Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e39342e3136302e302f31392d3234203d3e203238353733.roa
File:                     3230312e39342e3136302e302f31392d3234203d3e203238353733.roa (raw, json)
Hash identifier:          zYoMIJJDTlp43xwclIMgbKYEPmZ+7YdkIxOJPaWFyU4=
Subject key identifier:   0D:23:DD:1D:18:CE:C5:72:31:77:A8:18:8A:A6:E5:24:BC:19:A2:0F
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       0141569488AC19B67ECFB456AF30F12EDBF70EA7
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e39342e3136302e302f31392d3234203d3e203238353733.roa
Signing time:             Wed 05 Mar 2025 19:00:13 +0000
ROA not before:           Wed 05 Mar 2025 18:55:13 +0000
ROA not after:            Wed 04 Mar 2026 19:00:13 +0000
asID:                     28573
IP address blocks:        201.94.160.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:41:56:94:88:ac:19:b6:7e:cf:b4:56:af:30:f1:2e:db:f7:0e:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Mar  5 18:55:13 2025 GMT
            Not After : Mar  4 19:00:13 2026 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:db:1e:97:ab:06:53:ca:48:ca:4b:a2:79:38:
                    7f:56:b7:d0:6a:6d:4e:6c:fe:ca:06:27:da:e8:18:
                    4a:d8:d5:16:a2:0c:61:cc:0c:f9:e3:f9:3b:1d:37:
                    26:2c:16:3f:e1:06:f8:c9:44:c3:be:63:fa:a0:4f:
                    16:84:3b:84:e5:d0:08:10:5c:9b:5c:ea:73:97:ae:
                    5f:98:e5:c3:56:e6:ce:a9:b8:c9:f1:38:ce:f8:c0:
                    5c:36:93:dd:d3:70:49:dd:60:3e:ff:e4:4c:05:69:
                    79:0e:46:80:f9:62:3a:b3:51:b7:b1:af:3e:9b:e6:
                    25:eb:79:21:b6:ff:ad:b0:67:25:33:05:bc:d3:4a:
                    0a:8b:49:ba:69:48:ea:a3:c2:d8:09:b6:1e:4f:e1:
                    02:78:9e:b7:2b:8c:c7:90:c2:54:51:30:59:7c:9d:
                    cb:aa:f1:c1:bb:d4:8e:65:b6:17:14:f1:57:8a:30:
                    1c:e3:45:f3:a1:98:56:3f:ae:1e:12:b2:89:b1:73:
                    0e:d7:96:b9:83:68:8f:b6:4f:e4:2f:96:1e:20:43:
                    b2:80:a7:29:57:7e:40:10:30:2a:e1:2c:3e:1e:c4:
                    80:e7:29:e8:67:f0:f5:d6:77:e7:88:a5:ad:4b:41:
                    4d:2f:fd:ac:9a:98:3e:1f:a7:26:62:84:e8:36:1c:
                    b2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:23:DD:1D:18:CE:C5:72:31:77:A8:18:8A:A6:E5:24:BC:19:A2:0F
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e39342e3136302e302f31392d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.94.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         80:18:c4:c0:a5:93:09:60:82:a4:d3:fc:3f:39:ae:0c:e6:af:
         3f:e6:3f:3d:13:7c:7f:66:2e:f6:7f:f9:d8:cc:70:58:b4:dc:
         1b:24:31:ff:2b:fe:92:4c:4c:b0:60:7c:38:f1:a4:9f:22:c9:
         09:21:c7:c5:2f:9c:14:a6:86:0b:5d:59:75:3b:07:47:4f:3d:
         88:b2:da:41:79:5b:68:32:b2:67:6b:a9:78:a6:5d:46:12:7f:
         49:f2:6e:af:27:d9:da:31:78:87:4e:30:bf:53:e8:79:39:09:
         a3:53:dc:a6:e3:9d:df:5d:2a:62:05:99:ce:c9:d9:8e:9a:86:
         aa:a7:9d:32:8d:72:0d:dd:c1:f0:0c:81:0d:48:bb:99:92:6a:
         b6:34:74:96:ff:82:55:95:02:b9:01:9f:16:2c:24:c9:9d:4f:
         cb:d3:1b:2c:ee:1c:68:44:da:54:31:25:92:ae:e2:2b:5e:25:
         4e:3b:bc:cc:5e:66:45:35:60:25:6e:9e:e8:fe:8d:19:59:fa:
         2b:f6:af:a0:46:48:78:0e:75:f2:ab:93:d9:87:f4:69:4e:94:
         18:61:5f:55:47:35:d7:33:ac:f6:45:fe:a0:bf:54:5c:39:6c:
         7e:d0:57:be:08:fa:a7:16:aa:e8:f8:91:24:49:38:44:b9:3b:
         ac:02:37:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 22:27:30 2025 by rpki-client