Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/3137392e3139312e35362e302f32332d3233203d3e20323632333237.roa
File:                     3137392e3139312e35362e302f32332d3233203d3e20323632333237.roa (raw, json)
Hash identifier:          lJm112Un9WYmq20xhycGrwVgSIdKNz+ioMIKF+LyrkU=
Subject key identifier:   9F:10:A6:49:F0:91:F7:86:23:DB:17:E7:BE:E5:3A:51:C2:21:3F:DB
Certificate issuer:       /CN=10A21AD56D90452B44D9C0D9643B7B2670A9A69C
Certificate serial:       1767879D434BBFB2C1B3C437E8BFD94C91FDAE3E
Authority key identifier: 10:A2:1A:D5:6D:90:45:2B:44:D9:C0:D9:64:3B:7B:26:70:A9:A6:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10A21AD56D90452B44D9C0D9643B7B2670A9A69C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/3137392e3139312e35362e302f32332d3233203d3e20323632333237.roa
Signing time:             Wed 19 Apr 2023 22:00:00 +0000
ROA not before:           Wed 19 Apr 2023 21:55:00 +0000
ROA not after:            Fri 19 Apr 2024 22:00:00 +0000
asID:                     262327
IP address blocks:        179.191.56.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:67:87:9d:43:4b:bf:b2:c1:b3:c4:37:e8:bf:d9:4c:91:fd:ae:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10A21AD56D90452B44D9C0D9643B7B2670A9A69C
        Validity
            Not Before: Apr 19 21:55:00 2023 GMT
            Not After : Apr 19 22:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d7:8b:fa:92:bb:50:5c:00:e5:8c:d2:f9:d5:
                    59:00:55:f2:17:1f:62:48:48:70:be:60:f3:7a:c9:
                    05:f4:d0:5f:e4:ec:13:80:76:c5:eb:f3:dc:9a:36:
                    d3:68:5d:82:42:e8:4c:95:49:ab:ca:e9:b1:0b:95:
                    c9:fb:34:c8:90:59:7b:23:26:15:2f:5f:1b:e6:d6:
                    e0:b4:56:c5:b5:83:6b:9b:78:9d:b1:e8:e8:de:31:
                    e4:f8:19:98:9f:39:fc:03:ff:eb:db:f4:c9:1a:7b:
                    b2:78:23:75:c4:73:a0:9d:bc:d6:58:d8:13:99:68:
                    c9:c7:73:bd:7b:ed:5a:02:00:8b:f3:1b:06:67:a1:
                    7f:b3:36:b3:74:8d:42:c2:cb:b7:88:85:40:44:ae:
                    7a:47:56:2a:aa:e5:ad:65:fd:be:9c:f2:d4:8e:fd:
                    da:5d:53:93:f1:ef:f2:bc:2b:cd:f4:0b:fa:de:7e:
                    bd:f3:0c:fe:fe:7b:4d:c8:ac:1d:3c:af:c8:99:d5:
                    91:5a:b6:2b:00:7e:bf:d0:92:86:5b:02:90:01:19:
                    85:2f:a0:ca:51:2c:1e:1b:5b:70:75:03:37:c9:3a:
                    31:db:88:8c:84:28:54:4f:b5:9e:16:06:f8:81:a7:
                    69:a1:fa:02:70:43:43:60:ef:2a:df:d8:98:19:02:
                    0c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:10:A6:49:F0:91:F7:86:23:DB:17:E7:BE:E5:3A:51:C2:21:3F:DB
            X509v3 Authority Key Identifier:
                keyid:10:A2:1A:D5:6D:90:45:2B:44:D9:C0:D9:64:3B:7B:26:70:A9:A6:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/10A21AD56D90452B44D9C0D9643B7B2670A9A69C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10A21AD56D90452B44D9C0D9643B7B2670A9A69C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/3137392e3139312e35362e302f32332d3233203d3e20323632333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         30:e5:f5:ef:f1:54:fc:9a:d0:86:e6:d5:21:06:cb:71:86:31:
         c1:5f:fa:70:de:80:ba:3b:28:a0:b8:4d:62:3a:6c:24:0d:33:
