Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/3137392e3139312e35372e302f32342d3234203d3e20323632333237.roa
File:                     3137392e3139312e35372e302f32342d3234203d3e20323632333237.roa (raw, json)
Hash identifier:          UqkAGhQNcYboB/hmycvILX60l9ThA7M7yXsc4EFMmEI=
Subject key identifier:   B6:13:39:5E:33:4D:84:E6:FD:2B:37:D4:7A:B7:B2:2F:7D:9C:16:86
Certificate issuer:       /CN=10A21AD56D90452B44D9C0D9643B7B2670A9A69C
Certificate serial:       7C99B66A45E518F537BB12DC283E86C42BFD3430
Authority key identifier: 10:A2:1A:D5:6D:90:45:2B:44:D9:C0:D9:64:3B:7B:26:70:A9:A6:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10A21AD56D90452B44D9C0D9643B7B2670A9A69C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/3137392e3139312e35372e302f32342d3234203d3e20323632333237.roa
Signing time:             Wed 19 Apr 2023 22:00:00 +0000
ROA not before:           Wed 19 Apr 2023 21:55:00 +0000
ROA not after:            Fri 19 Apr 2024 22:00:00 +0000
asID:                     262327
IP address blocks:        179.191.57.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:99:b6:6a:45:e5:18:f5:37:bb:12:dc:28:3e:86:c4:2b:fd:34:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10A21AD56D90452B44D9C0D9643B7B2670A9A69C
        Validity
            Not Before: Apr 19 21:55:00 2023 GMT
            Not After : Apr 19 22:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e7:fe:9d:f9:d1:36:5e:df:35:ac:5c:4e:1c:
                    ce:65:50:a0:a8:cc:e4:b5:f6:92:35:fc:2d:d1:47:
                    00:28:cf:9b:04:05:cf:a9:f4:95:0d:5d:2d:f5:ca:
                    7b:f8:bd:a7:22:8c:82:0c:8b:9f:27:f9:61:6f:72:
                    2a:79:61:bc:de:cd:bc:df:bd:45:d3:b0:2a:15:b3:
                    b2:c9:c1:40:9e:bb:b5:9d:14:a9:fc:af:08:72:f8:
                    91:58:c7:f1:57:8a:90:8e:64:b3:d9:55:d0:ab:ec:
                    c7:55:38:dc:5e:22:50:1d:d1:ac:eb:21:c3:fe:73:
                    4a:81:36:7b:0b:ea:42:11:63:4f:60:bd:d9:c1:d7:
                    49:61:2c:b7:cc:73:fb:86:09:76:f5:51:f2:2f:f0:
                    95:be:b7:03:a1:70:2d:1d:17:1a:53:74:45:e1:b9:
                    68:df:9d:75:3b:2c:c2:3b:a6:e0:b3:f7:9d:42:99:
                    f2:1b:d8:95:9b:f9:e8:23:93:a5:81:b8:45:18:0f:
                    aa:42:6e:30:6d:25:e9:8e:03:83:9c:ce:7b:05:75:
                    34:dd:3e:be:f3:49:24:de:da:e2:15:f1:b1:78:b9:
                    53:08:1f:8c:bd:46:28:20:2f:b3:dd:69:7e:19:ec:
                    eb:e5:a0:ba:6a:2a:4d:78:52:14:83:c5:13:ee:f8:
                    cd:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:13:39:5E:33:4D:84:E6:FD:2B:37:D4:7A:B7:B2:2F:7D:9C:16:86
            X509v3 Authority Key Identifier:
                keyid:10:A2:1A:D5:6D:90:45:2B:44:D9:C0:D9:64:3B:7B:26:70:A9:A6:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/10A21AD56D90452B44D9C0D9643B7B2670A9A69C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10A21AD56D90452B44D9C0D9643B7B2670A9A69C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/3137392e3139312e35372e302f32342d3234203d3e20323632333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.57.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:b1:26:f2:5f:bb:0a:15:e1:9d:12:8b:ac:27:c7:90:c5:c2:
         4e:55:a4:f9:3e:3c:ce:c0:d4:23:33:05:54:fb:ee:87:ba:2f:
