Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/3137372e3132342e3136392e302f32342d3234203d3e20323632333237.roa
File:                     3137372e3132342e3136392e302f32342d3234203d3e20323632333237.roa (raw, json)
Hash identifier:          ZuX7WLW86OhQHLI1VOOjv2GjNgsIr3grCPVSLCVA45A=
Subject key identifier:   C6:46:06:E4:0C:2D:79:0A:F6:D1:11:98:14:69:64:34:3C:5D:99:52
Certificate issuer:       /CN=10A21AD56D90452B44D9C0D9643B7B2670A9A69C
Certificate serial:       4A10ED6E1DFA8935E44F79E4F16AE97E84AF8AF3
Authority key identifier: 10:A2:1A:D5:6D:90:45:2B:44:D9:C0:D9:64:3B:7B:26:70:A9:A6:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10A21AD56D90452B44D9C0D9643B7B2670A9A69C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/3137372e3132342e3136392e302f32342d3234203d3e20323632333237.roa
Signing time:             Wed 19 Apr 2023 22:00:02 +0000
ROA not before:           Wed 19 Apr 2023 21:55:02 +0000
ROA not after:            Fri 19 Apr 2024 22:00:02 +0000
asID:                     262327
IP address blocks:        177.124.169.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:10:ed:6e:1d:fa:89:35:e4:4f:79:e4:f1:6a:e9:7e:84:af:8a:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10A21AD56D90452B44D9C0D9643B7B2670A9A69C
        Validity
            Not Before: Apr 19 21:55:02 2023 GMT
            Not After : Apr 19 22:00:02 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e3:2f:3e:5e:52:cc:5b:b4:87:70:f9:25:29:
                    68:21:c3:93:22:13:fa:eb:c0:6b:59:e8:66:12:51:
                    25:6e:b1:6d:d2:78:ee:b2:14:02:32:92:90:8e:4d:
                    f6:38:25:cc:5b:0f:66:41:4b:ad:ad:97:23:ab:a1:
                    1b:38:5b:66:69:f9:79:01:ec:7d:b3:83:5c:74:93:
                    22:e9:f4:db:1b:99:9b:6b:a0:57:e1:27:75:a7:5f:
                    a4:f9:c6:3d:2b:76:47:b2:bd:28:cf:6f:c4:39:37:
                    e1:61:df:fb:c8:d9:e7:d4:07:52:6b:a2:de:75:d9:
                    d7:07:0f:b3:a9:b8:19:75:2b:7f:5b:c7:ea:8d:ec:
                    b2:05:5d:ba:ff:01:5f:89:a7:fa:b1:96:b1:f1:a4:
                    75:e0:6f:4d:d1:14:bc:84:6c:c1:8b:16:72:31:c5:
                    c6:69:3e:84:69:4b:8d:30:5e:49:fb:2b:3d:a5:09:
                    88:e7:77:92:43:d3:e1:91:d9:42:7e:46:c6:c0:d8:
                    b8:0b:16:ea:43:e1:24:e2:2e:2b:2e:e7:26:bc:19:
                    a5:8b:54:3a:dd:12:9c:19:1a:4d:14:61:1b:48:10:
                    cf:26:d1:8e:a0:de:01:02:d9:df:72:bd:31:fc:7f:
                    2d:1a:bf:95:be:cf:b6:ce:c8:44:f5:85:6e:3d:d3:
                    4d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:46:06:E4:0C:2D:79:0A:F6:D1:11:98:14:69:64:34:3C:5D:99:52
            X509v3 Authority Key Identifier:
                keyid:10:A2:1A:D5:6D:90:45:2B:44:D9:C0:D9:64:3B:7B:26:70:A9:A6:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/10A21AD56D90452B44D9C0D9643B7B2670A9A69C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10A21AD56D90452B44D9C0D9643B7B2670A9A69C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/3137372e3132342e3136392e302f32342d3234203d3e20323632333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:9d:76:a6:e7:6c:a8:45:7e:8e:4a:3f:3a:b3:50:d4:67:66:
         10:df:07:f7:e0:a3:9a:44:fc:f3:d7:e4:33:9f:ad:dd:27:9f:
         4c:87:ac:a9:b8:d6:df:55:48:f3:6f:93:74:21:d3:ca:3f:6e:
         5d:fa:9b:2e:a8:bc:6f:e1:7a:19:fb:78:c5:89:a6:37:8a:f6:
         c9:df:2b:1e:30:de:01:0b:8c:26:0a:8b:ed:df:54:48:dd:ca:
         7e:3b:f6:ff:40:88:5a:19:cf:61:43:ef:fe:6c:1c:d6:01:b0:
         ef:45:9a:e0:67:97:9d:67:86:b0:f1:56:3b:8e:4e:47:b5:1e:
         54:06:76:fe:26:d8:0e:f1:8b:93:ed:41:be:55:50:6f:a9:89:
         b6:55:8c:51:cf:c0:fc:22:67:8d:f6:d0:96:df:d1:39:b4:9d:
         8b:e9:46:fd:06:ff:f4:b1:58:58:5b:ba:8b:34:4c:8c:62:c9:
         82:38:95:b8:f5:31:62:bc:73:55:7f:12:d9:7a:ae:53:89:e3:
         5a:d7:8d:ad:dc:db:5b:61:6c:ff:3b:18:35:74:8e:94:d5:c2:
         94:ec:c6:a0:b7:f0:84:5b:ac:b4:93:de:66:8c:6a:e8:c1:86:
         b0:9c:66:8e:94:dd:13:ae:1b:5e:5e:35:0a:f9:68:8f:65:ae:
         06:b2:91:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:47 2024 by rpki-client on console-fra.rpki-client.org