         f3:e3:eb:6f:0d:13:13:ac:93:6e:71:6f:33:f9:25:d3:74:79:
         56:37:13:59:11:94:34:88:a6:c2:b1:5a:cc:9e:b2:7f:b6:6e:
         33:03:a1:13:74:b3:57:51:9c:89:94:42:33:a0:13:6c:bf:a6:
         80:db:6e:9c:9a:a9:38:c6:e8:6d:6f:f8:81:01:6e:57:4d:08:
         10:0d:ef:c3:b8:fa:16:65:48:d3:b8:fe:04:5b:3e:e9:1d:3b:
         60:e9:23:ca:00:48:06:f5:0c:9a:62:04:e9:99:56:2d:d2:af:
         47:ef:98:08:7b:41:2c:df:e8:9b:4a:74:57:73:e6:ad:72:e6:
         b2:2c:ff:55:72:f9:ca:6c:c7:01:68:3a:30:be:dc:fb:b9:55:
         2a:7e:e8:62:03:c2:31:e5:02:3b:23:af:db:77:ea:d5:45:2c:
         ec:77:d8:79:40:09:29:b8:b4:c4:3b:86:2d:c6:81:4f:f8:8b:
         da:a2:46:d1:5b:c2:02:fa:56:18:c5:f2:13:27:c9:2b:45:b2:
         57:93:75:b9:55:53:37:f3:44:02:9d:e4:fd:35:db:2a:8c:c4:
         83:30:f8:e4
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUF2eHnUNLv7LBs8Q36L/ZTJH9rj4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBBMjFBRDU2RDkwNDUyQjQ0RDlDMEQ5NjQzQjdCMjY3
MEE5QTY5QzAeFw0yMzA0MTkyMTU1MDBaFw0yNDA0MTkyMjAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0ZENzhCRkE5MkJCNTA1QzAw
RTU4Q0QyRjlENTU5MDA1NUYyMTcxRjYyNDg0ODcwQkU2MEYzN0FDOTA1RjREMDVG
RTRFQzEzODA3NkM1RUJGM0RDOUEzNkQzNjg1RDgyNDJFODRDOTU0OUFCQ0FFOUIx
MEI5NUM5RkIzNEM4OTA1OTdCMjMyNjE1MkY1RjFCRTZENkUwQjQ1NkM1QjU4MzZC
OUI3ODlEQjFFOEU4REUzMUU0RjgxOTk4OUYzOUZDMDNGRkVCREJGNEM5MUE3QkIy
NzgyMzc1QzQ3M0EwOURCQ0Q2NThEODEzOTk2OEM5Qzc3M0JEN0JFRDVBMDIwMDhC
RjMxQjA2NjdBMTdGQjMzNkIzNzQ4RDQyQzJDQkI3ODg4NTQwNDRBRTdBNDc1NjJB
QUFFNUFENjVGREJFOUNGMkQ0OEVGRERBNUQ1MzkzRjFFRkYyQkMyQkNERjQwQkZB
REU3RUJERjMwQ0ZFRkU3QjREQzhBQzFEM0NBRkM4OTlENTkxNUFCNjJCMDA3RUJG
RDA5Mjg2NUIwMjkwMDExOTg1MkZBMENBNTEyQzFFMUI1QjcwNzUwMzM3QzkzQTMx
REI4ODhDODQyODU0NEZCNTlFMTYwNkY4ODFBNzY5QTFGQTAyNzA0MzQzNjBFRjJB
REZEODk4MTkwMjBDMEQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAz9eL+pK7UFwA5YzS+dVZAFXyFx9iSEhwvmDzeskF9NBf5OwTgHbF
6/PcmjbTaF2CQuhMlUmryumxC5XJ+zTIkFl7IyYVL18b5tbgtFbFtYNrm3idsejo
3jHk+BmYnzn8A//r2/TJGnuyeCN1xHOgnbzWWNgTmWjJx3O9e+1aAgCL8xsGZ6F/
szazdI1Cwsu3iIVARK56R1YqquWtZf2+nPLUjv3aXVOT8e/yvCvN9Av63n698wz+
/ntNyKwdPK/ImdWRWrYrAH6/0JKGWwKQARmFL6DKUSweG1twdQM3yTox24iMhChU
T7WeFgb4gadpofoCcENDYO8q39iYGQIMDQIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FJ8QpknwkfeGI9sX577lOlHCIT/bMB8GA1UdIwQYMBaAFBCiGtVtkEUrRNnA2WQ7
eyZwqaacMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZwR0JVTXd6OE42N3N6
M3FDUmN2UUNiWFF5QXZKV1dvTVVrRmJpb1E4Z1Q5LzAvMTBBMjFBRDU2RDkwNDUy
QjQ0RDlDMEQ5NjQzQjdCMjY3MEE5QTY5Qy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xMEEyMUFENTZEOTA0NTJCNDREOUMwRDk2NDNCN0IyNjcwQTlB
NjlDLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GcEdCVU13ejhONjdzejNxQ1Jj
dlFDYlhReUF2SldXb01Va0ZiaW9ROGdUOS8wLzMxMzczOTJlMzEzOTMxMmUzNTM2
MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMyMzMzMjM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
s784MA0GCSqGSIb3DQEBCwUAA4IBAQAw5fXv8VT8mtCG5tUhBstxhjHBX/pw3oC6
OyiguE1iOmwkDTPz4+tvDRMTrJNucW8z+SXTdHlWNxNZEZQ0iKbCsVrMnrJ/tm4z
A6ETdLNXUZyJlEIzoBNsv6aA226cmqk4xuhtb/iBAW5XTQgQDe/DuPoWZUjTuP4E
Wz7pHTtg6SPKAEgG9QyaYgTpmVYt0q9H75gIe0Es3+ibSnRXc+atcuayLP9VcvnK
bMcBaDowvtz7uVUqfuhiA8Ix5QI7I6/bd+rVRSzsd9h5QAkpuLTEO4YtxoFP+Iva
okbRW8IC+lYYxfITJ8krRbJXk3W5VVM380QCneT9NdsqjMSDMPjk
-----END CERTIFICATE-----
Generated at Mon Jun 9 10:07:25 2025 by rpki-client