Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e362e302e302f31362d3234203d3e203238353733.roa
File:                     3230312e362e302e302f31362d3234203d3e203238353733.roa (raw, json)
Hash identifier:          cFAFtYqKbLQaX5QRMEiFpOoOfngo/P4ay9mr4VAzPcU=
Subject key identifier:   1B:FD:FC:6A:67:04:0E:BF:7C:3D:52:61:66:AF:C2:06:17:14:91:47
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       5F84E09CB81DBCF3B04588CF60F49DB85FDA103C
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e362e302e302f31362d3234203d3e203238353733.roa
Signing time:             Wed 05 Mar 2025 19:00:12 +0000
ROA not before:           Wed 05 Mar 2025 18:55:12 +0000
ROA not after:            Wed 04 Mar 2026 19:00:12 +0000
asID:                     28573
IP address blocks:        201.6.0.0/16 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:84:e0:9c:b8:1d:bc:f3:b0:45:88:cf:60:f4:9d:b8:5f:da:10:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Mar  5 18:55:12 2025 GMT
            Not After : Mar  4 19:00:12 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:13:d6:13:94:87:3a:80:4f:6e:e3:e1:e1:10:
                    fe:71:c2:28:2f:ca:af:f6:4e:09:34:3e:d8:e3:d8:
                    54:49:a6:06:d6:ea:bb:c4:6b:77:13:28:5b:b5:e6:
                    48:9d:f0:b7:7d:cc:4c:fd:10:ad:be:41:8a:23:fc:
                    6f:cb:2d:bc:f7:d7:c2:6b:45:14:79:e9:d8:25:5d:
                    69:5b:5f:63:91:4f:a5:6c:9e:5e:63:ff:f4:54:16:
                    3d:17:b7:b9:a1:dd:24:f9:4f:0a:d4:25:74:62:bf:
                    a1:ec:78:91:bd:78:c1:27:87:da:89:08:07:62:28:
                    1e:0e:9b:a6:b8:05:41:ad:42:68:74:eb:20:b3:34:
                    d1:a1:ee:4b:13:ad:29:7b:87:5f:3e:c7:d6:bb:10:
                    16:73:05:cd:49:ee:5b:a8:a6:56:02:66:8a:08:e5:
                    12:95:b5:77:71:28:b3:a5:1f:43:70:93:d0:03:e2:
                    31:81:f0:05:65:f5:4b:7e:c6:02:fb:89:85:49:56:
                    26:9a:3d:59:51:bf:eb:d2:ac:e3:91:ff:cf:c1:f3:
                    11:25:f4:9d:9e:cf:10:7d:c4:b5:52:d6:f7:44:af:
                    8d:ed:21:a4:6e:4d:fd:e5:2a:ee:28:46:09:3a:2d:
                    37:28:db:17:1c:54:3d:3d:43:84:4b:ff:5d:04:37:
                    53:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:FD:FC:6A:67:04:0E:BF:7C:3D:52:61:66:AF:C2:06:17:14:91:47
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e362e302e302f31362d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.6.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ae:4b:22:0a:b6:a9:fc:46:0f:63:24:eb:90:13:a6:0d:cb:69:
         6b:fd:07:b7:fd:f8:a2:8f:0d:ea:38:bf:e9:90:72:b7:40:9a:
         39:4b:a0:48:aa:15:f1:2c:4e:36:2d:f4:a4:85:14:ae:e0:ac:
         e3:49:16:38:a1:e8:2d:89:54:76:9c:f1:2e:3f:31:23:a2:41:
         e2:67:d9:6b:26:8e:20:07:3c:42:3b:4f:96:70:c1:7d:5c:be:
         fd:4c:90:f1:67:6f:d1:38:da:36:65:71:8f:83:2d:84:52:ec:
         61:4b:d3:ea:5f:c4:7c:5d:a6:94:e7:36:6c:2c:46:7e:31:a5:
         3b:25:fa:18:4f:83:64:eb:7a:31:a2:79:56:b8:70:16:ae:2a:
