:11 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4e:81:dc:7b:b3:a1:c5:15:9c:29:32:e6:b8:
                    fc:6b:f4:b2:14:d4:fc:e4:56:49:23:48:2a:37:d7:
                    5e:24:77:1e:4f:ce:60:73:66:b4:58:0a:9f:1b:b1:
                    18:cd:72:72:6a:bc:8d:3d:21:e1:b4:60:ec:52:0d:
                    3b:b4:0e:ff:7d:3d:48:47:fe:be:da:31:3a:6e:60:
                    44:e3:f3:c4:ca:cb:c1:9d:f7:79:25:ba:99:d2:76:
                    56:79:07:a1:df:a7:31:0d:62:02:1d:59:d9:e2:2e:
                    2b:14:2a:37:d1:7f:4f:93:b2:73:6e:ba:d4:8d:36:
                    cd:75:97:5e:3c:73:82:7a:79:10:00:08:0b:72:98:
                    ea:6d:43:c3:d1:87:a0:6b:a7:3c:b0:26:29:d6:fb:
                    35:3e:c2:c2:8b:92:8d:e3:bd:51:c0:c2:f6:dd:92:
                    2c:ad:7d:1b:0f:88:82:96:a4:ca:d7:a9:07:de:24:
                    8a:51:7d:0d:a8:16:81:94:48:c3:a1:1b:57:40:c7:
                    42:f2:33:4a:22:0f:8f:05:1d:52:db:f4:a3:d5:ca:
                    ad:f0:39:01:dc:29:e4:8c:e9:3b:e5:0d:a6:60:92:
                    78:7f:f8:19:90:70:51:f0:e2:d4:a0:9d:7e:5d:37:
                    1d:12:1b:55:e6:d3:c7:13:55:f4:e3:26:7e:3a:97:
                    b7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:2A:06:71:8D:76:8C:E9:71:0B:35:A4:54:38:D1:E2:F8:39:1C:1D
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3137372e3233352e302e302f31362d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.235.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9c:a2:71:fd:e6:1e:93:7d:06:40:e1:a7:e3:f8:5b:c0:13:cb:
         ba:d9:da:59:97:7e:b6:02:a2:c0:e3:3c:52:8d:61:a9:e5:94:
         7f:18:26:a0:cc:21:b5:e3:b6:87:a9:e8:5d:ac:a5:47:49:7f:
         cc:15:40:36:fa:61:7d:61:9d:0f:f3:27:f2:72:12:52:9a:28:
         2c:cb:85:32:b9:91:d5:e0:3d:7b:a0:5c:bc:6f:cb:bf:d4:cb:
         8f:d5:f3:27:48:0c:2e:60:4c:d5:3d:b7:f4:69:d0:f2:a1:01:
         75:2a:ee:8a:cc:97:49:56:8c:b3:4c:d1:5f:8d:41:75:98:e2:
         d0:bb:71:71:7a:ce:67:7e:b1:92:c9:23:93:54:c5:ad:b0:37:
         6f:52:64:43:4e:e1:e7:c3:63:88:ae:79:78:fe:bf:9f:78:93:
         9d:ba:23:7f:f9:e0:2c:1f:f2:15:61:6e:95:81:62:c5:e0:06:
         62:c3:dd:13:56:86:aa:a7:01:fd:b0:7a:dd:63:63:b5:8a:c1:
         d1:0f:b0:b3:97:dd:98:5b:81:8f:29:77:5d:3c:83:36:07:0c:
         88:da:94:30:68:28:98:5f:9d:b1:30:10:93:12:cf:fc:07:1b:
         ef:68:8b:ad:ad:58:0f:1b:68:1a:15:e7:3d:34:2f:55:36:6e:
         4b:ae:b1:36
-----BEGIN CERTIFICATE-----
