Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3137392e3230382e302e302f31322d3234203d3e203238353733.roa
File:                     3137392e3230382e302e302f31322d3234203d3e203238353733.roa (raw, json)
Hash identifier:          eFMLWJuxnfLzo6OBlwdxuXKh2Jc2Ka8DWt8JOwvk+vE=
Subject key identifier:   AF:76:41:53:80:AD:11:A2:DD:AC:1F:F3:DF:24:1D:C7:8B:24:3C:73
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       53040BFC56FD0DCB0FBCBCEC62D0B5BDBFCD9ED5
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3137392e3230382e302e302f31322d3234203d3e203238353733.roa
Signing time:             Wed 05 Mar 2025 19:00:13 +0000
ROA not before:           Wed 05 Mar 2025 18:55:13 +0000
ROA not after:            Wed 04 Mar 2026 19:00:13 +0000
asID:                     28573
IP address blocks:        179.208.0.0/12 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:04:0b:fc:56:fd:0d:cb:0f:bc:bc:ec:62:d0:b5:bd:bf:cd:9e:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Mar  5 18:55:13 2025 GMT
            Not After : Mar  4 19:00:13 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:84:8f:98:29:28:39:7f:f4:86:5e:08:27:42:
                    7e:5d:8a:ca:23:4f:25:a2:64:fb:04:a9:ee:d3:1f:
                    bb:8a:84:ec:a9:aa:bb:a0:f5:56:73:c9:33:15:94:
                    7e:3b:bf:d4:80:52:87:2d:57:bb:8e:1b:74:a2:af:
                    8e:de:76:1c:02:4e:ce:3d:37:9c:c9:2e:d1:0a:5f:
                    d6:47:61:e8:ba:ce:5b:c1:7f:47:cd:e8:1e:d8:1b:
                    4d:0f:b1:35:ed:4c:11:eb:21:f4:84:7b:25:bb:10:
                    44:9b:45:82:39:dc:e0:35:22:37:36:93:13:7a:ae:
                    6a:e5:73:83:5e:17:d8:be:7d:b6:36:d1:2c:0a:4c:
                    91:36:58:49:c2:03:a4:55:74:7e:60:a0:46:2a:24:
                    7a:7b:de:db:42:57:fb:3a:53:cc:57:87:e8:49:e0:
                    f7:1e:7c:b7:61:9a:36:94:a5:2c:4f:7d:35:f2:80:
                    5d:43:eb:c4:a3:03:4e:45:0f:7b:64:c2:3f:ff:f1:
                    c2:97:52:75:ec:95:8e:f8:22:fe:0b:aa:62:4b:28:
                    73:e4:de:62:06:28:df:9f:ea:d6:cb:73:c7:c4:f0:
                    45:db:32:32:11:ca:6f:1f:5f:ea:c1:8e:8e:06:d8:
                    ad:73:c3:cc:df:91:5d:21:1b:59:69:fb:12:1a:7d:
                    e9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:76:41:53:80:AD:11:A2:DD:AC:1F:F3:DF:24:1D:C7:8B:24:3C:73
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3137392e3230382e302e302f31322d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.208.0.0/12

    Signature Algorithm: sha256WithRSAEncryption
         01:90:15:f7:5c:c3:39:9b:ab:26:72:39:97:e2:50:c3:ed:02:
         31:6e:be:e0:36:fc:31:b7:14:5b:1f:04:ff:d1:9b:fd:81:f6:
         ea:8e:27:ba:12:b4:ff:73:69:bc:b1:fd:61:51:2d:2c:10:f7:
         79:25:ea:9d:e2:db:b6:ed:dc:a0:f3:8b:cb:37:e7:8f:ef:f1:
         6a:1d:a9:a7:35:1b:b9:bc:9c:67:6c:6d:ac:8a:c8:fa:7f:fa:
         d8:8b:30:76:a3:ba:f2:a9:fc:4f:78:02:e3:08:b0:37:fc:13:
         9b:9a:39:84:74:61:3f:ed:24:e1:62:6e:5e:da:19:f3:87:15:
         15:7b:56:0a:f1:a5:57:b8:14:b3:66:65:1d:61:22:4c:51:74:
         6e:a6:73:bc:f5:c0:a7:06:f6:f3:a7:58:a1:42:9c:fe:55:2d:
         5e:43:7d:40:bf:3e:40:d4:f9:76:68:44:36:a1:3b:1e:ea:68:
         c5:43:da:a9:7b:f5:51:c3:ef:d1:59:04:17:0d:f4:cf:e5:4c:
         54:64:da:b2:95:53:22:4e:03:e1:e6:2e:80:0f:cc:01:ce:35:
         4f:86:97:e1:0c:d1:1c:04:0c:be:aa:a7:bb:f2:b1:22:f2:71:
         37:66:61:02:f8:0a:51:5d:1d:07:10:f5:56:3b:8f:b1:ed:b7:
         3b:6c:21:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 05:58:22 2025 by rpki-client