Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138372e3138302e302e302f31342d3234203d3e203238353733.roa
File:                     3138372e3138302e302e302f31342d3234203d3e203238353733.roa (raw, json)
Hash identifier:          TDpBN+Gt8D79yj6XYrW8wYZe3mVHgh++eg0JlnfUKOY=
Subject key identifier:   6D:90:67:9F:3C:8C:FF:B4:5C:27:31:FB:A4:C6:EC:F1:A9:3C:5F:E7
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       379FFEFBD1140A8F01B2DE5F041FCD0CC48CD78D
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138372e3138302e302e302f31342d3234203d3e203238353733.roa
Signing time:             Wed 05 Mar 2025 19:00:14 +0000
ROA not before:           Wed 05 Mar 2025 18:55:14 +0000
ROA not after:            Wed 04 Mar 2026 19:00:14 +0000
asID:                     28573
IP address blocks:        187.180.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:9f:fe:fb:d1:14:0a:8f:01:b2:de:5f:04:1f:cd:0c:c4:8c:d7:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Mar  5 18:55:14 2025 GMT
            Not After : Mar  4 19:00:14 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:35:1f:5b:a3:f7:53:8a:f0:d2:64:b0:42:ef:
                    0c:4d:c7:96:f1:f7:71:ee:57:2d:ab:a1:1d:07:5a:
                    9c:7a:20:ff:11:7d:78:25:b1:f3:10:17:e5:6d:29:
                    44:93:02:f8:8f:54:57:31:77:bf:7c:75:5a:95:23:
                    bf:46:b6:1f:47:77:b6:e0:0e:ff:7d:a9:a2:fa:85:
                    d7:fe:ad:ae:58:cd:cc:ae:a4:a2:e0:79:7d:6c:35:
                    27:24:51:df:60:fe:9d:a3:cd:73:27:d8:48:a6:02:
                    e6:1d:1f:51:9e:0a:83:75:5a:fe:12:fb:a1:cb:9f:
                    36:13:84:1e:85:bb:e3:61:69:b7:86:f9:76:d5:b9:
                    46:8c:6f:46:a8:79:b9:35:f8:fe:95:bc:15:9e:54:
                    69:f4:6a:ac:1f:df:13:95:6f:5e:8d:93:5b:ad:37:
                    5d:da:e1:a1:40:1a:fb:ab:31:c0:f5:b5:ad:b3:25:
                    23:16:b3:12:f8:a7:e9:7d:d7:8f:4b:a5:e1:4d:73:
                    41:d9:e4:4f:fd:59:3e:f4:f6:d9:26:52:fc:32:22:
                    61:5a:d1:47:e1:92:8c:29:41:31:0b:f5:c7:6d:4d:
                    28:44:e2:ca:3e:df:ec:8b:0b:67:e0:ee:a8:76:24:
                    52:5a:c3:6b:73:37:3f:38:ca:19:ab:c1:79:7b:57:
                    40:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:90:67:9F:3C:8C:FF:B4:5C:27:31:FB:A4:C6:EC:F1:A9:3C:5F:E7
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138372e3138302e302e302f31342d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.180.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         b1:54:ef:0b:e1:eb:fc:34:f8:22:cf:24:77:73:86:86:85:0b:
         5e:c1:71:66:1d:cb:0d:8a:52:6c:a3:b3:17:80:4c:1b:81:44:
         1f:6a:1d:ba:da:2d:e1:6c:d1:e2:aa:93:5a:85:7a:85:66:ff:
         2e:f2:9a:d2:a4:e8:93:4c:6e:64:ea:6d:77:1c:9e:90:1c:8d:
         92:97:0e:af:e1:a1:f7:06:1b:ec:40:d8:2b:0e:d5:33:df:ee:
         cb:bc:cc:a5:18:b3:30:7b:69:fc:21:52:3e:8e:67:71:43:31:
         55:6a:be:53:86:78:7d:ab:6a:4c:bf:3f:6e:b2:8c:5f:4d:39:
         0a:a8:54:32:51:17:70:55:b6:34:67:90:10:86:f6:5d:16:ca:
         7d:98:c5:d2:ab:5c:8c:3e:17:8c:aa:46:79:f9:07:ae:c1:a3:
         d2:bc:23:7e:68:fa:0e:ce:d2:e9:66:3b:cd:45:5e:3c:2b:83:
         19:24:6c:84:4a:8a:30:67:23:6c:04:0c:e2:4a:be:ab:dc:12:
         c0:a2:a9:f2:b6:55:4d:46:6a:0b:29:3f:d2:b9:88:ba:8a:3a:
         23:44:3a:ae:8b:c3:b4:e3:5c:47:c2:fc:e2:7e:9b:97:7a:0f:
         f2:33:10:ed:be:81:bc:5e:23:28:b4:02:ee:92:ce:d4:94:ac:
         28:24:22:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:30:42 2025 by rpki-client