Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138362e3231382e302e302f31362d3234203d3e203238353733.roa
File:                     3138362e3231382e302e302f31362d3234203d3e203238353733.roa (raw, json)
Hash identifier:          Rfx1PYRhRhR1dZe3qfU5HF+PYbd/LBu9yMY8R6d1bKI=
Subject key identifier:   F2:55:DC:55:B5:7E:B3:2D:E9:48:F2:05:F9:75:6F:FD:38:3A:FA:61
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       7F8CD5699C8F732232327C00C027F76DB5886ECF
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138362e3231382e302e302f31362d3234203d3e203238353733.roa
Signing time:             Wed 05 Mar 2025 19:00:09 +0000
ROA not before:           Wed 05 Mar 2025 18:55:09 +0000
ROA not after:            Wed 04 Mar 2026 19:00:09 +0000
asID:                     28573
IP address blocks:        186.218.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:8c:d5:69:9c:8f:73:22:32:32:7c:00:c0:27:f7:6d:b5:88:6e:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Mar  5 18:55:09 2025 GMT
            Not After : Mar  4 19:00:09 2026 GMT
        Subject: CN=3082010A0282010100C37B16D5C5222601C7AD4C6E0E4147DA76D76ABB085B48AB156285805B17C0C7198E4EC8231216D3319E83DF455964386B5605F1B4F06B3FD7D8D1485D8B729911C61C1F397BB8E1A0B4A76ECFDF6C6455C244876969CDB58F7CFAA5A9D365AD2958371ACE2D256BF5D664C4A4E58DC67958524EF55A8A69D6931D146E6DB507BF7733889BB01F17616E501FA1F178369A57D81E4373F5E04014BC37E8A57C40F942D3356BE115FBB3405A5FCF50878648CB9A0B23099599F28FD0F3E4D3E1E78083A96B240122837EC532C6551FC3B747914B3EC4C8BD2B5B7F941CBE26F6079C119BE60B3B19C9F7E3C543D51149B3237C43D53A8A4386867393929AAC31C90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7b:16:d5:c5:22:26:01:c7:ad:4c:6e:0e:41:
                    47:da:76:d7:6a:bb:08:5b:48:ab:15:62:85:80:5b:
                    17:c0:c7:19:8e:4e:c8:23:12:16:d3:31:9e:83:df:
                    45:59:64:38:6b:56:05:f1:b4:f0:6b:3f:d7:d8:d1:
                    48:5d:8b:72:99:11:c6:1c:1f:39:7b:b8:e1:a0:b4:
                    a7:6e:cf:df:6c:64:55:c2:44:87:69:69:cd:b5:8f:
                    7c:fa:a5:a9:d3:65:ad:29:58:37:1a:ce:2d:25:6b:
                    f5:d6:64:c4:a4:e5:8d:c6:79:58:52:4e:f5:5a:8a:
                    69:d6:93:1d:14:6e:6d:b5:07:bf:77:33:88:9b:b0:
                    1f:17:61:6e:50:1f:a1:f1:78:36:9a:57:d8:1e:43:
                    73:f5:e0:40:14:bc:37:e8:a5:7c:40:f9:42:d3:35:
                    6b:e1:15:fb:b3:40:5a:5f:cf:50:87:86:48:cb:9a:
                    0b:23:09:95:99:f2:8f:d0:f3:e4:d3:e1:e7:80:83:
                    a9:6b:24:01:22:83:7e:c5:32:c6:55:1f:c3:b7:47:
                    91:4b:3e:c4:c8:bd:2b:5b:7f:94:1c:be:26:f6:07:
                    9c:11:9b:e6:0b:3b:19:c9:f7:e3:c5:43:d5:11:49:
                    b3:23:7c:43:d5:3a:8a:43:86:86:73:93:92:9a:ac:
                    31:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:55:DC:55:B5:7E:B3:2D:E9:48:F2:05:F9:75:6F:FD:38:3A:FA:61
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138362e3231382e302e302f31362d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.218.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c3:10:ac:d6:72:3a:e1:1e:98:6c:87:25:82:65:03:f5:b0:17:
         b0:d1:c7:04:91:61:1b:58:7e:df:66:18:96:6b:d8:a9:fd:18:
         1c:34:8b:da:c8:19:dc:ef:99:68:58:ad:28:80:74:8f:65:9c:
         c9:ea:54:66:54:a1:6e:a0:a3:83:ce:3e:c7:01:28:37:1b:88:
         67:fa:59:22:3b:3a:c5:6f:6a:f0:4f:64:09:2a:16:68:c0:bd:
         b1:6c:69:0e:88:e7:b7:ba:0b:27:a4:6c:72:74:dc:ac:ae:22:
         0c:ff:3b:79:f9:64:8f:9f:63:3e:2c:03:20:e7:13:68:33:61:
         9f:10:86:02:06:af:c4:db:f8:28:41:18:5c:6b:71:02:d9:ed:
         ec:a6:ed:65:e7:05:f9:a8:77:8e:3c:f2:8f:5d:14:8b:f8:11:
         7f:73:d3:c5:c1:e5:17:f1:a2:b0:97:98:a1:24:53:61:45:18:
         ab:03:b4:27:68:e5:19:79:a2:85:59:e3:9d:d5:d1:d5:97:2f:
         6a:e8:84:ae:7f:7c:ba:15:8f:d6:ae:6f:4a:ae:f6:a1:c8:eb:
         68:7c:40:00:98:f4:11:3e:ca:01:6d:f1:d4:5c:9f:2c:c3:03:
         e5:00:24:02:14:9c:85:1a:cc:41:36:44:2c:73:d8:46:9f:4c:
         8d:5e:fa:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:30:38 2025 by rpki-client