Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e36322e39362e302f31392d3234203d3e203238353733.roa
File:                     3230312e36322e39362e302f31392d3234203d3e203238353733.roa (raw, json)
Hash identifier:          T40XpVe66RnX8mWQYlHYxZ3BIEDZDJUoLRPF3y0GEOs=
Subject key identifier:   45:BA:18:98:3C:04:F5:7C:93:E2:3C:0B:F6:1C:40:F8:AF:9B:48:F0
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       4751BB102C80F135E8CC81384C70365E84ED0156
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e36322e39362e302f31392d3234203d3e203238353733.roa
Signing time:             Wed 05 Mar 2025 19:00:12 +0000
ROA not before:           Wed 05 Mar 2025 18:55:12 +0000
ROA not after:            Wed 04 Mar 2026 19:00:12 +0000
asID:                     28573
IP address blocks:        201.62.96.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:51:bb:10:2c:80:f1:35:e8:cc:81:38:4c:70:36:5e:84:ed:01:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Mar  5 18:55:12 2025 GMT
            Not After : Mar  4 19:00:12 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d2:98:26:92:c7:67:c1:f4:08:45:e6:53:3b:
                    90:a9:96:d1:b4:05:12:18:7e:fe:e0:6d:7a:a7:6b:
                    50:7b:8d:ae:8b:44:ab:6e:17:2d:bc:88:46:a9:9c:
                    fd:3b:8a:0a:09:0e:1e:55:68:a5:0c:f9:1b:6d:97:
                    fd:52:7c:f8:e8:a8:f1:a3:1d:87:30:62:bf:e2:0c:
                    43:d8:2f:7c:f9:ba:82:a4:b2:12:04:a0:e6:e1:55:
                    0e:2b:b8:22:33:46:b2:96:be:74:49:f1:b8:f6:b4:
                    e9:d9:5b:58:cc:03:b1:56:ad:9b:d5:08:6a:f6:e4:
                    b8:8f:85:bb:e1:de:ac:05:a2:e7:1d:95:39:21:17:
                    2c:3d:f0:39:52:e0:f0:a7:50:5a:9e:01:36:99:3c:
                    76:ed:f5:a2:40:17:26:10:cf:08:09:b1:f9:3a:5a:
                    c0:69:ea:98:3e:7f:b9:64:81:16:b6:09:39:ab:47:
                    db:29:53:12:d6:15:cc:c5:da:05:28:0f:56:26:5f:
                    1b:aa:da:a9:c3:03:f0:0f:3b:0b:6a:88:a3:80:6d:
                    83:97:25:68:b0:c5:7f:76:ae:23:d8:66:a7:21:4b:
                    aa:ca:b0:24:36:48:a5:70:aa:3d:8c:1a:a1:f1:f0:
                    d1:df:f0:c1:5e:e1:e2:a6:bd:e8:3c:35:85:fb:b9:
                    95:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:BA:18:98:3C:04:F5:7C:93:E2:3C:0B:F6:1C:40:F8:AF:9B:48:F0
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e36322e39362e302f31392d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.62.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         c6:87:50:f0:c2:79:57:d9:95:80:81:88:c6:aa:5a:d4:da:56:
         20:63:2c:62:7a:ca:04:e0:6b:c4:6d:b8:c9:7a:c5:b6:ec:78:
         0b:f5:b7:49:5d:2b:ef:51:1f:5f:30:a6:75:6b:e8:9f:b9:a3:
         3c:0b:01:5d:e0:43:1e:15:20:4b:e7:77:62:b4:28:f7:79:ff:
         a3:af:9d:8a:19:1b:bb:4d:5c:b4:41:35:13:73:58:53:4b:dd:
         9e:13:8d:b3:9c:28:9e:5d:37:88:1d:c6:ff:21:c7:f8:62:3d:
         37:bc:37:06:39:66:8b:a7:83:f5:d9:54:ba:29:12:f2:40:f7:
