Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/3137372e3132342e3136382e302f32342d3234203d3e20323632333237.roa
File:                     3137372e3132342e3136382e302f32342d3234203d3e20323632333237.roa (raw, json)
Hash identifier:          UG+hudFH+sNtfM2HBWzxF4Meuijq8y0KA3y0hb1eRlc=
Subject key identifier:   FB:CC:F2:F7:E2:37:41:A6:6E:0D:4B:45:20:DB:54:F5:0A:4A:F1:62
Certificate issuer:       /CN=10A21AD56D90452B44D9C0D9643B7B2670A9A69C
Certificate serial:       41B30C1E62FC726114135228FED00876841E115E
Authority key identifier: 10:A2:1A:D5:6D:90:45:2B:44:D9:C0:D9:64:3B:7B:26:70:A9:A6:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10A21AD56D90452B44D9C0D9643B7B2670A9A69C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/3137372e3132342e3136382e302f32342d3234203d3e20323632333237.roa
Signing time:             Wed 19 Apr 2023 22:00:02 +0000
ROA not before:           Wed 19 Apr 2023 21:55:02 +0000
ROA not after:            Fri 19 Apr 2024 22:00:02 +0000
asID:                     262327
IP address blocks:        177.124.168.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:b3:0c:1e:62:fc:72:61:14:13:52:28:fe:d0:08:76:84:1e:11:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10A21AD56D90452B44D9C0D9643B7B2670A9A69C
        Validity
            Not Before: Apr 19 21:55:02 2023 GMT
            Not After : Apr 19 22:00:02 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:56:f8:66:f8:4b:e8:f2:a3:7a:14:15:44:a9:
                    62:6a:31:cf:30:0b:da:2d:6f:f7:6b:b7:a8:76:96:
                    48:e8:fc:f6:8b:42:45:d9:e9:b2:d9:7a:95:63:b8:
                    78:da:07:6f:2f:d5:36:bb:27:fa:d9:1c:01:97:c5:
                    b6:ed:96:3e:92:3c:f1:89:0f:7b:e7:7a:56:0d:70:
                    ab:5d:09:69:40:83:7b:1a:a9:61:8b:5a:8e:d5:ee:
                    51:15:c8:ef:64:89:e7:cc:08:09:52:e2:3e:ca:c8:
                    f2:b3:c0:ba:f5:88:5c:cf:fb:6d:18:3a:43:04:8f:
                    d1:2a:14:44:c1:e3:80:9a:d2:f7:38:13:d4:76:e8:
                    56:72:a2:26:03:4e:f8:e3:c8:f6:5c:d8:ce:f4:92:
                    5e:f3:21:40:ee:a2:94:6c:b7:4f:cb:e3:e3:27:33:
                    21:51:b4:61:ce:5f:b8:fa:60:57:df:3d:10:e7:24:
                    15:6f:90:b1:81:2a:0f:d8:4b:cb:ed:3f:3f:22:58:
                    c9:2d:69:c2:06:aa:23:70:4a:dc:77:1e:e7:26:89:
                    6f:fa:97:32:4a:e0:79:38:80:07:a3:74:0c:03:78:
                    68:b9:ae:a0:43:f5:52:89:7c:5b:7d:4a:ca:99:ec:
                    77:6b:51:e0:c8:ad:2c:56:13:e0:76:08:73:67:09:
                    a8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:CC:F2:F7:E2:37:41:A6:6E:0D:4B:45:20:DB:54:F5:0A:4A:F1:62
            X509v3 Authority Key Identifier:
                keyid:10:A2:1A:D5:6D:90:45:2B:44:D9:C0:D9:64:3B:7B:26:70:A9:A6:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/10A21AD56D90452B44D9C0D9643B7B2670A9A69C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10A21AD56D90452B44D9C0D9643B7B2670A9A69C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/3137372e3132342e3136382e302f32342d3234203d3e20323632333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:f3:a5:c8:2f:b5:a5:ba:94:ca:1c:8b:e4:ec:cd:a8:1e:63:
         fc:98:2f:fa:d4:5a:11:4e:5f:84:c4:91:d5:fd:6a:66:be:2d:
         10:43:a3:7c:5f:37:1f:cd:fe:c0:0a:c2:8e:53:2f:a5:4e:f8:
         04:29:c0:08:cd:06:8a:11:f6:ed:ce:aa:6d:5d:07:59:0b:41:
         c4:42:54:a6:f3:6e:35:14:ad:90:cb:15:a3:64:9a:a2:6f:54:
         39:a2:2e:49:e2:47:3f:f7:79:b7:53:80:de:d0:de:9c:4f:49:
         af:0e:9e:45:6e:35:b8:d1:36:e4:c2:7d:41:a2:ce:53:81:a4:
         4d:7f:0b:cc:63:a1:85:b1:c7:1e:0a:b2:cf:3c:9f:af:3e:94:
         c0:24:6c:96:7a:b9:ac:5b:87:ed:0a:17:30:17:1c:b9:05:9c:
         be:99:56:6e:d7:39:04:84:28:0d:dc:73:38:b0:58:10:a8:95:
         1f:0b:86:22:9b:c0:36:6a:ae:78:a0:85:d6:dc:c4:f0:18:ed:
         f0:20:e2:71:70:21:5a:49:0c:b0:a8:ee:37:26:4d:5c:1d:a7:
         17:75:a3:45:e8:9d:ac:b0:18:ec:6f:15:48:24:9a:ff:95:62:
         ec:44:9b:a7:81:55:9d:7f:09:5a:07:94:53:6c:5f:d4:a9:94:
         f5:ec:23:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:47 2024 by rpki-client on console-fra.rpki-client.org