Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e35352e3232342e302f32302d3234203d3e203238353733.roa
File:                     3230312e35352e3232342e302f32302d3234203d3e203238353733.roa (raw, json)
Hash identifier:          f2Ofrdg4EYy7g6vpQP8ynV+BFPy5gfG9NQ9ZAiQ1Zfc=
Subject key identifier:   95:1F:C3:BF:B7:51:5B:58:B1:22:6A:3D:BB:17:83:C7:09:B4:89:3B
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       7EC457436A1A3C7BF9B5BC995D3FE48F51C88AD6
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e35352e3232342e302f32302d3234203d3e203238353733.roa
Signing time:             Wed 05 Mar 2025 19:00:14 +0000
ROA not before:           Wed 05 Mar 2025 18:55:14 +0000
ROA not after:            Wed 04 Mar 2026 19:00:14 +0000
asID:                     28573
IP address blocks:        201.55.224.0/20 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:c4:57:43:6a:1a:3c:7b:f9:b5:bc:99:5d:3f:e4:8f:51:c8:8a:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Mar  5 18:55:14 2025 GMT
            Not After : Mar  4 19:00:14 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b2:5d:49:32:a0:71:71:33:e7:f4:09:c3:ee:
                    ab:46:90:3b:db:ac:3e:bd:0f:91:c3:6f:91:b8:30:
                    3c:69:4e:c2:5d:54:05:54:96:a5:aa:95:be:21:63:
                    f3:69:be:ea:4c:76:3c:d6:d8:6d:17:35:15:96:ed:
                    4a:44:c3:e2:d8:63:d3:06:9d:b1:32:af:95:0e:49:
                    47:7b:d3:ae:37:27:9b:f2:8a:cc:68:3a:e8:28:10:
                    a0:1b:fb:a7:9a:a4:b1:29:4c:5d:a7:93:bd:95:12:
                    05:1b:2c:84:a0:dc:7e:41:fe:aa:4b:ac:df:83:81:
                    00:e4:5c:e7:ce:79:d2:07:fc:70:2c:df:e8:22:35:
                    13:34:d6:d3:b7:d9:9b:ce:5f:ae:33:78:ff:36:d9:
                    f4:e8:78:db:c9:81:70:b2:4c:67:72:4f:f0:77:5d:
                    9b:7d:5c:b0:05:b6:7b:a3:16:9c:77:e6:7f:b2:52:
                    70:5e:13:43:43:a2:0c:f6:42:2e:a1:2f:5e:ab:c7:
                    04:83:07:01:0a:21:db:ef:28:8e:75:37:57:7f:a5:
                    06:d7:99:68:74:77:0d:43:49:38:0f:a0:b3:99:a5:
                    da:d6:48:a0:6a:f3:01:7e:00:9d:3c:a3:70:c6:b2:
                    1e:25:27:e0:d8:c6:82:c2:b4:95:bb:bb:28:51:6b:
                    5c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:1F:C3:BF:B7:51:5B:58:B1:22:6A:3D:BB:17:83:C7:09:B4:89:3B
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e35352e3232342e302f32302d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.55.224.0/20

    Signature Algorithm: sha256WithRSAEncryption
         69:04:16:e3:78:80:4a:a8:1b:93:54:1b:61:32:04:26:ce:1f:
         8f:0d:7e:7d:f8:92:ec:f5:ae:f2:b3:ad:1a:6a:66:81:d9:3e:
         69:64:06:a6:6b:78:35:d1:a3:c3:55:5c:3e:60:da:71:ad:32:
         c6:ac:9c:12:1e:52:8d:48:ee:48:02:bf:d8:4f:38:31:1b:59:
         24:93:d9:8e:91:fc:a1:ac:38:70:07:b7:f5:47:ea:fa:14:f6:
         01:93:35:b9:74:f5:82:84:93:8c:cf:23:26:ed:9a:df:74:76:
         0c:b8:02:7e:a7:b2:cc:53:27:3f:34:a2:aa:b1:7f:5a:5a:d1:
         be:74:45:4d:f4:28:0e:6b:7d:02:17:9e:7c:42:aa:83:ec:54:
         f0:f8:4f:78:a1:64:3e:22:2e:f9:8f:14:be:4d:ef:ab:6a:8c:
         51:ae:73:c9:45:eb:c1:af:04:09:04:d9:6e:b6:4d:b2:06:9f:
         f2:46:76:a9:5e:76:1d:f5:a0:1c:1a:93:54:ba:fc:09:32:04:
         4e:ee:83:1c:ce:7a:6e:f1:75:21:fc:2b:bc:c7:87:4a:2d:d7:
         cb:fb:ce:3f:8a:ce:d3:ad:5c:5f:b5:54:9a:24:9a:7d:60:6b:
         33:09:8d:c7:ea:44:93:2a:2f:1b:d7:ba:ec:51:96:32:b0:8b:
         eb:52:55:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:26:51 2025 by rpki-client