Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3137392e3130352e302e302f31362d3234203d3e203238353733.roa
File:                     3137392e3130352e302e302f31362d3234203d3e203238353733.roa (raw, json)
Hash identifier:          OAzPyHMAI1Cl76h0BUHB9eTqwdmX6YDFr0cfAJTs5Es=
Subject key identifier:   DE:B1:62:97:BE:58:CE:14:61:79:09:D6:C5:FC:F7:74:36:47:60:16
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       10768255790C1C2FB517DCA2B558E6B699336CCF
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3137392e3130352e302e302f31362d3234203d3e203238353733.roa
Signing time:             Wed 05 Mar 2025 19:00:11 +0000
ROA not before:           Wed 05 Mar 2025 18:55:11 +0000
ROA not after:            Wed 04 Mar 2026 19:00:11 +0000
asID:                     28573
IP address blocks:        179.105.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:76:82:55:79:0c:1c:2f:b5:17:dc:a2:b5:58:e6:b6:99:33:6c:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Mar  5 18:55:11 2025 GMT
            Not After : Mar  4 19:00:11 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d0:8f:4e:fc:d1:4e:b8:d1:04:e9:e4:8a:61:
                    e7:69:a1:91:5f:f7:f8:f1:59:68:d7:20:b8:06:63:
                    d6:c3:17:79:4e:f4:0a:d7:d2:54:0e:20:1d:34:6d:
                    5f:ab:d7:c8:94:e8:67:f7:0f:56:39:9a:5e:81:93:
                    7b:e2:29:4f:aa:81:0e:cf:b6:a7:a0:e9:0c:5a:60:
                    d3:2d:de:16:d5:c9:88:40:4c:5d:1d:58:1c:fd:af:
                    c5:01:60:9e:2c:23:81:e9:0f:44:d6:54:a1:b7:0e:
                    ef:47:52:7a:33:34:a2:86:90:32:a9:79:78:ee:bc:
                    bb:6a:a6:c2:a6:d5:35:69:da:b4:30:a6:a6:a7:e7:
                    7a:b9:92:a4:10:7d:ea:27:1e:9d:28:2f:42:8c:d8:
                    90:c0:87:eb:fa:ae:1c:f1:24:cf:27:19:35:f5:5e:
                    8d:5c:11:d7:c8:6f:08:66:30:db:f6:3c:ed:96:41:
                    06:64:15:9a:3c:c1:be:7c:3a:be:eb:61:48:c7:12:
                    13:60:5d:20:14:75:30:1e:a6:62:29:b7:74:98:91:
                    66:46:d7:cc:05:fb:30:c9:47:b0:e3:24:09:20:4d:
                    ef:e4:74:11:29:2c:c0:37:9f:1e:f2:be:61:41:2f:
                    83:c3:ec:e2:b5:a0:a5:b1:34:80:2c:4b:ce:a6:ba:
                    b1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B1:62:97:BE:58:CE:14:61:79:09:D6:C5:FC:F7:74:36:47:60:16
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3137392e3130352e302e302f31362d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.105.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         14:29:2d:72:55:91:57:b8:da:10:5a:5e:02:4c:39:00:5b:c5:
         1e:87:92:cf:98:90:3b:c1:b3:96:a5:90:b2:a5:d5:7f:5e:1c:
         69:3a:bd:57:9d:df:c6:a1:0e:74:07:6d:f0:b1:c3:b6:6f:38:
         a2:b1:ec:08:44:0e:09:e0:ae:fc:b0:26:be:9c:f4:0e:e3:03:
         d6:aa:2e:30:4f:53:fc:fc:03:5b:92:08:aa:b1:2e:ca:d0:26:
         ee:77:f2:b0:0b:16:ea:97:2b:62:00:51:b4:5d:a8:0b:9d:37:
         57:75:b9:be:9d:8f:56:29:2b:49:86:95:1b:f3:15:09:dd:ad:
         8c:f5:56:b8:47:c3:28:cf:1f:e3:b1:77:ea:84:45:2e:44:4f:
         a8:ee:ff:6d:d1:3c:33:f6:3d:84:42:78:8f:13:33:aa:c1:db:
         2e:77:ae:f5:0d:88:a5:42:6f:7d:1b:1a:5a:7f:0e:66:66:92:
         4d:bb:4a:f4:c5:97:02:e9:69:9c:62:ad:c4:64:2c:a3:5d:d8:
         ac:ff:e6:5e:7e:7e:ab:dd:81:68:d7:84:85:70:5f:78:f9:ee:
         fd:17:e1:90:96:80:0c:5d:d1:ad:6c:e0:9d:05:c9:9c:6c:ee:
         9c:da:cc:76:80:5d:77:5c:f0:be:10:67:ed:56:ab:3c:32:39:
         87:6e:ae:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:32:29 2025 by rpki-client