Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e35342e302e302f31352d3234203d3e203238353733.roa
File:                     3138392e35342e302e302f31352d3234203d3e203238353733.roa (raw, json)
Hash identifier:          CXM4NkFCP/sP2kJ/JiWHqUnkaO36esJPHBStdYlgFI4=
Subject key identifier:   9C:33:82:C2:5C:6B:95:A4:F9:44:85:A9:EC:4C:A9:63:CA:5D:0B:87
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       7F33A8D60D3CFAAFE8631A2EDE8F30214C69AE76
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e35342e302e302f31352d3234203d3e203238353733.roa
Signing time:             Wed 05 Mar 2025 19:00:13 +0000
ROA not before:           Wed 05 Mar 2025 18:55:13 +0000
ROA not after:            Wed 04 Mar 2026 19:00:13 +0000
asID:                     28573
IP address blocks:        189.54.0.0/15 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:33:a8:d6:0d:3c:fa:af:e8:63:1a:2e:de:8f:30:21:4c:69:ae:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Mar  5 18:55:13 2025 GMT
            Not After : Mar  4 19:00:13 2026 GMT
        Subject: CN=3082010A0282010100F66FD83879F7316553FB4CAE98D15DFAAB25C22AD0253C11ADBC863929DDEF45CC70F163457F6CA2565697BF0CE84EEDB2F0E6F7FB41894AE319B7636DF3A85376424C080E5271886561BBDDE4C71407FE731C873C524245C245860A15CFE618201F05579975DC13FC7C1E37A424E44C10349E1620AFD5131F3AFDDB78C94C2FCA659D75AA417758549CB992C3AD60B081159584D4D1766C63771B4D6A8CAF1D0F1305882133A69A00EE6E8744743D9F8AE587F2E77733BA1F0BB7500520FA799C752194E019B2A2E7B07512E417ABC861877C16A46F3AB578CF95C4B788E8D6AF009185F7E2763E1719CD65106783BBDEEBBD10DF0B6BE76E4F3AA4DB11E0430203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:6f:d8:38:79:f7:31:65:53:fb:4c:ae:98:d1:
                    5d:fa:ab:25:c2:2a:d0:25:3c:11:ad:bc:86:39:29:
                    dd:ef:45:cc:70:f1:63:45:7f:6c:a2:56:56:97:bf:
                    0c:e8:4e:ed:b2:f0:e6:f7:fb:41:89:4a:e3:19:b7:
                    63:6d:f3:a8:53:76:42:4c:08:0e:52:71:88:65:61:
                    bb:dd:e4:c7:14:07:fe:73:1c:87:3c:52:42:45:c2:
                    45:86:0a:15:cf:e6:18:20:1f:05:57:99:75:dc:13:
                    fc:7c:1e:37:a4:24:e4:4c:10:34:9e:16:20:af:d5:
                    13:1f:3a:fd:db:78:c9:4c:2f:ca:65:9d:75:aa:41:
                    77:58:54:9c:b9:92:c3:ad:60:b0:81:15:95:84:d4:
                    d1:76:6c:63:77:1b:4d:6a:8c:af:1d:0f:13:05:88:
                    21:33:a6:9a:00:ee:6e:87:44:74:3d:9f:8a:e5:87:
                    f2:e7:77:33:ba:1f:0b:b7:50:05:20:fa:79:9c:75:
                    21:94:e0:19:b2:a2:e7:b0:75:12:e4:17:ab:c8:61:
                    87:7c:16:a4:6f:3a:b5:78:cf:95:c4:b7:88:e8:d6:
                    af:00:91:85:f7:e2:76:3e:17:19:cd:65:10:67:83:
                    bb:de:eb:bd:10:df:0b:6b:e7:6e:4f:3a:a4:db:11:
                    e0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:33:82:C2:5C:6B:95:A4:F9:44:85:A9:EC:4C:A9:63:CA:5D:0B:87
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3138392e35342e302e302f31352d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.54.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         17:50:11:a9:2c:ff:7f:19:c9:97:2d:ae:05:f3:4b:3e:f4:16:
         75:af:0a:53:b3:37:64:a2:94:63:13:3f:8c:86:e3:a8:f1:33:
         4f:a4:6e:cd:b8:fa:12:4f:8d:88:a3:6e:7d:cb:2e:51:06:8e:
         fc:c0:2c:3d:0f:1c:2b:a4:0a:24:de:4d:e2:d5:0e:79:04:c3:
         86:53:4f:7a:52:db:95:9b:3e:bd:d6:ba:ca:03:2b:03:dc:00:
         88:00:67:d3:f2:c9:dc:62:31:ba:2a:e2:cd:50:08:4f:6f:75:
         c8:b1:60:29:a5:62:7a:9f:f6:f6:1f:79:79:82:8d:12:52:d7:
         e2:d4:8b:86:51:c1:d6:62:ea:aa:e0:b8:11:b3:47:ac:f9:50:
         95:7a:3e:cd:7d:02:e7:a9:4a:23:4b:86:ad:86:bb:df:2b:2e:
         9f:39:34:12:98:70:67:7c:0f:36:4a:36:19:3a:bc:0a:75:c6:
         d7:ec:c7:94:d6:c3:a3:4f:c5:20:b2:66:cb:d6:62:be:70:03:
         1e:04:09:e8:f2:bc:e3:ef:2b:e9:f9:29:5a:aa:24:90:39:79:
         23:35:ab:b9:9f:0d:09:06:73:38:1b:23:48:61:84:94:a4:ff:
         23:30:b1:20:15:ba:35:70:09:49:0e:55:02:ab:ec:59:c4:89:
         32:97:81:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----