Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/1/3134332e3235352e3230322e302f32342d3234203d3e2038303735.roa
File:                     3134332e3235352e3230322e302f32342d3234203d3e2038303735.roa (raw, json)
Hash identifier:          Twi8rbFg8TsTI9mnCwE2gR0JSJY7AZwiMprj2Ef+qxo=
Subject key identifier:   84:5C:A0:15:60:C7:09:9E:CA:07:E9:54:D7:11:B0:CA:D1:90:B5:A7
Certificate issuer:       /CN=D1D8C77A34CB2B0044058D74160F7A20912778C1
Certificate serial:       76F81BA32EBD45A8D54A7FCFCE5BCA51119B32DC
Authority key identifier: D1:D8:C7:7A:34:CB:2B:00:44:05:8D:74:16:0F:7A:20:91:27:78:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1D8C77A34CB2B0044058D74160F7A20912778C1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/1/3134332e3235352e3230322e302f32342d3234203d3e2038303735.roa
Signing time:             Thu 06 Mar 2025 19:00:01 +0000
ROA not before:           Thu 06 Mar 2025 18:55:01 +0000
ROA not after:            Thu 05 Mar 2026 19:00:01 +0000
asID:                     8075
IP address blocks:        143.255.202.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:f8:1b:a3:2e:bd:45:a8:d5:4a:7f:cf:ce:5b:ca:51:11:9b:32:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1D8C77A34CB2B0044058D74160F7A20912778C1
        Validity
            Not Before: Mar  6 18:55:01 2025 GMT
            Not After : Mar  5 19:00:01 2026 GMT
        Subject: CN=3082010A0282010100BD32CE18FD06FE87310F02F6DB06E0D36E281B28DE0B7FDD9F70C16343DFBD0CE8104B4708A45203CDC5D942BA8C0B8901229F3F3AD56B9DA2D6A253247D02ED0522E49E66340EDE2195CC8D769F29ADD0A310C3B7668E44FAAA920BCBB2762086DCC6693AE1CF306777E674E4029126F6EC23E92294066FDA12DDA232EACF36038BEE7A5938D9522D00B3B562346E7A80FB8854596498D42C8F520AC985FE0E97F9ABE6790F7FDF7DDB1CA1AC2CB4CB824BCC0CC7ABCC1C3A542C80F347F08CDDF180CFB65837C218EE463E6B7B3429073AB99F1C75699AF640E74A68BE453094D4A6F5EBFEFE001DD555F460FCFC794988FC70135B6EF9DDB40CA4CC4F7DB50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:32:ce:18:fd:06:fe:87:31:0f:02:f6:db:06:
                    e0:d3:6e:28:1b:28:de:0b:7f:dd:9f:70:c1:63:43:
                    df:bd:0c:e8:10:4b:47:08:a4:52:03:cd:c5:d9:42:
                    ba:8c:0b:89:01:22:9f:3f:3a:d5:6b:9d:a2:d6:a2:
                    53:24:7d:02:ed:05:22:e4:9e:66:34:0e:de:21:95:
                    cc:8d:76:9f:29:ad:d0:a3:10:c3:b7:66:8e:44:fa:
                    aa:92:0b:cb:b2:76:20:86:dc:c6:69:3a:e1:cf:30:
                    67:77:e6:74:e4:02:91:26:f6:ec:23:e9:22:94:06:
                    6f:da:12:dd:a2:32:ea:cf:36:03:8b:ee:7a:59:38:
                    d9:52:2d:00:b3:b5:62:34:6e:7a:80:fb:88:54:59:
                    64:98:d4:2c:8f:52:0a:c9:85:fe:0e:97:f9:ab:e6:
                    79:0f:7f:df:7d:db:1c:a1:ac:2c:b4:cb:82:4b:cc:
                    0c:c7:ab:cc:1c:3a:54:2c:80:f3:47:f0:8c:dd:f1:
                    80:cf:b6:58:37:c2:18:ee:46:3e:6b:7b:34:29:07:
                    3a:b9:9f:1c:75:69:9a:f6:40:e7:4a:68:be:45:30:
                    94:d4:a6:f5:eb:fe:fe:00:1d:d5:55:f4:60:fc:fc:
                    79:49:88:fc:70:13:5b:6e:f9:dd:b4:0c:a4:cc:4f:
                    7d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:5C:A0:15:60:C7:09:9E:CA:07:E9:54:D7:11:B0:CA:D1:90:B5:A7
            X509v3 Authority Key Identifier:
                keyid:D1:D8:C7:7A:34:CB:2B:00:44:05:8D:74:16:0F:7A:20:91:27:78:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/1/D1D8C77A34CB2B0044058D74160F7A20912778C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1D8C77A34CB2B0044058D74160F7A20912778C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FVwhhkC9qr9bnA6kabkMdZHFPoSMkDmvJRV2e1DkCiL3/1/3134332e3235352e3230322e302f32342d3234203d3e2038303735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:d7:87:07:5e:d8:56:9a:45:df:1f:ff:bc:7c:b0:c7:73:40:
         64:92:b7:39:64:b9:4f:2d:9a:64:42:24:95:e5:70:45:b0:5d:
         45:e6:ca:46:c7:e3:bc:06:fb:49:e7:50:1a:a1:b3:c8:83:91:
         c0:08:de:17:0d:45:9c:29:15:d3:a5:a6:97:07:3a:79:09:61:
         fc:3f:e3:0f:3b:5e:85:d2:0b:32:30:0a:ab:fd:6b:59:7d:84:
         7e:2d:9b:d5:98:c1:f3:0f:9e:59:03:39:9a:4e:2f:c7:18:fb:
         3c:8a:e5:19:47:8b:b8:57:df:bf:dc:7f:1a:c0:bc:b3:7e:7b:
         12:0b:53:3d:9f:7a:b5:2b:5f:54:ef:af:b9:61:1b:47:ee:d8:
         a8:47:95:86:b3:15:6e:43:0d:f2:c3:1b:6c:23:96:af:a1:58:
         2d:ad:a4:ce:4a:f0:99:ee:57:0a:50:a9:09:7d:20:df:74:95:
         3b:1c:77:f0:06:0f:71:b6:68:ac:d1:b0:93:60:ee:91:73:63:
         4c:a6:27:34:4c:32:bc:f3:ef:e7:10:8d:e5:fd:ab:aa:7f:65:
         a2:e6:e5:6e:4b:19:4e:19:81:12:08:49:e6:c5:48:47:63:b1:
         d0:0a:44:17:31:d0:c7:0e:bf:5e:90:7f:c4:6a:3f:e3:a9:2d:
         b8:fb:b2:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:06:23 2025 by rpki-client