Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/3137372e3132342e3136382e302f32322d3232203d3e20323632333237.roa
File:                     3137372e3132342e3136382e302f32322d3232203d3e20323632333237.roa (raw, json)
Hash identifier:          Xjrwast5Kg/JCKnYZ93OQQxPb8in6dz3I9rCdO1+Icg=
Subject key identifier:   77:F9:79:E9:37:66:50:D3:13:1B:65:1E:3E:07:71:9B:A2:7C:2C:CE
Certificate issuer:       /CN=10A21AD56D90452B44D9C0D9643B7B2670A9A69C
Certificate serial:       3E1DBAF8824081C6F05FE9BB790A5E50D63418C9
Authority key identifier: 10:A2:1A:D5:6D:90:45:2B:44:D9:C0:D9:64:3B:7B:26:70:A9:A6:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10A21AD56D90452B44D9C0D9643B7B2670A9A69C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/3137372e3132342e3136382e302f32322d3232203d3e20323632333237.roa
Signing time:             Wed 19 Apr 2023 22:00:02 +0000
ROA not before:           Wed 19 Apr 2023 21:55:02 +0000
ROA not after:            Fri 19 Apr 2024 22:00:02 +0000
asID:                     262327
IP address blocks:        177.124.168.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:1d:ba:f8:82:40:81:c6:f0:5f:e9:bb:79:0a:5e:50:d6:34:18:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10A21AD56D90452B44D9C0D9643B7B2670A9A69C
        Validity
            Not Before: Apr 19 21:55:02 2023 GMT
            Not After : Apr 19 22:00:02 2024 GMT
        Subject: CN=3082010A0282010100B969537123E813A55113B94458F6A430669243AABC59655163F4D674CD2709046CD4FC153C34BCFEA39443D6895BCE4B34666F004A92409C43C91CE1B9F62DFA7B10A76B6EBCA22B135A041137822B2052AD5EBB5A32D904C7660BD93195DDE8A0F9C869A122C18146421043A0CDFDCA71F4DFE97EE81C675858D8C2856F7C2E2E875ECCC208CE72481FCD5AB72445219D8B8B8E4C116E8897F3B7412F473F05D5B2542642CAC81D9301A66E02511B849F1158422EFF67CE9FE2AD8609F726A332D4E44AB0B0C1E9265EA68E0855D50729AC17FA3672FEA240C0EC1533D666373D4943005587A7179E603ABAF0AF02B48BCE19B80A03F39C52B9CCA96269C71D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:69:53:71:23:e8:13:a5:51:13:b9:44:58:f6:
                    a4:30:66:92:43:aa:bc:59:65:51:63:f4:d6:74:cd:
                    27:09:04:6c:d4:fc:15:3c:34:bc:fe:a3:94:43:d6:
                    89:5b:ce:4b:34:66:6f:00:4a:92:40:9c:43:c9:1c:
                    e1:b9:f6:2d:fa:7b:10:a7:6b:6e:bc:a2:2b:13:5a:
                    04:11:37:82:2b:20:52:ad:5e:bb:5a:32:d9:04:c7:
                    66:0b:d9:31:95:dd:e8:a0:f9:c8:69:a1:22:c1:81:
                    46:42:10:43:a0:cd:fd:ca:71:f4:df:e9:7e:e8:1c:
                    67:58:58:d8:c2:85:6f:7c:2e:2e:87:5e:cc:c2:08:
                    ce:72:48:1f:cd:5a:b7:24:45:21:9d:8b:8b:8e:4c:
                    11:6e:88:97:f3:b7:41:2f:47:3f:05:d5:b2:54:26:
                    42:ca:c8:1d:93:01:a6:6e:02:51:1b:84:9f:11:58:
                    42:2e:ff:67:ce:9f:e2:ad:86:09:f7:26:a3:32:d4:
                    e4:4a:b0:b0:c1:e9:26:5e:a6:8e:08:55:d5:07:29:
                    ac:17:fa:36:72:fe:a2:40:c0:ec:15:33:d6:66:37:
                    3d:49:43:00:55:87:a7:17:9e:60:3a:ba:f0:af:02:
                    b4:8b:ce:19:b8:0a:03:f3:9c:52:b9:cc:a9:62:69:
                    c7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F9:79:E9:37:66:50:D3:13:1B:65:1E:3E:07:71:9B:A2:7C:2C:CE
            X509v3 Authority Key Identifier:
                keyid:10:A2:1A:D5:6D:90:45:2B:44:D9:C0:D9:64:3B:7B:26:70:A9:A6:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/10A21AD56D90452B44D9C0D9643B7B2670A9A69C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10A21AD56D90452B44D9C0D9643B7B2670A9A69C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/3137372e3132342e3136382e302f32322d3232203d3e20323632333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         86:11:1d:3b:41:33:93:40:41:fe:fa:24:32:fa:e6:51:99:ed:
         dd:9c:3f:6c:dd:52:ee:4e:b6:4e:d8:6f:16:c9:f5:25:c5:cf:
         24:43:2b:47:91:d7:fa:dc:a3:93:d4:1d:43:61:56:82:eb:d6:
         c4:fb:de:76:bd:ba:c2:a9:f7:92:45:06:ad:cd:b8:e1:e4:d8:
         51:b3:72:0b:29:ac:ba:2e:07:c7:10:bd:b0:fc:15:19:c3:31:
         36:f9:e3:96:04:50:37:05:cf:42:65:1c:81:de:3f:ad:46:63:
         4d:47:d3:0d:ca:1c:c1:52:36:c7:33:6f:01:24:3f:17:50:0a:
         6b:d7:f3:7e:ec:a6:e5:b0:44:8b:26:7d:36:8d:a1:29:ee:26:
         c6:b8:fd:2c:cc:16:1c:47:8a:08:cb:e6:75:a4:7c:3f:1b:ea:
         73:a1:c3:b0:77:0e:80:52:f4:4e:78:15:c7:b3:cd:c4:02:28:
         56:bc:d7:6f:95:f7:d0:dc:c6:2d:60:5e:55:b7:48:69:e0:20:
         e7:f5:b6:ce:44:12:da:48:48:47:9c:0a:91:1f:3a:58:67:6a:
         2a:33:f6:ff:49:f0:be:f4:97:7d:11:6c:54:1a:e0:c5:67:58:
         bd:a1:6c:08:1a:39:81:f2:08:b2:1c:6b:0d:21:12:c4:1d:c0:
         7f:68:4a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:47 2024 by rpki-client on console-fra.rpki-client.org