Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/3137392e3139312e35382e302f32332d3233203d3e20323632333237.roa
File:                     3137392e3139312e35382e302f32332d3233203d3e20323632333237.roa (raw, json)
Hash identifier:          HLmqKR8nr7nVxQ17PzNOtL+Ckj6NIhDSzG8bWJpfr9c=
Subject key identifier:   74:34:B0:A0:2F:E3:97:DF:23:F7:80:02:85:CC:2D:7A:F3:98:D4:1B
Certificate issuer:       /CN=10A21AD56D90452B44D9C0D9643B7B2670A9A69C
Certificate serial:       4732B4B80EB5D4C0227655A805CC56AEA838BFC7
Authority key identifier: 10:A2:1A:D5:6D:90:45:2B:44:D9:C0:D9:64:3B:7B:26:70:A9:A6:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10A21AD56D90452B44D9C0D9643B7B2670A9A69C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/3137392e3139312e35382e302f32332d3233203d3e20323632333237.roa
Signing time:             Wed 19 Apr 2023 22:00:02 +0000
ROA not before:           Wed 19 Apr 2023 21:55:02 +0000
ROA not after:            Fri 19 Apr 2024 22:00:02 +0000
asID:                     262327
IP address blocks:        179.191.58.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:32:b4:b8:0e:b5:d4:c0:22:76:55:a8:05:cc:56:ae:a8:38:bf:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10A21AD56D90452B44D9C0D9643B7B2670A9A69C
        Validity
            Not Before: Apr 19 21:55:02 2023 GMT
            Not After : Apr 19 22:00:02 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b8:aa:d1:ee:ed:f9:2b:d9:e2:2d:51:84:1d:
                    98:05:16:28:6e:41:da:59:19:9a:c5:af:9a:41:96:
                    f6:a8:d8:76:2d:b1:c3:be:17:76:cd:7c:a6:b5:ec:
                    35:97:fc:29:cd:a4:11:61:6b:7b:09:e5:92:20:02:
                    2d:4b:73:fe:ea:08:4e:7a:47:c5:aa:32:8a:ca:c2:
                    f4:eb:e6:31:ec:b6:fc:6b:4e:6e:11:cc:fc:61:6e:
                    d2:d7:77:57:5b:70:2d:00:3a:ec:22:34:fb:f7:23:
                    9c:07:fa:c5:d2:49:08:e4:49:e8:df:28:5f:71:d4:
                    06:6c:25:af:ac:fa:37:ce:bc:fb:67:ab:83:17:0b:
                    14:77:eb:f1:5f:5f:56:7f:80:8c:d2:20:cf:01:32:
                    78:1f:81:bc:0d:53:e3:5d:08:09:41:a5:8e:9f:82:
                    6c:04:33:7d:e6:70:e8:e0:4c:23:2e:fe:7c:b0:1b:
                    c8:20:0f:b6:a8:77:80:42:5b:40:dd:98:6e:8f:bf:
                    e9:c0:2e:d7:c6:f7:7d:14:96:e8:4e:22:dc:d0:ec:
                    0e:f3:bb:92:8d:2a:af:48:e3:58:e7:bb:53:6d:85:
                    04:e0:83:b5:03:30:0c:e8:ec:f6:f4:74:bc:0e:7c:
                    68:18:75:43:be:1f:3e:12:8d:d7:f1:17:68:e0:84:
                    d2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:34:B0:A0:2F:E3:97:DF:23:F7:80:02:85:CC:2D:7A:F3:98:D4:1B
            X509v3 Authority Key Identifier:
                keyid:10:A2:1A:D5:6D:90:45:2B:44:D9:C0:D9:64:3B:7B:26:70:A9:A6:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/10A21AD56D90452B44D9C0D9643B7B2670A9A69C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10A21AD56D90452B44D9C0D9643B7B2670A9A69C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/3137392e3139312e35382e302f32332d3233203d3e20323632333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b4:4e:49:c0:d9:53:ea:6b:c4:8d:bd:40:35:a5:7e:71:b1:ef:
         12:60:02:f1:05:be:48:ab:e4:9b:9a:b3:2c:73:ac:63:47:fd:
         7f:88:5a:50:19:8c:f8:b4:9b:66:e5:47:8b:fc:da:f6:cb:be:
         65:d7:c9:c8:0a:5e:35:b0:ff:df:45:36:5a:e9:20:9a:73:50:
         71:86:dd:47:7a:8b:cc:34:c2:b8:b1:d7:70:01:c5:e1:7c:eb:
         00:6d:e7:e9:ed:fa:17:37:4a:de:f8:3f:62:ae:6a:50:a3:94:
         23:9f:a0:79:83:cf:87:bb:84:67:ee:0f:66:db:d1:3d:1d:d0:
         c9:1c:f7:78:7c:84:d2:fc:1d:0d:d9:f0:6b:8a:6f:33:2e:20:
         f8:a8:ee:5f:f9:ce:76:d5:8a:36:8a:74:78:93:29:dd:22:5b:
         7f:94:10:e2:54:a1:8b:67:6f:a0:bb:19:0e:2f:79:98:57:4f:
         19:37:06:ae:02:84:02:7d:45:12:6c:1f:e5:9d:d4:66:bb:58:
         fb:0e:26:4e:09:12:42:d3:02:86:c5:18:45:fd:a0:d2:be:7c:
         17:b1:c5:f5:aa:de:66:f6:21:50:ed:2c:64:2d:86:3d:7d:57:
         e5:ee:da:03:63:6b:e5:c2:67:5f:7b:45:8d:cc:a0:34:fc:f8:
         57:93:d6:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 18 13:29:44 2025 by rpki-client