         6b:41:0d:ae:39:de:de:df:a3:ad:19:14:88:d2:4e:29:27:72:
         97:c8:16:09:16:37:a7:b7:de:1d:d7:7c:15:28:77:12:94:44:
         64:ff:cf:50:52:cc:8c:f0:99:c6:a1:32:d0:d4:67:fd:86:e1:
         01:9b:9d:8c:94:ae:35:ed:b7:08:d6:1b:4d:03:48:1c:70:40:
         fc:cd:97:99:50:92:1d:73:81:26:95:e7:f8:a0:15:2f:61:63:
         5e:04:1c:72:bf:65:7e:ad:00:a1:33:e3:70:02:56:2c:5b:0c:
         5b:ea:a9:a3:6c:ff:70:33:f1:87:22:ff:e6:1f:cf:86:45:6b:
         4e:15:31:b5
-----BEGIN CERTIFICATE-----
MIIHPzCCBiegAwIBAgIUR1G7ECyA8TXozIE4THA2XoTtAVYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZBMDJCNkY4RjREQkJEOThBQzlBOUQwQzc3QjA1MjFE
NUE2QkQwQTAeFw0yNTAzMDUxODU1MTJaFw0yNjAzMDQxOTAwMTJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTJEMjk4MjY5MkM3NjdDMUY0
MDg0NUU2NTMzQjkwQTk5NkQxQjQwNTEyMTg3RUZFRTA2RDdBQTc2QjUwN0I4REFF
OEI0NEFCNkUxNzJEQkM4ODQ2QTk5Q0ZEM0I4QTBBMDkwRTFFNTU2OEE1MENGOTFC
NkQ5N0ZENTI3Q0Y4RThBOEYxQTMxRDg3MzA2MkJGRTIwQzQzRDgyRjdDRjlCQTgy
QTRCMjEyMDRBMEU2RTE1NTBFMkJCODIyMzM0NkIyOTZCRTc0NDlGMUI4RjZCNEU5
RDk1QjU4Q0MwM0IxNTZBRDlCRDUwODZBRjZFNEI4OEY4NUJCRTFERUFDMDVBMkU3
MUQ5NTM5MjExNzJDM0RGMDM5NTJFMEYwQTc1MDVBOUUwMTM2OTkzQzc2RURGNUEy
NDAxNzI2MTBDRjA4MDlCMUY5M0E1QUMwNjlFQTk4M0U3RkI5NjQ4MTE2QjYwOTM5
QUI0N0RCMjk1MzEyRDYxNUNDQzVEQTA1MjgwRjU2MjY1RjFCQUFEQUE5QzMwM0Yw
MEYzQjBCNkE4OEEzODA2RDgzOTcyNTY4QjBDNTdGNzZBRTIzRDg2NkE3MjE0QkFB
Q0FCMDI0MzY0OEE1NzBBQTNEOEMxQUExRjFGMEQxREZGMEMxNUVFMUUyQTZCREU4
M0MzNTg1RkJCOTk1MjMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAotKYJpLHZ8H0CEXmUzuQqZbRtAUSGH7+4G16p2tQe42ui0Srbhct
vIhGqZz9O4oKCQ4eVWilDPkbbZf9Unz46Kjxox2HMGK/4gxD2C98+bqCpLISBKDm
4VUOK7giM0aylr50SfG49rTp2VtYzAOxVq2b1Qhq9uS4j4W74d6sBaLnHZU5IRcs
PfA5UuDwp1BangE2mTx27fWiQBcmEM8ICbH5OlrAaeqYPn+5ZIEWtgk5q0fbKVMS
1hXMxdoFKA9WJl8bqtqpwwPwDzsLaoijgG2DlyVosMV/dq4j2GanIUuqyrAkNkil
cKo9jBqh8fDR3/DBXuHipr3oPDWF+7mVIwIDAQABo4ICTTCCAkkwHQYDVR0OBBYE
FEW6GJg8BPV8k+I8C/YcQPivm0jwMB8GA1UdIwQYMBaAFF+gK2+PTbvZismp0Md7
BSHVpr0KMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZRQXF5WXlHTFd4eFJi
SDVLY3BoejUxNzlkd2NCcThoWU5jMVFzaWFrTUwyLzEvNUZBMDJCNkY4RjREQkJE
OThBQzlBOUQwQzc3QjA1MjFENUE2QkQwQS5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMS81RkEwMkI2RjhGNERCQkQ5OEFDOUE5RDBDNzdCMDUyMUQ1QTZC
RDBBLmNlcjCBqgYIKwYBBQUHAQsEgZ0wgZowgZcGCCsGAQUFBzALhoGKcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GUUFxeVl5R0xXeHhSYkg1S2Nw
aHo1MTc5ZHdjQnE4aFlOYzFRc2lha01MMi8xLzMyMzAzMTJlMzYzMjJlMzkzNjJl
MzAyZjMxMzkyZDMyMzQyMDNkM2UyMDMyMzgzNTM3MzMucm9hMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXJPmAw
DQYJKoZIhvcNAQELBQADggEBAMaHUPDCeVfZlYCBiMaqWtTaViBjLGJ6ygTga8Rt
uMl6xbbseAv1t0ldK+9RH18wpnVr6J+5ozwLAV3gQx4VIEvnd2K0KPd5/6OvnYoZ
G7tNXLRBNRNzWFNL3Z4TjbOcKJ5dN4gdxv8hx/hiPTe8NwY5Zoung/XZVLopEvJA
92tBDa453t7fo60ZFIjSTikncpfIFgkWN6e33h3XfBUodxKURGT/z1BSzIzwmcah
MtDUZ/2G4QGbnYyUrjXttwjWG00DSBxwQPzNl5lQkh1zgSaV5/igFS9hY14EHHK/
ZX6tAKEz43ACVixbDFvqqaNs/3Az8Yci/+Yfz4ZFa04VMbU=
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:29:39 2025 by rpki-client