Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/3137372e3132342e3137302e302f32332d3233203d3e20323632333237.roa
File:                     3137372e3132342e3137302e302f32332d3233203d3e20323632333237.roa (raw, json)
Hash identifier:          VJRylR2c7+4+G62wR4T+W/QJ9/UmG8erWJMS2O/kTAM=
Subject key identifier:   06:58:DB:09:F4:87:5E:D0:BA:DA:0A:27:D5:99:89:94:69:2D:83:02
Certificate issuer:       /CN=10A21AD56D90452B44D9C0D9643B7B2670A9A69C
Certificate serial:       4B6EA9C4B2F82D3E9C65C7B26620A1C4334008D5
Authority key identifier: 10:A2:1A:D5:6D:90:45:2B:44:D9:C0:D9:64:3B:7B:26:70:A9:A6:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10A21AD56D90452B44D9C0D9643B7B2670A9A69C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/3137372e3132342e3137302e302f32332d3233203d3e20323632333237.roa
Signing time:             Wed 19 Apr 2023 22:00:02 +0000
ROA not before:           Wed 19 Apr 2023 21:55:02 +0000
ROA not after:            Fri 19 Apr 2024 22:00:02 +0000
asID:                     262327
IP address blocks:        177.124.170.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:6e:a9:c4:b2:f8:2d:3e:9c:65:c7:b2:66:20:a1:c4:33:40:08:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10A21AD56D90452B44D9C0D9643B7B2670A9A69C
        Validity
            Not Before: Apr 19 21:55:02 2023 GMT
            Not After : Apr 19 22:00:02 2024 GMT
        Subject: CN=3082010A0282010100DAC4B7F7A7CAFF8FDABDB7931A9646AB3B4F0BF266C0BC8D2E062DE19C58129F556A81758644ADD0831D5FD12278A61436389209D58D31D6C8BA481F6251B8575A5B0683A908B706BB7B9509D50758D40B6CF515555875CF947793DF7CABE58596A72675EED862886CB6A35B2F7C286FB6A0F2627FE17499EFCC630EA748168BB4CAFE7C30E8FE91F6EA55767929EC395BB3FE691192FE5F65EE0A7AE11AAD7839C1F2886C4C5F8DC0C412901987D796CCDCF3D4C9CA07B3F31B88DF668D1F5024C2DD747B9240B320D7EF281B489D416F04FD69B8EC9DFEC543C0BAF8A7A8F44C8DFC4D59CABBBA6770528A555AF7B2EB0BFF0E600344C698324E0272EACF3B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c4:b7:f7:a7:ca:ff:8f:da:bd:b7:93:1a:96:
                    46:ab:3b:4f:0b:f2:66:c0:bc:8d:2e:06:2d:e1:9c:
                    58:12:9f:55:6a:81:75:86:44:ad:d0:83:1d:5f:d1:
                    22:78:a6:14:36:38:92:09:d5:8d:31:d6:c8:ba:48:
                    1f:62:51:b8:57:5a:5b:06:83:a9:08:b7:06:bb:7b:
                    95:09:d5:07:58:d4:0b:6c:f5:15:55:58:75:cf:94:
                    77:93:df:7c:ab:e5:85:96:a7:26:75:ee:d8:62:88:
                    6c:b6:a3:5b:2f:7c:28:6f:b6:a0:f2:62:7f:e1:74:
                    99:ef:cc:63:0e:a7:48:16:8b:b4:ca:fe:7c:30:e8:
                    fe:91:f6:ea:55:76:79:29:ec:39:5b:b3:fe:69:11:
                    92:fe:5f:65:ee:0a:7a:e1:1a:ad:78:39:c1:f2:88:
                    6c:4c:5f:8d:c0:c4:12:90:19:87:d7:96:cc:dc:f3:
                    d4:c9:ca:07:b3:f3:1b:88:df:66:8d:1f:50:24:c2:
                    dd:74:7b:92:40:b3:20:d7:ef:28:1b:48:9d:41:6f:
                    04:fd:69:b8:ec:9d:fe:c5:43:c0:ba:f8:a7:a8:f4:
                    4c:8d:fc:4d:59:ca:bb:ba:67:70:52:8a:55:5a:f7:
                    b2:eb:0b:ff:0e:60:03:44:c6:98:32:4e:02:72:ea:
                    cf:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:58:DB:09:F4:87:5E:D0:BA:DA:0A:27:D5:99:89:94:69:2D:83:02
            X509v3 Authority Key Identifier:
                keyid:10:A2:1A:D5:6D:90:45:2B:44:D9:C0:D9:64:3B:7B:26:70:A9:A6:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/10A21AD56D90452B44D9C0D9643B7B2670A9A69C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10A21AD56D90452B44D9C0D9643B7B2670A9A69C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/3137372e3132342e3137302e302f32332d3233203d3e20323632333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:fe:95:87:43:67:28:94:74:1e:49:68:be:c2:4d:5b:c7:84:
         ad:95:ef:2a:b9:21:d5:05:11:49:66:26:b6:dd:bd:5b:c0:04:
         4e:6c:3d:0a:cf:55:ad:1b:64:c3:bb:3b:1c:ee:9f:64:a0:05:
         10:a4:7c:35:4d:42:e4:ff:1d:8a:da:31:70:b6:29:a9:cc:a7:
         d4:84:d8:a9:93:b7:bd:71:8a:59:3a:64:f2:49:7a:4c:05:62:
         db:01:7b:a2:4f:92:3e:6a:f4:a0:f7:ff:a7:2e:6e:dd:07:64:
         b8:36:71:59:4b:1a:1c:2d:c6:18:7f:c8:7a:c0:c2:40:e0:48:
         0e:a2:60:3c:b8:ff:f5:0f:88:8e:bb:f8:b9:0b:55:e5:2e:b2:
         3e:0e:1f:8a:23:fe:58:12:5e:e2:35:45:b6:64:58:80:61:29:
         03:75:46:20:3f:32:0d:01:23:5e:11:82:b2:0f:11:13:c4:8d:
         ff:07:c0:a6:1c:76:5d:5d:9a:6f:85:0f:d1:f5:46:d0:35:90:
         eb:85:3e:b5:8c:3e:80:e3:e3:e8:2e:e1:dc:d2:b8:6a:d8:2a:
         8b:d2:36:70:30:76:8e:c3:b6:21:ae:57:bc:51:d9:1b:af:24:
         72:c7:55:9a:ce:5e:3a:c3:fd:53:28:da:76:c2:c5:90:73:30:
         d7:10:7c:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:47 2024 by rpki-client on console-fra.rpki-client.org