MIIHPjCCBiagAwIBAgIUVGLB7ZvGm/MZIpqJycjoJMVARVUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZBMDJCNkY4RjREQkJEOThBQzlBOUQwQzc3QjA1MjFE
NUE2QkQwQTAeFw0yNTAzMDUxODU1MTFaFw0yNjAzMDQxOTAwMTFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjA0RTgxREM3QkIzQTFDNTE1
OUMyOTMyRTZCOEZDNkJGNEIyMTRENEZDRTQ1NjQ5MjM0ODJBMzdENzVFMjQ3NzFF
NEZDRTYwNzM2NkI0NTgwQTlGMUJCMTE4Q0Q3MjcyNkFCQzhEM0QyMUUxQjQ2MEVD
NTIwRDNCQjQwRUZGN0QzRDQ4NDdGRUJFREEzMTNBNkU2MDQ0RTNGM0M0Q0FDQkMx
OURGNzc5MjVCQTk5RDI3NjU2NzkwN0ExREZBNzMxMEQ2MjAyMUQ1OUQ5RTIyRTJC
MTQyQTM3RDE3RjRGOTNCMjczNkVCQUQ0OEQzNkNENzU5NzVFM0M3MzgyN0E3OTEw
MDAwODBCNzI5OEVBNkQ0M0MzRDE4N0EwNkJBNzNDQjAyNjI5RDZGQjM1M0VDMkMy
OEI5MjhERTNCRDUxQzBDMkY2REQ5MjJDQUQ3RDFCMEY4ODgyOTZBNENBRDdBOTA3
REUyNDhBNTE3RDBEQTgxNjgxOTQ0OEMzQTExQjU3NDBDNzQyRjIzMzRBMjIwRjhG
MDUxRDUyREJGNEEzRDVDQUFERjAzOTAxREMyOUU0OENFOTNCRTUwREE2NjA5Mjc4
N0ZGODE5OTA3MDUxRjBFMkQ0QTA5RDdFNUQzNzFEMTIxQjU1RTZEM0M3MTM1NUY0
RTMyNjdFM0E5N0I3MjUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAsE6B3HuzocUVnCky5rj8a/SyFNT85FZJI0gqN9deJHceT85gc2a0
WAqfG7EYzXJyaryNPSHhtGDsUg07tA7/fT1IR/6+2jE6bmBE4/PEysvBnfd5JbqZ
0nZWeQeh36cxDWICHVnZ4i4rFCo30X9Pk7JzbrrUjTbNdZdePHOCenkQAAgLcpjq
bUPD0Yega6c8sCYp1vs1PsLCi5KN471RwML23ZIsrX0bD4iClqTK16kH3iSKUX0N
qBaBlEjDoRtXQMdC8jNKIg+PBR1S2/Sj1cqt8DkB3CnkjOk75Q2mYJJ4f/gZkHBR
8OLUoJ1+XTcdEhtV5tPHE1X04yZ+Ope3JQIDAQABo4ICTDCCAkgwHQYDVR0OBBYE
FHcqBnGNdozpcQs1pFQ40eL4ORwdMB8GA1UdIwQYMBaAFF+gK2+PTbvZismp0Md7
BSHVpr0KMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZRQXF5WXlHTFd4eFJi
SDVLY3BoejUxNzlkd2NCcThoWU5jMVFzaWFrTUwyLzEvNUZBMDJCNkY4RjREQkJE
OThBQzlBOUQwQzc3QjA1MjFENUE2QkQwQS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS81RkEwMkI2RjhGNERCQkQ5OEFDOUE5RDBDNzdCMDUyMUQ1QTZC
RDBBLmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GUUFxeVl5R0xXeHhSYkg1S2Nw
aHo1MTc5ZHdjQnE4aFlOYzFRc2lha01MMi8xLzMxMzczNzJlMzIzMzM1MmUzMDJl
MzAyZjMxMzYyZDMyMzQyMDNkM2UyMDMyMzgzNTM3MzMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwCx6zAN
BgkqhkiG9w0BAQsFAAOCAQEAnKJx/eYek30GQOGn4/hbwBPLutnaWZd+tgKiwOM8
Uo1hqeWUfxgmoMwhteO2h6noXaylR0l/zBVANvphfWGdD/Mn8nISUpooLMuFMrmR
1eA9e6BcvG/Lv9TLj9XzJ0gMLmBM1T239GnQ8qEBdSruisyXSVaMs0zRX41BdZji
0LtxcXrOZ36xkskjk1TFrbA3b1JkQ07h58NjiK55eP6/n3iTnbojf/ngLB/yFWFu
lYFixeAGYsPdE1aGqqcB/bB63WNjtYrB0Q+ws5fdmFuBjyl3XTyDNgcMiNqUMGgo
mF+dsTAQkxLP/Acb72iLra1YDxtoGhXnPTQvVTZuS66xNg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:25 2025 by rpki-client