Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138312e3231332e302e302f31362d3234203d3e203238353733.roa
File:                     3138312e3231332e302e302f31362d3234203d3e203238353733.roa (raw, json)
Hash identifier:          mvXf7PRVV52oXFWp15P0UAZZDnvcSWdBLFWTvcBuGes=
Subject key identifier:   13:62:5E:57:EB:6C:B0:61:24:AE:92:0B:94:E3:FB:A3:95:2F:A5:AE
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       3774568EF1180727240EB6DBE6A40B83BABB5D50
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138312e3231332e302e302f31362d3234203d3e203238353733.roa
Signing time:             Wed 05 Mar 2025 19:00:08 +0000
ROA not before:           Wed 05 Mar 2025 18:55:08 +0000
ROA not after:            Wed 04 Mar 2026 19:00:08 +0000
asID:                     28573
IP address blocks:        181.213.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:74:56:8e:f1:18:07:27:24:0e:b6:db:e6:a4:0b:83:ba:bb:5d:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Mar  5 18:55:08 2025 GMT
            Not After : Mar  4 19:00:08 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:58:f9:1e:e9:33:28:03:14:9b:23:cf:3d:39:
                    e4:71:92:ba:a0:b9:97:df:75:e7:8f:f6:40:9d:7a:
                    70:7a:6b:11:87:88:68:c6:fa:4b:5b:20:3b:10:ef:
                    06:5d:6b:47:cc:5e:bb:83:29:49:18:85:d3:5f:a3:
                    93:e5:5f:6b:67:1a:95:46:e7:ef:85:c1:4c:d6:01:
                    69:ed:e3:7e:8f:7f:db:ab:68:07:7b:c1:ca:28:e3:
                    8c:dd:aa:de:96:fa:46:2e:e7:51:e0:cd:c5:c9:7c:
                    ff:f8:20:32:bd:64:11:9b:da:4e:0f:76:40:09:6a:
                    13:4c:8b:e7:5b:fb:fd:8e:b0:b5:09:57:d0:5d:60:
                    79:d9:f6:9d:88:c2:a3:45:ee:76:a6:e1:07:22:54:
                    35:61:10:2b:f2:27:aa:cf:b9:4e:ff:26:20:74:83:
                    98:75:28:8b:d9:81:e6:e7:42:64:0d:84:e9:82:d2:
                    98:27:15:5d:f9:66:63:b0:95:91:f3:5e:17:33:63:
                    5d:4c:19:ca:56:dd:83:6d:10:d0:2a:23:c5:6e:db:
                    99:5f:95:0b:04:40:6c:4e:15:64:f4:e1:30:81:59:
                    7f:3e:3e:cb:b5:87:8e:b6:cf:a3:fc:25:62:67:f1:
                    fd:b8:ea:9e:f5:cd:26:f3:60:ef:35:25:1b:55:d3:
                    7d:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:62:5E:57:EB:6C:B0:61:24:AE:92:0B:94:E3:FB:A3:95:2F:A5:AE
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138312e3231332e302e302f31362d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.213.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         52:2f:b4:48:4a:68:69:39:71:fc:32:ce:fa:a8:d3:cb:5f:dd:
         ad:9c:e9:16:52:77:28:4a:49:8f:e1:41:f5:0d:b5:97:69:ad:
         56:9e:44:43:df:00:94:3e:73:38:42:dc:4c:53:2e:4d:88:c6:
         d8:ef:0a:ce:89:0b:91:ee:e3:e2:0f:34:f1:64:29:f5:02:74:
         c1:9e:35:00:9c:63:eb:2a:22:10:89:64:70:c6:30:fd:c8:dc:
         3e:89:9a:57:6e:85:7c:a4:f6:6d:12:10:b5:90:8c:0c:79:9a:
         d0:9a:d3:89:5f:44:f9:36:35:7a:f1:0b:8c:81:b5:10:76:4c:
         a4:ab:58:2d:7b:9c:e6:cb:5f:6c:cb:25:0c:d4:86:b5:1b:ec:
         86:0e:af:78:1c:fc:be:44:0a:c8:1a:dc:d7:73:e2:5d:ca:19:
         94:59:9c:04:02:1a:cc:7f:77:53:ae:dd:ff:1a:9d:23:d2:3a:
         3d:36:dc:7e:80:19:48:4b:a3:40:4a:99:e7:1d:ef:3b:4d:9a:
         bf:ba:15:6e:c1:de:7e:ff:42:1e:bc:6c:00:1b:3f:95:ce:24:
         6a:8b:2f:76:68:e5:49:2a:63:48:91:3a:f8:e6:15:6e:a5:8d:
         93:7c:49:b1:ff:d7:34:9a:86:54:a9:77:92:cd:6a:42:24:62:
         62:18:f2:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:41 2025 by rpki-client