Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138362e3232302e302e302f31342d3234203d3e203238353733.roa
File:                     3138362e3232302e302e302f31342d3234203d3e203238353733.roa (raw, json)
Hash identifier:          hiFNQO70tFRPvceIfdiEM3hkpWk9bVaELagL48BiNZQ=
Subject key identifier:   0F:9F:F0:E6:00:04:B3:70:57:BE:DC:F2:5C:FD:5B:15:06:2C:7E:14
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       70A269BA6607D81287ECCDF2FE26186E2C98C682
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138362e3232302e302e302f31342d3234203d3e203238353733.roa
Signing time:             Wed 05 Mar 2025 19:00:12 +0000
ROA not before:           Wed 05 Mar 2025 18:55:12 +0000
ROA not after:            Wed 04 Mar 2026 19:00:12 +0000
asID:                     28573
IP address blocks:        186.220.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:a2:69:ba:66:07:d8:12:87:ec:cd:f2:fe:26:18:6e:2c:98:c6:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Mar  5 18:55:12 2025 GMT
            Not After : Mar  4 19:00:12 2026 GMT
        Subject: CN=3082010A0282010100C92410736F4F79AA3A84132AA02C1F385CA8D950FFCF0C290C5E66B91462E9344B4A60B32C92DAECCC30332B1958DC0A9E1BD8EB587F1B5D94498BD14AB6D3B3D0ED035C072A72C1B3FD53A7730E2F1096657E6058339A574B5F0F2EED21931A399E7C6C9E41C2168C5D3B039F4AE2115763E50272F8E7B3D1BD6D9AFDBC793794BFACC90665F7866ADA9607CB2FB85221720A6741DBB3A4D678E5A8E6B81416716E78454C6E3B91C7EA5DB4788310D93B33FBF0EAA2E8DD17837F79AC3B0E9D63365F1F53AA4E5BA923300FB24A06BBEC90DAA4E041DD84FF04E2A9BBDCD20C1E18964B3F5838314B47C7F9EB48BAEE3EB8AA31E2ADA9DEB7408294FA35CEF70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:24:10:73:6f:4f:79:aa:3a:84:13:2a:a0:2c:
                    1f:38:5c:a8:d9:50:ff:cf:0c:29:0c:5e:66:b9:14:
                    62:e9:34:4b:4a:60:b3:2c:92:da:ec:cc:30:33:2b:
                    19:58:dc:0a:9e:1b:d8:eb:58:7f:1b:5d:94:49:8b:
                    d1:4a:b6:d3:b3:d0:ed:03:5c:07:2a:72:c1:b3:fd:
                    53:a7:73:0e:2f:10:96:65:7e:60:58:33:9a:57:4b:
                    5f:0f:2e:ed:21:93:1a:39:9e:7c:6c:9e:41:c2:16:
                    8c:5d:3b:03:9f:4a:e2:11:57:63:e5:02:72:f8:e7:
                    b3:d1:bd:6d:9a:fd:bc:79:37:94:bf:ac:c9:06:65:
                    f7:86:6a:da:96:07:cb:2f:b8:52:21:72:0a:67:41:
                    db:b3:a4:d6:78:e5:a8:e6:b8:14:16:71:6e:78:45:
                    4c:6e:3b:91:c7:ea:5d:b4:78:83:10:d9:3b:33:fb:
                    f0:ea:a2:e8:dd:17:83:7f:79:ac:3b:0e:9d:63:36:
                    5f:1f:53:aa:4e:5b:a9:23:30:0f:b2:4a:06:bb:ec:
                    90:da:a4:e0:41:dd:84:ff:04:e2:a9:bb:dc:d2:0c:
                    1e:18:96:4b:3f:58:38:31:4b:47:c7:f9:eb:48:ba:
                    ee:3e:b8:aa:31:e2:ad:a9:de:b7:40:82:94:fa:35:
                    ce:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:9F:F0:E6:00:04:B3:70:57:BE:DC:F2:5C:FD:5B:15:06:2C:7E:14
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138362e3232302e302e302f31342d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.220.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         09:89:43:8e:11:c8:00:df:60:25:a6:f0:4b:26:c6:75:29:16:
         b7:ac:a4:ce:3c:32:04:2e:c5:1d:e2:e8:8d:0c:d0:ab:b2:ca:
         56:20:32:8d:29:31:45:aa:f6:36:02:d6:af:bf:e6:bf:0a:04:
         db:06:ac:a9:76:33:f5:45:e2:bb:a4:55:08:a9:28:e0:be:6f:
         24:7f:7f:2f:92:46:ce:c0:15:d4:42:f3:7c:77:84:84:45:f2:
         77:d2:a4:e9:db:f8:65:57:6a:6a:1a:a5:1d:63:11:db:e4:48:
         f5:82:28:cd:90:89:b1:54:e6:7e:3b:82:ef:ee:1e:52:4b:ec:
         33:e4:d4:27:bd:f5:bb:23:71:3d:7d:87:c9:8f:30:98:8b:72:
         ab:23:bf:cd:c8:87:c1:86:59:c7:7d:71:d3:e5:80:c5:d1:5f:
         9b:18:6e:89:0b:0d:0a:c4:56:bf:ab:9b:bb:9e:61:da:65:32:
         0a:46:3a:37:4b:a4:f7:ad:ba:58:1f:ea:a7:9c:41:0f:76:85:
         62:27:0b:30:11:58:47:ef:fe:85:c0:4c:ae:fc:c9:88:db:9f:
         d7:31:92:9a:98:db:58:12:f4:e0:b1:bb:49:1f:74:40:41:17:
         b7:62:3d:2d:ea:34:b8:86:af:4e:56:6d:80:e8:91:e4:f1:10:
         ac:4c:b7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:31:08 2025 by rpki-client