Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/3137372e3132342e3137312e302f32342d3234203d3e20323632333237.roa
File:                     3137372e3132342e3137312e302f32342d3234203d3e20323632333237.roa (raw, json)
Hash identifier:          2Z+oi8LlsMRK3ijCpmWOJnVqExnNYix2XeOIG7oej1U=
Subject key identifier:   9C:47:EE:5A:F9:D2:88:1E:A5:F1:F1:CC:12:5C:89:47:46:C1:C1:4B
Certificate issuer:       /CN=10A21AD56D90452B44D9C0D9643B7B2670A9A69C
Certificate serial:       0D6E38792936F42F8C85FF7055DCA05A241B991E
Authority key identifier: 10:A2:1A:D5:6D:90:45:2B:44:D9:C0:D9:64:3B:7B:26:70:A9:A6:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10A21AD56D90452B44D9C0D9643B7B2670A9A69C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/3137372e3132342e3137312e302f32342d3234203d3e20323632333237.roa
Signing time:             Wed 19 Apr 2023 22:00:02 +0000
ROA not before:           Wed 19 Apr 2023 21:55:02 +0000
ROA not after:            Fri 19 Apr 2024 22:00:02 +0000
asID:                     262327
IP address blocks:        177.124.171.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:6e:38:79:29:36:f4:2f:8c:85:ff:70:55:dc:a0:5a:24:1b:99:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10A21AD56D90452B44D9C0D9643B7B2670A9A69C
        Validity
            Not Before: Apr 19 21:55:02 2023 GMT
            Not After : Apr 19 22:00:02 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:de:3e:38:20:7a:a6:35:04:b0:c0:a1:f5:c1:
                    6e:a2:14:b1:c8:bc:e0:5e:69:00:c1:07:1a:f2:3e:
                    19:99:31:ee:60:64:89:0e:e7:5d:bd:41:24:ce:14:
                    9a:ce:40:b7:33:08:94:48:ec:61:44:a9:4a:3a:0a:
                    a3:16:61:96:d5:2a:b0:a7:a9:fc:8c:a2:93:af:44:
                    6b:ea:88:1e:9d:d2:19:b6:34:54:8b:a8:11:e7:67:
                    d4:03:e1:f2:46:0b:bd:8e:4a:25:e5:7e:63:0e:13:
                    7f:1c:5e:8f:eb:55:64:13:2c:c3:81:65:fc:7f:29:
                    41:c5:0a:96:84:0d:6c:e2:4a:c0:8f:61:cc:08:38:
                    df:c8:e8:ad:e6:5a:2b:4f:89:6b:57:d7:ea:ef:a7:
                    70:ab:d6:89:e3:c3:a8:8f:9b:49:fd:43:b4:3c:74:
                    7f:eb:c4:ff:21:42:93:db:a1:1b:1c:4d:17:65:e1:
                    0c:fc:26:24:38:29:be:d1:ed:36:6e:23:97:78:ad:
                    4f:16:95:30:2f:cb:46:24:89:bb:b7:8e:c1:f3:5a:
                    7f:4f:cc:b9:a7:35:79:34:0a:77:fc:a2:64:18:60:
                    e4:02:b4:7b:37:1c:66:78:a4:6b:12:8a:c1:2d:34:
                    16:6b:94:2e:4c:d7:68:12:f7:62:e8:f0:69:a2:c4:
                    74:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:47:EE:5A:F9:D2:88:1E:A5:F1:F1:CC:12:5C:89:47:46:C1:C1:4B
            X509v3 Authority Key Identifier:
                keyid:10:A2:1A:D5:6D:90:45:2B:44:D9:C0:D9:64:3B:7B:26:70:A9:A6:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/10A21AD56D90452B44D9C0D9643B7B2670A9A69C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10A21AD56D90452B44D9C0D9643B7B2670A9A69C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/3137372e3132342e3137312e302f32342d3234203d3e20323632333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:7a:ed:57:f8:c3:b6:47:62:91:29:d3:52:73:b2:c2:bf:ee:
         27:e9:fd:85:ca:49:cf:a8:9a:a9:7a:39:4f:70:9d:84:3e:3c:
         65:00:c7:2f:f4:7d:5e:bd:a1:3d:e0:41:ce:63:be:69:ed:4f:
         c1:64:04:51:88:64:2e:20:96:b2:a0:e0:b4:76:cb:3d:0b:8e:
         8f:82:69:0a:07:bf:0b:52:35:dd:a7:0c:a8:27:86:13:25:6c:
         54:c8:0c:fb:b2:32:b9:e5:f3:10:81:e6:f9:6f:13:3e:35:49:
         07:9a:91:56:6e:c9:7c:cf:b5:dc:46:65:4a:38:1d:52:a4:4a:
         26:63:c3:0e:35:b2:e6:3a:52:b5:2e:8d:5c:10:f9:87:05:50:
         67:c4:dc:fd:e7:ec:ba:44:c2:4d:0e:fa:93:8a:3d:e2:09:0a:
         fe:e0:45:30:90:c1:63:2a:41:e8:f5:bd:da:83:bd:8b:c7:1f:
         e9:38:60:66:41:bd:ac:60:3d:35:3e:10:72:2b:f8:88:04:9f:
         6e:22:ef:4f:0c:7e:13:c5:99:16:06:fe:13:b8:ae:b3:43:c1:
         a8:bb:db:97:26:f0:39:07:66:e0:6d:0d:3f:dd:d0:8d:ae:97:
         d3:a4:4f:eb:01:96:e0:ee:96:df:93:e3:9f:66:7a:ad:20:4e:
         47:49:7b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:47 2024 by rpki-client on console-fra.rpki-client.org