Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138312e3231362e302e302f31332d3234203d3e203238353733.roa
File:                     3138312e3231362e302e302f31332d3234203d3e203238353733.roa (raw, json)
Hash identifier:          eD+bma3kvH5+0tpsNnqbqkuKJQ9F6q/FaLca9a+5QL8=
Subject key identifier:   06:23:B0:B8:D7:CD:CF:1C:09:93:0D:31:88:9B:93:42:E7:2B:4A:2B
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       75328EAE426E2D0AE83EB76EBC1F42F66C9649B5
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138312e3231362e302e302f31332d3234203d3e203238353733.roa
Signing time:             Wed 05 Mar 2025 19:00:09 +0000
ROA not before:           Wed 05 Mar 2025 18:55:09 +0000
ROA not after:            Wed 04 Mar 2026 19:00:09 +0000
asID:                     28573
IP address blocks:        181.216.0.0/13 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:32:8e:ae:42:6e:2d:0a:e8:3e:b7:6e:bc:1f:42:f6:6c:96:49:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Mar  5 18:55:09 2025 GMT
            Not After : Mar  4 19:00:09 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f3:4f:db:a2:57:04:1c:3a:da:34:61:1a:43:
                    ca:3f:5f:a1:5b:1f:56:f9:ba:56:95:3b:cb:4f:b7:
                    2e:81:89:99:2c:02:70:22:79:38:cb:c7:cb:97:20:
                    91:49:b3:9d:1c:6e:ce:0d:44:34:99:9f:25:25:89:
                    68:11:a2:27:78:4e:6b:d3:1f:14:6e:9f:0e:34:3c:
                    be:85:c5:f6:ea:7b:54:91:da:4a:8c:88:a5:47:2b:
                    be:35:c0:fc:99:ec:94:95:5e:10:6b:a6:d5:ce:ab:
                    d9:2f:e5:20:a3:fd:41:96:c6:a5:7d:14:03:63:a9:
                    8b:7f:58:c8:c0:0b:af:2e:6a:49:50:22:46:8e:af:
                    92:12:15:8d:45:f0:a9:4a:a7:ce:bc:df:a2:5a:a7:
                    05:39:e0:c8:3d:67:39:a4:e9:a9:54:3b:f9:82:b7:
                    f9:10:c8:a0:6b:cb:f8:0b:ed:0e:04:68:b8:91:43:
                    98:17:d0:9e:bf:19:cc:6a:b6:0a:bc:3b:db:d7:3d:
                    28:34:11:21:a1:9b:b0:c4:6b:c1:dd:9c:6a:6e:1b:
                    e0:2a:0a:ea:4c:7d:c6:97:03:14:a4:46:77:83:78:
                    24:0e:5c:06:22:bf:21:10:aa:5e:21:d8:d7:30:2e:
                    2a:9d:c4:99:a7:cf:ea:8c:1c:c8:bb:d6:ca:c9:47:
                    5b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:23:B0:B8:D7:CD:CF:1C:09:93:0D:31:88:9B:93:42:E7:2B:4A:2B
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138312e3231362e302e302f31332d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.216.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         7d:7f:d1:1e:b9:d8:07:79:b1:e4:12:b2:64:bc:f2:56:fc:cc:
         dc:69:7a:e6:f0:bf:4c:96:86:58:d1:54:16:a0:62:5d:d7:a0:
         82:21:c2:06:f7:fc:96:ff:62:f9:a4:e8:24:1c:5c:af:38:6c:
         3e:0f:14:09:74:31:40:c7:ca:17:e8:83:86:d4:9d:08:e5:85:
         e4:85:18:a0:4a:2f:a4:40:40:07:38:b7:02:f6:f7:28:5a:a2:
         ff:c4:07:a6:39:f0:d5:24:35:86:f0:91:b6:2a:fa:af:89:3e:
         0e:e5:64:df:f0:e9:f8:e2:77:08:c0:3c:e6:3e:d5:5d:77:02:
         9f:fd:07:c0:46:82:40:c9:68:21:52:f5:a1:45:af:a1:a2:2b:
         c3:26:6f:21:8f:50:1c:46:a8:f0:ef:53:d3:3f:5a:b2:ef:03:
         99:6d:c9:07:b0:91:46:24:9f:96:7d:a8:73:53:62:d0:fb:d5:
         83:33:19:26:99:f0:99:65:53:8b:44:ea:69:d3:05:84:ab:4b:
         9c:c2:f8:62:51:8d:a8:12:5f:4d:9f:bd:41:14:7d:42:3a:c6:
         37:eb:18:3a:fb:7c:07:19:6d:c3:45:40:c1:4d:46:ff:e0:ac:
         4a:52:7c:46:f5:dc:21:00:7d:23:ce:66:f1:25:f5:65:c5:f4:
         00:14:85:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 03:00:13 2025 by rpki-client