Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138372e36342e302e302f31342d3234203d3e203238353733.roa
File:                     3138372e36342e302e302f31342d3234203d3e203238353733.roa (raw, json)
Hash identifier:          8F1TSj/4VBcqLfs8rLj/J/ZyYene/p6t5nJ0PEa9aSs=
Subject key identifier:   B5:54:A7:D6:8D:EE:4E:5A:6C:F4:D4:EF:7F:F9:4A:C7:78:9F:64:09
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       7E7378A8B7F92E9FC32215F2E6C9D0B9E1EAEB93
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138372e36342e302e302f31342d3234203d3e203238353733.roa
Signing time:             Wed 05 Mar 2025 19:00:09 +0000
ROA not before:           Wed 05 Mar 2025 18:55:09 +0000
ROA not after:            Wed 04 Mar 2026 19:00:09 +0000
asID:                     28573
IP address blocks:        187.64.0.0/14 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:73:78:a8:b7:f9:2e:9f:c3:22:15:f2:e6:c9:d0:b9:e1:ea:eb:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Mar  5 18:55:09 2025 GMT
            Not After : Mar  4 19:00:09 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:9e:7f:a3:e0:24:e1:7a:6c:f1:68:13:8d:cc:
                    87:b4:9e:26:61:42:6c:3b:56:56:62:22:9d:f0:ce:
                    40:a2:b4:17:b7:22:2f:12:a0:30:e3:8f:bb:f5:a5:
                    72:f0:e5:88:68:75:3a:54:89:88:8c:15:f2:2d:35:
                    48:95:15:40:71:f1:6f:f8:9b:c2:45:ca:61:37:18:
                    a8:39:a6:eb:36:35:47:a5:a2:07:30:e1:8f:6b:dc:
                    88:41:0f:06:e6:1d:79:d7:42:df:1c:ac:ef:6d:e9:
                    d0:63:53:fe:79:fa:14:ae:47:30:49:d7:81:0d:7a:
                    84:a4:82:fb:fa:1a:d0:52:c1:e3:cd:f2:45:4b:83:
                    4a:c4:ba:86:8d:00:f4:53:f0:90:39:f3:31:9d:e7:
                    33:89:72:4e:20:2e:8b:a9:93:b3:fd:c9:e0:5c:36:
                    c0:b0:c9:be:40:2f:0f:f7:a6:46:4d:fa:15:cb:3e:
                    28:c6:a6:22:6a:30:05:c2:38:76:71:40:fd:cf:d1:
                    b5:89:a5:aa:20:b8:e2:13:73:12:92:51:be:0e:06:
                    c6:5f:b9:67:78:b2:89:28:ea:60:a6:99:3a:4f:b7:
                    cb:17:5d:bc:c4:d1:04:c8:85:8f:f1:33:46:8a:e8:
                    f2:92:01:60:78:de:4c:51:cf:fb:f1:4d:c2:eb:15:
                    6c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:54:A7:D6:8D:EE:4E:5A:6C:F4:D4:EF:7F:F9:4A:C7:78:9F:64:09
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138372e36342e302e302f31342d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.64.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         6d:e0:aa:93:d6:f6:d1:d8:8f:12:11:e8:29:cd:80:1a:2b:7d:
         4c:b0:84:65:dd:72:a6:45:e7:66:07:1e:79:c6:17:0d:10:7a:
         d9:f5:6a:40:7f:32:26:6c:c6:74:70:7d:fd:ad:3e:b7:4f:3f:
         fe:1e:16:d2:b2:d5:36:d4:5f:e1:03:a6:d6:e7:02:81:00:60:
         48:56:aa:f7:4b:f3:a8:65:21:f5:61:11:96:d7:1c:df:c9:7d:
         d4:f4:57:2b:b5:05:bc:52:a4:44:e7:c9:14:29:71:1c:76:ed:
         97:3c:79:11:d4:19:98:e2:67:7a:46:45:31:78:0f:47:67:e2:
         5b:f9:75:ce:26:2d:52:b4:99:ab:dd:f3:a4:e3:d7:af:27:7f:
         56:a9:3c:f2:72:13:17:8e:02:7b:33:05:0f:e4:14:a2:f9:ad:
         1b:44:8f:4a:3d:9d:8f:9f:29:78:90:41:eb:5f:e8:09:09:86:
         48:21:0e:e5:bb:1b:c3:93:83:f0:2a:75:e8:a6:72:e6:84:c8:
         d3:a1:5f:5d:9e:34:b0:c1:6e:50:cc:df:4b:a1:9e:e4:e7:4e:
         a6:d2:b6:3e:ea:cd:cc:73:5b:35:37:74:be:61:26:73:7e:10:
         41:58:82:d5:c4:93:81:f2:c2:9a:e8:4a:ba:5b:6f:1a:02:f5:
         10:de:af:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:16:15 2025 by rpki-client