Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138372e3235352e302e302f31362d3234203d3e203238353733.roa
File:                     3138372e3235352e302e302f31362d3234203d3e203238353733.roa (raw, json)
Hash identifier:          yiRgOKSb3LcYZGecU75UtbY2pw0a+yh1btJgQrkmUcw=
Subject key identifier:   B0:85:F1:22:AA:40:92:A3:5B:C3:96:D4:3B:82:F6:BA:DB:05:36:87
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       19738B4F47CC4C0AFD71508DB6E79BFBCD091DAF
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138372e3235352e302e302f31362d3234203d3e203238353733.roa
Signing time:             Wed 05 Mar 2025 19:00:10 +0000
ROA not before:           Wed 05 Mar 2025 18:55:10 +0000
ROA not after:            Wed 04 Mar 2026 19:00:10 +0000
asID:                     28573
IP address blocks:        187.255.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:73:8b:4f:47:cc:4c:0a:fd:71:50:8d:b6:e7:9b:fb:cd:09:1d:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Mar  5 18:55:10 2025 GMT
            Not After : Mar  4 19:00:10 2026 GMT
        Subject: CN=3082010A0282010100CA88CB925937E7089A6014C5F1FFDF457275267D86644639D9F9AE7A06CCA6305CC4433857ED5A73F98E9305D306D3EC087DC6680500123551D68B66FA9AB98F502991FE8AD3A8D71F417F6366C57049495DED0FE0B7591BBB2585321B08429BC77DA7A7A975CEC9C9CB7A8799B860E17FB5E5F16444774FF9DB5D6F84EBD246D0E8C77013B4D4F3FC4BA6A4F477C7EDDE5F7A11DD016915AF415327354D58552A7A1E6ACFFBA977FBCD3D24EF0E1D45A5C09A876B09DD9E964320FF3FF184606046309A46775242732225F2DAF89944241FAE47B2D6C0753CCA2EF1540A8540811E741BD69F78AF0566B62AE8A76E8307893355F893C5EBFB72E15235832E930203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:88:cb:92:59:37:e7:08:9a:60:14:c5:f1:ff:
                    df:45:72:75:26:7d:86:64:46:39:d9:f9:ae:7a:06:
                    cc:a6:30:5c:c4:43:38:57:ed:5a:73:f9:8e:93:05:
                    d3:06:d3:ec:08:7d:c6:68:05:00:12:35:51:d6:8b:
                    66:fa:9a:b9:8f:50:29:91:fe:8a:d3:a8:d7:1f:41:
                    7f:63:66:c5:70:49:49:5d:ed:0f:e0:b7:59:1b:bb:
                    25:85:32:1b:08:42:9b:c7:7d:a7:a7:a9:75:ce:c9:
                    c9:cb:7a:87:99:b8:60:e1:7f:b5:e5:f1:64:44:77:
                    4f:f9:db:5d:6f:84:eb:d2:46:d0:e8:c7:70:13:b4:
                    d4:f3:fc:4b:a6:a4:f4:77:c7:ed:de:5f:7a:11:dd:
                    01:69:15:af:41:53:27:35:4d:58:55:2a:7a:1e:6a:
                    cf:fb:a9:77:fb:cd:3d:24:ef:0e:1d:45:a5:c0:9a:
                    87:6b:09:dd:9e:96:43:20:ff:3f:f1:84:60:60:46:
                    30:9a:46:77:52:42:73:22:25:f2:da:f8:99:44:24:
                    1f:ae:47:b2:d6:c0:75:3c:ca:2e:f1:54:0a:85:40:
                    81:1e:74:1b:d6:9f:78:af:05:66:b6:2a:e8:a7:6e:
                    83:07:89:33:55:f8:93:c5:eb:fb:72:e1:52:35:83:
                    2e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:85:F1:22:AA:40:92:A3:5B:C3:96:D4:3B:82:F6:BA:DB:05:36:87
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138372e3235352e302e302f31362d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.255.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         98:35:08:c8:b5:36:fc:ea:c5:13:2c:e6:06:e5:f2:ff:48:73:
         78:95:05:52:87:4c:e3:b4:fa:ab:16:7c:06:4a:99:7a:0b:fe:
         f3:35:08:49:dc:45:ea:d3:93:36:c0:78:f6:ad:67:9d:ef:dc:
         69:e1:ce:2e:92:ba:99:8c:ab:67:93:8b:98:60:f9:b3:e4:bf:
         9c:74:28:a0:60:a9:15:5c:02:4b:d9:b3:2f:e2:89:6e:44:3d:
         25:f8:c8:28:86:39:36:39:30:d9:0d:95:b2:c1:2a:23:f5:bf:
         13:99:7b:13:b3:a5:18:a9:14:03:f0:af:15:f4:82:c3:88:ca:
         14:3d:0f:51:e2:3c:96:6e:84:8d:88:54:53:6a:6a:e6:b1:36:
         ad:bf:58:8c:cf:d0:08:ef:e0:8f:5a:ae:24:f0:04:c9:95:f5:
         3d:72:fc:d8:67:54:23:43:28:34:4a:2a:72:0a:b3:a5:10:68:
         4f:e1:bd:5a:95:80:a9:c1:2d:83:da:58:39:1e:45:b4:74:50:
         f9:b9:f7:34:ea:99:0f:fb:4a:ff:ab:ae:f5:cd:2b:39:0f:75:
         aa:dc:75:94:fb:94:ff:44:6c:01:19:5f:d9:70:87:06:dd:35:
         17:ca:7f:95:f7:22:64:e6:bd:e2:c2:bd:4b:65:f0:b3:c4:4d:
         d8:77:a3:e5
-----BEGIN CERTIFICATE-----
MIIHPjCCBiagAwIBAgIUGXOLT0fMTAr9cVCNtueb+80JHa8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZBMDJCNkY4RjREQkJEOThBQzlBOUQwQzc3QjA1MjFE
NUE2QkQwQTAeFw0yNTAzMDUxODU1MTBaFw0yNjAzMDQxOTAwMTBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0E4OENCOTI1OTM3RTcwODlB
NjAxNEM1RjFGRkRGNDU3Mjc1MjY3RDg2NjQ0NjM5RDlGOUFFN0EwNkNDQTYzMDVD
QzQ0MzM4NTdFRDVBNzNGOThFOTMwNUQzMDZEM0VDMDg3REM2NjgwNTAwMTIzNTUx
RDY4QjY2RkE5QUI5OEY1MDI5OTFGRThBRDNBOEQ3MUY0MTdGNjM2NkM1NzA0OTQ5
NURFRDBGRTBCNzU5MUJCQjI1ODUzMjFCMDg0MjlCQzc3REE3QTdBOTc1Q0VDOUM5
Q0I3QTg3OTlCODYwRTE3RkI1RTVGMTY0NDQ3NzRGRjlEQjVENkY4NEVCRDI0NkQw
RThDNzcwMTNCNEQ0RjNGQzRCQTZBNEY0NzdDN0VEREU1RjdBMTFERDAxNjkxNUFG
NDE1MzI3MzU0RDU4NTUyQTdBMUU2QUNGRkJBOTc3RkJDRDNEMjRFRjBFMUQ0NUE1
QzA5QTg3NkIwOUREOUU5NjQzMjBGRjNGRjE4NDYwNjA0NjMwOUE0Njc3NTI0Mjcz
MjIyNUYyREFGODk5NDQyNDFGQUU0N0IyRDZDMDc1M0NDQTJFRjE1NDBBODU0MDgx
MUU3NDFCRDY5Rjc4QUYwNTY2QjYyQUU4QTc2RTgzMDc4OTMzNTVGODkzQzVFQkZC
NzJFMTUyMzU4MzJFOTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyojLklk35wiaYBTF8f/fRXJ1Jn2GZEY52fmuegbMpjBcxEM4V+1a
c/mOkwXTBtPsCH3GaAUAEjVR1otm+pq5j1Apkf6K06jXH0F/Y2bFcElJXe0P4LdZ
G7slhTIbCEKbx32np6l1zsnJy3qHmbhg4X+15fFkRHdP+dtdb4Tr0kbQ6MdwE7TU
8/xLpqT0d8ft3l96Ed0BaRWvQVMnNU1YVSp6HmrP+6l3+809JO8OHUWlwJqHawnd
npZDIP8/8YRgYEYwmkZ3UkJzIiXy2viZRCQfrkey1sB1PMou8VQKhUCBHnQb1p94
rwVmtirop26DB4kzVfiTxev7cuFSNYMukwIDAQABo4ICTDCCAkgwHQYDVR0OBBYE
FLCF8SKqQJKjW8OW1DuC9rrbBTaHMB8GA1UdIwQYMBaAFF+gK2+PTbvZismp0Md7
BSHVpr0KMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZRQXF5WXlHTFd4eFJi
SDVLY3BoejUxNzlkd2NCcThoWU5jMVFzaWFrTUwyLzEvNUZBMDJCNkY4RjREQkJE
OThBQzlBOUQwQzc3QjA1MjFENUE2QkQwQS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS81RkEwMkI2RjhGNERCQkQ5OEFDOUE5RDBDNzdCMDUyMUQ1QTZC
RDBBLmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GUUFxeVl5R0xXeHhSYkg1S2Nw
aHo1MTc5ZHdjQnE4aFlOYzFRc2lha01MMi8xLzMxMzgzNzJlMzIzNTM1MmUzMDJl
MzAyZjMxMzYyZDMyMzQyMDNkM2UyMDMyMzgzNTM3MzMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUDAwC7/zAN
BgkqhkiG9w0BAQsFAAOCAQEAmDUIyLU2/OrFEyzmBuXy/0hzeJUFUodM47T6qxZ8
BkqZegv+8zUISdxF6tOTNsB49q1nne/caeHOLpK6mYyrZ5OLmGD5s+S/nHQooGCp
FVwCS9mzL+KJbkQ9JfjIKIY5Njkw2Q2VssEqI/W/E5l7E7OlGKkUA/CvFfSCw4jK
FD0PUeI8lm6EjYhUU2pq5rE2rb9YjM/QCO/gj1quJPAEyZX1PXL82GdUI0MoNEoq
cgqzpRBoT+G9WpWAqcEtg9pYOR5FtHRQ+bn3NOqZD/tK/6uu9c0rOQ91qtx1lPuU
/0RsARlf2XCHBt01F8p/lfciZOa94sK9S2Xws8RN2Hej5Q==
-----END CERTIFICATE-----
Generated at Sun Apr 6 00:05:55 2025 by rpki-client