         41:1b:76:64:a6:8f:60:7f:33:67:df:24:55:dd:dd:fe:1f:07:
         14:3e:65:7e:85:e7:b6:b4:3e:ab:e2:9b:7f:65:44:cc:9a:09:
         7f:52:71:a3:0e:6d:f0:bc:9e:02:a1:fa:81:bf:66:f0:19:bb:
         dd:a4:ba:81:da:96:cf:7d:b2:fa:f7:bb:c5:bb:72:0c:ca:05:
         40:b2:8f:74:ba:d0:e2:f2:90:40:d0:74:23:83:d9:30:00:76:
         41:29:97:85:dc:ba:de:28:cf:fd:f3:81:09:18:0d:72:42:28:
         d5:79:16:97:04:e4:5f:25:a6:2e:2b:9d:b2:0e:95:cd:f5:8d:
         4b:aa:00:1e:e6:cd:5c:ba:5a:37:19:26:fe:e4:25:eb:a4:2f:
         e0:63:7e:17:10:58:63:f9:7f:22:1e:7b:32:98:28:4d:b5:f2:
         ba:fe:ba:7a:18:0b:c4:51:83:19:20:1c:d2:e5:a0:f4:92:c0:
         a7:8c:0a:ce:a3:36:f7:fd:3f:a6:2f:90:a6:f2:db:17:fa:6c:
         19:d7:d2:e9:0e:7a:1d:9f:59:3b:0e:b6:63:8c:d3:37:8d:de:
         45:6e:55:09
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUfJm2akXlGPU3uxLcKD6GxCv9NDAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBBMjFBRDU2RDkwNDUyQjQ0RDlDMEQ5NjQzQjdCMjY3
MEE5QTY5QzAeFw0yMzA0MTkyMTU1MDBaFw0yNDA0MTkyMjAwMDBaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTRFN0ZFOURGOUQxMzY1RURG
MzVBQzVDNEUxQ0NFNjU1MEEwQThDQ0U0QjVGNjkyMzVGQzJERDE0NzAwMjhDRjlC
MDQwNUNGQTlGNDk1MEQ1RDJERjVDQTdCRjhCREE3MjI4QzgyMEM4QjlGMjdGOTYx
NkY3MjJBNzk2MUJDREVDREJDREZCRDQ1RDNCMDJBMTVCM0IyQzlDMTQwOUVCQkI1
OUQxNEE5RkNBRjA4NzJGODkxNThDN0YxNTc4QTkwOEU2NEIzRDk1NUQwQUJFQ0M3
NTUzOERDNUUyMjUwMUREMUFDRUIyMUMzRkU3MzRBODEzNjdCMEJFQTQyMTE2MzRG
NjBCREQ5QzFENzQ5NjEyQ0I3Q0M3M0ZCODYwOTc2RjU1MUYyMkZGMDk1QkVCNzAz
QTE3MDJEMUQxNzFBNTM3NDQ1RTFCOTY4REY5RDc1M0IyQ0MyM0JBNkUwQjNGNzlE
NDI5OUYyMUJEODk1OUJGOUU4MjM5M0E1ODFCODQ1MTgwRkFBNDI2RTMwNkQyNUU5
OEUwMzgzOUNDRTdCMDU3NTM0REQzRUJFRjM0OTI0REVEQUUyMTVGMUIxNzhCOTUz
MDgxRjhDQkQ0NjI4MjAyRkIzREQ2OTdFMTlFQ0VCRTVBMEJBNkEyQTRENzg1MjE0
ODNDNTEzRUVGOENEQkIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEApOf+nfnRNl7fNaxcThzOZVCgqMzktfaSNfwt0UcAKM+bBAXPqfSV
DV0t9cp7+L2nIoyCDIufJ/lhb3IqeWG83s28371F07AqFbOyycFAnru1nRSp/K8I
cviRWMfxV4qQjmSz2VXQq+zHVTjcXiJQHdGs6yHD/nNKgTZ7C+pCEWNPYL3ZwddJ
YSy3zHP7hgl29VHyL/CVvrcDoXAtHRcaU3RF4blo3511OyzCO6bgs/edQpnyG9iV
m/noI5OlgbhFGA+qQm4wbSXpjgODnM57BXU03T6+80kk3triFfGxeLlTCB+MvUYo
IC+z3Wl+Gezr5aC6aipNeFIUg8UT7vjNuwIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FLYTOV4zTYTm/Ss31Hq3si99nBaGMB8GA1UdIwQYMBaAFBCiGtVtkEUrRNnA2WQ7
eyZwqaacMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZwR0JVTXd6OE42N3N6
M3FDUmN2UUNiWFF5QXZKV1dvTVVrRmJpb1E4Z1Q5LzAvMTBBMjFBRDU2RDkwNDUy
QjQ0RDlDMEQ5NjQzQjdCMjY3MEE5QTY5Qy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xMEEyMUFENTZEOTA0NTJCNDREOUMwRDk2NDNCN0IyNjcwQTlB
NjlDLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GcEdCVU13ejhONjdzejNxQ1Jj
dlFDYlhReUF2SldXb01Va0ZiaW9ROGdUOS8wLzMxMzczOTJlMzEzOTMxMmUzNTM3
MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjMyMzMzMjM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA
s785MA0GCSqGSIb3DQEBCwUAA4IBAQCRsSbyX7sKFeGdEousJ8eQxcJOVaT5PjzO
wNQjMwVU++6Hui9BG3Zkpo9gfzNn3yRV3d3+HwcUPmV+hee2tD6r4pt/ZUTMmgl/
UnGjDm3wvJ4CofqBv2bwGbvdpLqB2pbPfbL697vFu3IMygVAso90utDi8pBA0HQj
g9kwAHZBKZeF3LreKM/984EJGA1yQijVeRaXBORfJaYuK52yDpXN9Y1LqgAe5s1c
ulo3GSb+5CXrpC/gY34XEFhj+X8iHnsymChNtfK6/rp6GAvEUYMZIBzS5aD0ksCn
jArOozb3/T+mL5Cm8tsX+mwZ19LpDnodn1k7DrZjjNM3jd5FblUJ
-----END CERTIFICATE-----
Generated at Tue Feb 18 13:41:43 2025 by rpki-client