Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e37362e36342e302f31392d3234203d3e203238353733.roa
File:                     3230312e37362e36342e302f31392d3234203d3e203238353733.roa (raw, json)
Hash identifier:          yVJxfOCvv5nzRbcpD3jOLGq1FX76la79m5pRLmKp3xI=
Subject key identifier:   44:AC:3C:A1:BA:22:74:DC:3A:FF:81:37:37:7C:92:E3:48:28:E2:1B
Certificate issuer:       /CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
Certificate serial:       6EF7030474BB8987AFECE81CCB7D3AE2F6ADC9EA
Authority key identifier: 5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e37362e36342e302f31392d3234203d3e203238353733.roa
Signing time:             Wed 03 Apr 2024 18:31:45 +0000
ROA not before:           Wed 03 Apr 2024 18:26:45 +0000
ROA not after:            Wed 02 Apr 2025 18:31:45 +0000
asID:                     28573
IP address blocks:        201.76.64.0/19 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:f7:03:04:74:bb:89:87:af:ec:e8:1c:cb:7d:3a:e2:f6:ad:c9:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A
        Validity
            Not Before: Apr  3 18:26:45 2024 GMT
            Not After : Apr  2 18:31:45 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:9f:1b:18:02:cd:9e:67:6d:87:e1:e0:6c:e1:
                    fe:d7:3a:1f:b7:9d:7a:80:3e:30:fe:ab:3d:74:63:
                    b6:4e:ea:11:6d:86:c7:f0:2a:32:9b:1d:f1:c8:3f:
                    e1:c2:37:fd:76:eb:8e:87:8d:4c:e4:e1:08:17:6e:
                    e1:3c:fc:c3:37:a9:83:68:e9:8c:ad:dc:2b:f1:41:
                    42:62:c2:68:4e:0c:56:5b:c4:13:a0:50:21:a1:3f:
                    a9:90:8f:b5:85:2c:09:d6:c2:30:42:25:ad:63:99:
                    67:9e:c2:d6:44:2b:49:7c:a4:25:ff:a8:78:d6:9f:
                    14:0a:73:ec:d4:2c:14:62:26:b5:e9:8f:1f:4a:92:
                    da:04:52:ed:6e:e4:19:fd:a7:20:77:f6:fc:9d:1a:
                    19:27:c4:b8:60:25:02:11:b4:e2:7c:62:29:21:c5:
                    28:0f:a3:ae:8f:cc:1f:96:6a:48:4f:13:d8:da:91:
                    44:6c:50:e3:70:c4:4a:b2:14:b0:be:68:21:33:26:
                    d5:99:c9:ef:8c:48:e4:c2:d5:74:ed:7b:32:63:f4:
                    fd:07:78:2d:d2:8c:d1:ee:d1:4e:4a:5c:60:73:bd:
                    d6:ef:fe:2b:48:83:31:2c:4a:03:f8:94:69:3d:5f:
                    8f:24:01:bc:dd:bd:67:37:3d:69:fe:bd:0d:99:26:
                    82:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:AC:3C:A1:BA:22:74:DC:3A:FF:81:37:37:7C:92:E3:48:28:E2:1B
            X509v3 Authority Key Identifier:
                keyid:5F:A0:2B:6F:8F:4D:BB:D9:8A:C9:A9:D0:C7:7B:05:21:D5:A6:BD:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5FA02B6F8F4DBBD98AC9A9D0C77B0521D5A6BD0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FQAqyYyGLWxxRbH5Kcphz5179dwcBq8hYNc1QsiakML2/1/3230312e37362e36342e302f31392d3234203d3e203238353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.76.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         04:a4:7b:73:f3:03:07:73:68:39:95:20:fe:ff:18:0e:d5:69:
         2e:89:96:3c:43:84:2a:e9:ab:9b:2f:92:3e:43:6a:2b:69:41:
         e5:37:54:27:43:27:f7:dc:2e:be:de:53:06:56:58:5d:b5:83:
         62:56:ae:fc:95:f1:27:cc:47:0f:61:d7:42:98:3f:26:6f:19:
         9c:4b:79:09:1b:dd:88:12:e8:9e:60:2f:5a:ad:ce:77:d5:6a:
         e4:8f:ea:9c:a5:40:38:23:ee:0e:67:5a:27:c2:2f:09:15:10:
         59:93:a2:44:c2:d7:b7:aa:d4:3a:d1:7f:2f:b9:b8:37:68:93:
         c3:b6:c6:e3:8c:9a:c9:06:6b:f4:31:f4:30:5e:14:b6:f6:e2:
         3f:78:96:61:31:94:f0:f3:bd:db:05:ce:27:90:c6:7d:2b:f5:
         93:1f:13:53:ea:61:f8:65:a7:17:e5:a0:c4:48:f0:f8:b1:7f:
         5d:d9:82:36:26:3a:fa:b8:ae:d2:4e:fc:ad:25:85:7d:93:44:
         a4:33:11:fc:ab:8e:3f:4e:6c:ca:23:58:eb:2d:bc:1b:1e:25:
         bc:e5:74:68:de:d2:02:c3:a4:df:fc:d8:d0:37:d5:25:2a:4b:
         d7:26:e3:0e:d9:a2:55:75:ae:26:79:3f:7d:b8:99:ed:35:e0:
         43:42:b8:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----