Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/3137372e3132392e36302e302f32322d3232203d3e20323632333237.roa
File:                     3137372e3132392e36302e302f32322d3232203d3e20323632333237.roa (raw, json)
Hash identifier:          VX7zZGW37dp2Z89mv2IPGvk3ZectrndgcJWaa5Cx4Ac=
Subject key identifier:   BD:08:44:C1:53:D7:82:66:24:25:8C:28:B2:42:D0:C9:99:63:A1:A3
Certificate issuer:       /CN=10A21AD56D90452B44D9C0D9643B7B2670A9A69C
Certificate serial:       2A12F8F03167B4FB75712D9015D5F33A679ED813
Authority key identifier: 10:A2:1A:D5:6D:90:45:2B:44:D9:C0:D9:64:3B:7B:26:70:A9:A6:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10A21AD56D90452B44D9C0D9643B7B2670A9A69C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/3137372e3132392e36302e302f32322d3232203d3e20323632333237.roa
Signing time:             Wed 19 Apr 2023 22:00:01 +0000
ROA not before:           Wed 19 Apr 2023 21:55:01 +0000
ROA not after:            Fri 19 Apr 2024 22:00:01 +0000
asID:                     262327
IP address blocks:        177.129.60.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:12:f8:f0:31:67:b4:fb:75:71:2d:90:15:d5:f3:3a:67:9e:d8:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10A21AD56D90452B44D9C0D9643B7B2670A9A69C
        Validity
            Not Before: Apr 19 21:55:01 2023 GMT
            Not After : Apr 19 22:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:68:e9:fb:94:3b:5e:fb:ae:08:63:9e:69:a2:
                    0f:20:15:86:e3:36:83:dc:c3:60:2d:bb:63:ff:f1:
                    5a:6f:86:a0:7a:7a:2d:58:42:df:0b:2d:3a:0e:3f:
                    fd:a0:f8:9b:05:eb:dd:2c:03:f3:e5:4c:6a:f3:8f:
                    80:5e:5f:54:d9:4d:cf:13:88:92:c2:9f:f3:99:92:
                    26:d8:82:b0:da:03:3a:04:6e:0a:65:6d:c1:fd:f8:
                    f6:57:6e:2e:9a:09:f6:e6:dc:2b:cf:c5:f6:20:29:
                    68:30:d2:4f:f3:19:4d:dc:23:92:5b:8e:4e:3d:0c:
                    a5:12:2d:6a:e6:c9:90:24:bb:ea:fb:c3:27:1f:94:
                    cc:62:1a:75:63:39:d5:2c:77:46:e1:82:98:ad:8d:
                    e1:78:6c:11:c8:4c:88:d9:8a:2b:ee:58:38:eb:c5:
                    c3:68:d1:10:50:78:0c:30:f4:b0:a0:f6:e1:86:a7:
                    dc:e6:7b:a5:43:5f:02:9b:c3:f5:3a:9e:32:28:a4:
                    e8:e0:83:d4:d0:3c:34:f5:49:3a:ee:62:6f:da:20:
                    fb:33:c7:75:7e:1f:11:56:15:97:1c:cb:5d:ad:5a:
                    cf:5f:51:d8:14:bb:a2:99:f2:ea:61:48:29:00:00:
                    0b:fd:fc:63:91:55:a4:d3:9b:45:b8:dd:f8:3a:cd:
                    b8:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:08:44:C1:53:D7:82:66:24:25:8C:28:B2:42:D0:C9:99:63:A1:A3
            X509v3 Authority Key Identifier:
                keyid:10:A2:1A:D5:6D:90:45:2B:44:D9:C0:D9:64:3B:7B:26:70:A9:A6:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/10A21AD56D90452B44D9C0D9643B7B2670A9A69C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10A21AD56D90452B44D9C0D9643B7B2670A9A69C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/3137372e3132392e36302e302f32322d3232203d3e20323632333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         53:be:17:66:d7:c4:a2:52:7e:e7:c0:5c:c4:e2:16:d7:c8:b4:
         57:57:fa:9d:e9:28:66:5d:c0:c8:5b:50:a4:6e:f5:c4:2b:52:
         7f:80:a7:97:a6:5a:c9:f0:9a:25:f7:63:28:0d:42:65:e5:de:
         06:b5:a1:13:a1:a6:f3:c2:3c:78:9c:9b:c3:96:e8:81:4c:e3:
         07:92:0f:71:d8:7b:5f:83:94:03:a1:e6:1a:33:91:7b:24:8f:
         e2:de:48:e9:1f:6f:12:fe:9d:23:71:a6:f5:28:db:07:8f:5b:
         b9:34:4b:7a:90:53:f2:02:fe:ee:b5:6b:da:1a:bc:0f:bf:6b:
         c3:43:01:0e:8a:5a:2d:67:1b:85:73:15:81:a0:d3:4f:31:38:
         24:99:3e:a2:20:06:08:a1:ef:43:c8:9f:8a:3f:0d:23:5e:a6:
         fa:81:d9:a7:f6:d1:f1:a2:ab:ac:dc:96:9b:87:d8:4c:c0:7d:
         e6:64:a5:1b:65:c6:65:eb:bd:fd:d1:36:82:76:da:8e:38:ee:
         86:b3:76:ad:7f:6c:9c:30:a9:40:ce:42:74:31:10:54:ed:89:
         71:71:5c:82:65:cd:b9:3b:9b:70:f9:a9:47:43:24:77:39:7b:
         03:34:f8:14:7d:83:ea:d5:9e:4a:8a:64:fa:ef:5f:2f:b9:54:
         3e:44:46:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:08 2024 by rpki-client on console-ams.rpki-client.org