Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/3137372e3132392e36302e302f32342d3234203d3e20323632333237.roa
File:                     3137372e3132392e36302e302f32342d3234203d3e20323632333237.roa (raw, json)
Hash identifier:          GPdmji8vS5NEgCpFkKqLFyImp4I+CxEcoJXylrKltzI=
Subject key identifier:   38:62:C3:02:A7:05:A5:9A:CB:32:D0:39:0B:D2:AD:9D:47:2E:16:8C
Certificate issuer:       /CN=10A21AD56D90452B44D9C0D9643B7B2670A9A69C
Certificate serial:       4AD4753BA8D4137660A7CAAC5E50466336C0150E
Authority key identifier: 10:A2:1A:D5:6D:90:45:2B:44:D9:C0:D9:64:3B:7B:26:70:A9:A6:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10A21AD56D90452B44D9C0D9643B7B2670A9A69C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/3137372e3132392e36302e302f32342d3234203d3e20323632333237.roa
Signing time:             Wed 19 Apr 2023 22:00:01 +0000
ROA not before:           Wed 19 Apr 2023 21:55:01 +0000
ROA not after:            Fri 19 Apr 2024 22:00:01 +0000
asID:                     262327
IP address blocks:        177.129.60.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:d4:75:3b:a8:d4:13:76:60:a7:ca:ac:5e:50:46:63:36:c0:15:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10A21AD56D90452B44D9C0D9643B7B2670A9A69C
        Validity
            Not Before: Apr 19 21:55:01 2023 GMT
            Not After : Apr 19 22:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:52:80:1f:67:fd:f3:dc:0d:af:4c:06:6f:1a:
                    00:cb:56:93:4e:aa:26:9e:d9:a8:55:99:fa:73:dd:
                    ab:c0:0e:48:84:9a:89:50:99:4a:0c:21:10:9c:41:
                    ca:6d:5e:55:5e:0d:69:6f:82:a9:50:2e:2f:2c:44:
                    42:eb:41:cc:dd:38:b4:f7:24:64:e1:51:bc:aa:21:
                    c3:f3:7a:2b:ef:99:1e:32:50:52:90:8b:ba:3f:38:
                    7e:9b:75:0d:4d:74:3a:42:7d:10:eb:07:9b:94:35:
                    26:b3:3b:04:64:8b:d0:55:8d:78:46:88:f2:50:36:
                    ca:8e:32:36:b9:a8:f6:06:72:2b:ec:3f:c2:17:45:
                    5b:a3:4f:b8:ff:9d:e5:ca:c7:2b:44:b2:76:68:33:
                    e1:1d:48:96:52:a2:9c:91:2d:58:de:fd:96:d1:54:
                    ad:20:8d:d4:e0:86:38:f7:ce:d9:9f:02:2e:0c:1f:
                    70:ab:07:f2:68:d1:1f:72:1c:0b:0b:e7:89:01:e6:
                    1b:80:01:e4:e5:32:ee:02:e2:05:ff:3a:9f:cd:e8:
                    15:e2:20:36:41:db:5b:07:d6:f0:b7:95:b8:ac:d9:
                    ea:61:01:62:6f:7d:75:b1:6f:43:3a:4e:34:54:0a:
                    76:4b:e2:42:2c:80:7e:28:03:8a:a2:00:3d:cd:53:
                    e1:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:62:C3:02:A7:05:A5:9A:CB:32:D0:39:0B:D2:AD:9D:47:2E:16:8C
            X509v3 Authority Key Identifier:
                keyid:10:A2:1A:D5:6D:90:45:2B:44:D9:C0:D9:64:3B:7B:26:70:A9:A6:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/10A21AD56D90452B44D9C0D9643B7B2670A9A69C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10A21AD56D90452B44D9C0D9643B7B2670A9A69C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/3137372e3132392e36302e302f32342d3234203d3e20323632333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.129.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:a8:d1:56:89:c4:bc:1a:96:05:6a:d2:eb:77:c8:e3:a3:36:
         35:de:a2:f3:e5:22:7f:c2:d2:d9:c1:25:f0:8c:26:04:0c:c4:
         3c:86:ce:9b:7c:f5:81:18:88:0d:a4:31:a1:a4:b0:75:31:ac:
         2b:4b:a8:b9:45:a4:1b:bf:84:65:72:97:1c:91:92:11:1a:48:
         66:47:2c:d2:e9:60:1c:a8:02:fd:30:0f:23:b0:cb:aa:de:a2:
         6e:d4:61:91:9a:55:9a:c4:df:c0:b2:6b:61:0d:34:86:da:54:
         0f:f6:1f:09:c7:17:71:ff:15:f2:d3:f2:6c:92:0a:20:35:54:
         e5:01:37:a5:1e:5b:ce:7b:10:70:8f:67:d3:ad:26:94:18:2a:
         87:18:8a:73:bb:e0:1b:d0:e8:9f:db:0d:19:31:20:f7:4b:4f:
         ed:27:c0:fd:df:5e:c4:f3:36:17:d8:82:b0:b0:14:73:36:5b:
         43:6f:db:5c:77:bd:bc:a3:dc:93:fb:d4:88:08:fc:09:9f:bc:
         dc:aa:56:4e:05:96:10:e6:c1:eb:30:b4:ed:34:56:3d:4b:da:
         7d:0b:4e:23:9a:e9:21:a4:93:af:60:05:0c:32:86:e9:ec:a1:
         34:89:13:a9:85:ab:c0:a0:de:9b:f6:47:97:9b:a7:c3:4e:30:
         2e:88:7e:8a
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUStR1O6jUE3Zgp8qsXlBGYzbAFQ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBBMjFBRDU2RDkwNDUyQjQ0RDlDMEQ5NjQzQjdCMjY3
MEE5QTY5QzAeFw0yMzA0MTkyMTU1MDFaFw0yNDA0MTkyMjAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDk1MjgwMUY2N0ZERjNEQzBE
QUY0QzA2NkYxQTAwQ0I1NjkzNEVBQTI2OUVEOUE4NTU5OUZBNzNEREFCQzAwRTQ4
ODQ5QTg5NTA5OTRBMEMyMTEwOUM0MUNBNkQ1RTU1NUUwRDY5NkY4MkE5NTAyRTJG
MkM0NDQyRUI0MUNDREQzOEI0RjcyNDY0RTE1MUJDQUEyMUMzRjM3QTJCRUY5OTFF
MzI1MDUyOTA4QkJBM0YzODdFOUI3NTBENEQ3NDNBNDI3RDEwRUIwNzlCOTQzNTI2
QjMzQjA0NjQ4QkQwNTU4RDc4NDY4OEYyNTAzNkNBOEUzMjM2QjlBOEY2MDY3MjJC
RUMzRkMyMTc0NTVCQTM0RkI4RkY5REU1Q0FDNzJCNDRCMjc2NjgzM0UxMUQ0ODk2
NTJBMjlDOTEyRDU4REVGRDk2RDE1NEFEMjA4REQ0RTA4NjM4RjdDRUQ5OUYwMjJF
MEMxRjcwQUIwN0YyNjhEMTFGNzIxQzBCMEJFNzg5MDFFNjFCODAwMUU0RTUzMkVF
MDJFMjA1RkYzQTlGQ0RFODE1RTIyMDM2NDFEQjVCMDdENkYwQjc5NUI4QUNEOUVB
NjEwMTYyNkY3RDc1QjE2RjQzM0E0RTM0NTQwQTc2NEJFMjQyMkM4MDdFMjgwMzhB
QTIwMDNEQ0Q1M0UxN0YwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA2VKAH2f989wNr0wGbxoAy1aTTqomntmoVZn6c92rwA5IhJqJUJlK
DCEQnEHKbV5VXg1pb4KpUC4vLERC60HM3Ti09yRk4VG8qiHD83or75keMlBSkIu6
Pzh+m3UNTXQ6Qn0Q6weblDUmszsEZIvQVY14RojyUDbKjjI2uaj2BnIr7D/CF0Vb
o0+4/53lyscrRLJ2aDPhHUiWUqKckS1Y3v2W0VStII3U4IY4987ZnwIuDB9wqwfy
aNEfchwLC+eJAeYbgAHk5TLuAuIF/zqfzegV4iA2QdtbB9bwt5W4rNnqYQFib311
sW9DOk40VAp2S+JCLIB+KAOKogA9zVPhfwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FDhiwwKnBaWayzLQOQvSrZ1HLhaMMB8GA1UdIwQYMBaAFBCiGtVtkEUrRNnA2WQ7
eyZwqaacMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZwR0JVTXd6OE42N3N6
M3FDUmN2UUNiWFF5QXZKV1dvTVVrRmJpb1E4Z1Q5LzAvMTBBMjFBRDU2RDkwNDUy
QjQ0RDlDMEQ5NjQzQjdCMjY3MEE5QTY5Qy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xMEEyMUFENTZEOTA0NTJCNDREOUMwRDk2NDNCN0IyNjcwQTlB
NjlDLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GcEdCVU13ejhONjdzejNxQ1Jj
dlFDYlhReUF2SldXb01Va0ZiaW9ROGdUOS8wLzMxMzczNzJlMzEzMjM5MmUzNjMw
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzMzMjM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
sYE8MA0GCSqGSIb3DQEBCwUAA4IBAQAqqNFWicS8GpYFatLrd8jjozY13qLz5SJ/
wtLZwSXwjCYEDMQ8hs6bfPWBGIgNpDGhpLB1MawrS6i5RaQbv4RlcpcckZIRGkhm
RyzS6WAcqAL9MA8jsMuq3qJu1GGRmlWaxN/AsmthDTSG2lQP9h8Jxxdx/xXy0/Js
kgogNVTlATelHlvOexBwj2fTrSaUGCqHGIpzu+Ab0Oif2w0ZMSD3S0/tJ8D9317E
8zYX2IKwsBRzNltDb9tcd728o9yT+9SICPwJn7zcqlZOBZYQ5sHrMLTtNFY9S9p9
C04jmukhpJOvYAUMMobp7KE0iROphavAoN6b9keXm6fDTjAuiH6K
-----END CERTIFICATE-----
Generated at Mon Feb 17 02:15:46 2025 by rpki-client