Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3137372e36342e302e302f31352d3234203d3e203238353733.roa
File:                     3137372e36342e302e302f31352d3234203d3e203238353733.roa (raw, json)
Hash identifier:          EVgFOQptyDFZX/Jlm6fcHzML5u14f5EbZ4OL/gpSa+w=
Subject key identifier:   AF:46:5F:5F:D5:33:DC:B8:8A:95:44:EB:BA:CF:04:DF:DD:53:86:58
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       63C74ED4EA1DE1CE10F13961E66DEBC0319BEC82
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3137372e36342e302e302f31352d3234203d3e203238353733.roa
Signing time:             Wed 05 Mar 2025 19:00:13 +0000
ROA not before:           Wed 05 Mar 2025 18:55:13 +0000
ROA not after:            Wed 04 Mar 2026 19:00:13 +0000
asID:                     28573
IP address blocks:        177.64.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:c7:4e:d4:ea:1d:e1:ce:10:f1:39:61:e6:6d:eb:c0:31:9b:ec:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Mar  5 18:55:13 2025 GMT
            Not After : Mar  4 19:00:13 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a2:9b:a2:35:ee:47:fc:f3:69:9c:64:41:d0:
                    2a:7a:6e:30:c4:03:ee:25:a4:bc:17:24:ee:14:35:
                    77:4b:c9:ac:8c:f0:b6:d5:b0:9e:89:d8:2a:a8:d1:
                    e0:dc:8e:7c:23:d6:da:e6:e2:3d:dd:cd:87:2a:1c:
                    45:2c:57:ec:b2:0f:2d:e2:64:61:9d:9e:15:c3:4b:
                    f0:98:bc:1a:5b:30:a4:f9:be:e4:20:4c:52:df:61:
                    f9:cc:b7:22:d3:40:f3:e5:ad:06:e7:49:7e:3c:c8:
                    14:96:81:43:30:88:b3:8e:e9:47:24:e1:fc:0a:53:
                    34:bc:8e:f6:76:f7:5a:cc:87:3b:a7:7b:03:38:8a:
                    fb:ac:81:f9:43:a2:bd:46:eb:1b:e8:b4:40:8b:27:
                    ec:3b:05:d8:4c:30:aa:fe:8c:7b:11:b0:d3:ea:58:
                    c0:8c:b0:2b:40:71:83:c8:1a:a8:d2:6f:89:9e:62:
                    85:8f:33:b0:ec:05:c2:e6:1b:30:5b:31:68:01:d3:
                    e8:05:76:a0:9d:25:6f:12:c6:34:36:b0:a6:8a:b9:
                    56:71:9e:f2:d4:9b:1d:5e:5d:97:52:40:e4:a4:f0:
                    32:9a:50:76:c2:45:57:21:bb:5a:71:76:b0:7d:09:
                    3a:c8:ff:23:d2:37:7d:0e:40:ef:0b:f4:c9:2e:c8:
                    64:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:46:5F:5F:D5:33:DC:B8:8A:95:44:EB:BA:CF:04:DF:DD:53:86:58
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3137372e36342e302e302f31352d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.64.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         1f:65:f9:02:fb:dc:3f:bc:30:91:ed:0a:cc:6a:bc:f2:f2:bb:
         7d:2e:fa:2b:3e:9f:9e:d5:28:29:1a:8d:26:79:09:9c:27:0e:
         cd:4f:e0:7c:08:f0:0a:04:1e:d0:fb:b3:9b:e6:16:e5:8b:4d:
         a4:51:e8:c1:4c:e1:71:ae:13:ed:35:dc:e1:e1:83:d5:6e:2b:
         e5:2a:d3:43:54:99:09:c1:24:a5:bb:89:87:ba:46:80:36:0c:
         2a:d9:a4:a9:cb:9e:b0:77:00:78:84:d3:97:89:f8:d4:c2:2e:
         58:f8:33:0f:0b:e9:07:72:eb:79:3e:26:03:b8:c2:05:d7:20:
         98:ed:36:c6:1f:57:27:c4:0c:8a:46:68:b3:3b:64:da:c6:3a:
         72:52:11:dc:65:2a:eb:a6:2b:59:c9:05:34:12:05:46:4a:f1:
         31:0d:92:2b:68:8a:71:e7:86:bb:13:ad:a5:18:3b:bb:29:14:
         37:fc:f8:0f:a7:74:10:00:43:2e:1d:9d:9c:13:ca:d0:d1:b2:
         cf:b9:d8:eb:73:0a:2d:d3:8d:90:45:94:8d:0f:06:0d:ed:13:
         ea:93:05:c9:8d:5d:43:55:4e:32:ca:c1:59:db:29:7f:22:b2:
         6d:d0:73:88:93:53:21:64:d7:23:aa:52:f7:ec:b4:53:06:1e:
         5a:12:01:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:28:20 2025 by rpki-client