         f9:80:5f:0a:ad:a6:1d:f9:b4:5d:8c:94:ed:49:45:5d:70:70:
         f1:8a:74:6e:95:32:8b:5a:2a:b7:e9:fe:b7:04:cb:0b:b8:ca:
         11:72:2e:51:85:11:bd:4c:d6:81:98:4c:f1:69:81:42:af:78:
         e8:b6:27:c4:68:49:d2:d9:2f:40:e3:e0:3e:df:56:2b:b4:28:
         06:f0:cd:89:ac:01:66:77:27:38:81:2a:eb:d8:4c:a9:e0:3b:
         c9:e2:d5:14:96:32:fa:f5:fb:b1:7f:b1:c3:d5:24:24:d6:29:
         85:9f:b1:cb
-----BEGIN CERTIFICATE-----
MIIHOjCCBiKgAwIBAgIUX4TgnLgdvPOwRYjPYPSduF/aEDwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZBMDJCNkY4RjREQkJEOThBQzlBOUQwQzc3QjA1MjFE
NUE2QkQwQTAeFw0yNTAzMDUxODU1MTJaFw0yNjAzMDQxOTAwMTJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0UxM0Q2MTM5NDg3M0E4MDRG
NkVFM0UxRTExMEZFNzFDMjI4MkZDQUFGRjY0RTA5MzQzRUQ4RTNEODU0NDlBNjA2
RDZFQUJCQzQ2Qjc3MTMyODVCQjVFNjQ4OURGMEI3N0RDQzRDRkQxMEFEQkU0MThB
MjNGQzZGQ0IyREJDRjdEN0MyNkI0NTE0NzlFOUQ4MjU1RDY5NUI1RjYzOTE0RkE1
NkM5RTVFNjNGRkY0NTQxNjNEMTdCN0I5QTFERDI0Rjk0RjBBRDQyNTc0NjJCRkEx
RUM3ODkxQkQ3OEMxMjc4N0RBODkwODA3NjIyODFFMEU5QkE2QjgwNTQxQUQ0MjY4
NzRFQjIwQjMzNEQxQTFFRTRCMTNBRDI5N0I4NzVGM0VDN0Q2QkIxMDE2NzMwNUNE
NDlFRTVCQThBNjU2MDI2NjhBMDhFNTEyOTVCNTc3NzEyOEIzQTUxRjQzNzA5M0Qw
MDNFMjMxODFGMDA1NjVGNTRCN0VDNjAyRkI4OTg1NDk1NjI2OUEzRDU5NTFCRkVC
RDJBQ0UzOTFGRkNGQzFGMzExMjVGNDlEOUVDRjEwN0RDNEI1NTJENkY3NDRBRjhE
RUQyMUE0NkU0REZERTUyQUVFMjg0NjA5M0EyRDM3MjhEQjE3MUM1NDNEM0Q0Mzg0
NEJGRjVEMDQzNzUzN0QwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAzhPWE5SHOoBPbuPh4RD+ccIoL8qv9k4JND7Y49hUSaYG1uq7xGt3
EyhbteZInfC3fcxM/RCtvkGKI/xvyy2899fCa0UUeenYJV1pW19jkU+lbJ5eY//0
VBY9F7e5od0k+U8K1CV0Yr+h7HiRvXjBJ4faiQgHYigeDpumuAVBrUJodOsgszTR
oe5LE60pe4dfPsfWuxAWcwXNSe5bqKZWAmaKCOUSlbV3cSizpR9DcJPQA+IxgfAF
ZfVLfsYC+4mFSVYmmj1ZUb/r0qzjkf/PwfMRJfSdns8QfcS1Utb3RK+N7SGkbk39
5SruKEYJOi03KNsXHFQ9PUOES/9dBDdTfQIDAQABo4ICSDCCAkQwHQYDVR0OBBYE
FBv9/GpnBA6/fD1SYWavwgYXFJFHMB8GA1UdIwQYMBaAFF+gK2+PTbvZismp0Md7
BSHVpr0KMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZRQXF5WXlHTFd4eFJi
SDVLY3BoejUxNzlkd2NCcThoWU5jMVFzaWFrTUwyLzEvNUZBMDJCNkY4RjREQkJE
OThBQzlBOUQwQzc3QjA1MjFENUE2QkQwQS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS81RkEwMkI2RjhGNERCQkQ5OEFDOUE5RDBDNzdCMDUyMUQ1QTZC
RDBBLmNlcjCBpgYIKwYBBQUHAQsEgZkwgZYwgZMGCCsGAQUFBzALhoGGcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GUUFxeVl5R0xXeHhSYkg1S2Nw
aHo1MTc5ZHdjQnE4aFlOYzFRc2lha01MMi8xLzMyMzAzMTJlMzYyZTMwMmUzMDJm
MzEzNjJkMzIzNDIwM2QzZTIwMzIzODM1MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAK
BggrBgEFBQcOAjAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMDAMkGMA0GCSqG
SIb3DQEBCwUAA4IBAQCuSyIKtqn8Rg9jJOuQE6YNy2lr/Qe3/fiijw3qOL/pkHK3
QJo5S6BIqhXxLE42LfSkhRSu4KzjSRY4oegtiVR2nPEuPzEjokHiZ9lrJo4gBzxC
O0+WcMF9XL79TJDxZ2/RONo2ZXGPgy2EUuxhS9PqX8R8XaaU5zZsLEZ+MaU7JfoY
T4Nk63oxonlWuHAWrir5gF8KraYd+bRdjJTtSUVdcHDxinRulTKLWiq36f63BMsL
uMoRci5RhRG9TNaBmEzxaYFCr3jotifEaEnS2S9A4+A+31YrtCgG8M2JrAFmdyc4
gSrr2Eyp4DvJ4tUUljL69fuxf7HD1SQk1imFn7HL
-----END CERTIFICATE-----
Generated at Sat Apr 5 20:16:15 2025 by rpki-client