Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/3137392e3139312e35392e302f32342d3234203d3e20323632333237.roa
File:                     3137392e3139312e35392e302f32342d3234203d3e20323632333237.roa (raw, json)
Hash identifier:          olcUf5hZr0JrbslMI4QF5+DnpmQuBk9NZ3WmuVvhFtE=
Subject key identifier:   B7:B8:ED:54:3D:64:08:8D:00:90:12:9C:AB:DB:2A:B8:10:DE:1D:EF
Certificate issuer:       /CN=10A21AD56D90452B44D9C0D9643B7B2670A9A69C
Certificate serial:       1E9EF90D7323922D2AA6E118BAD98E574CDDE897
Authority key identifier: 10:A2:1A:D5:6D:90:45:2B:44:D9:C0:D9:64:3B:7B:26:70:A9:A6:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10A21AD56D90452B44D9C0D9643B7B2670A9A69C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/3137392e3139312e35392e302f32342d3234203d3e20323632333237.roa
Signing time:             Wed 19 Apr 2023 22:00:03 +0000
ROA not before:           Wed 19 Apr 2023 21:55:03 +0000
ROA not after:            Fri 19 Apr 2024 22:00:03 +0000
asID:                     262327
IP address blocks:        179.191.59.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:9e:f9:0d:73:23:92:2d:2a:a6:e1:18:ba:d9:8e:57:4c:dd:e8:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10A21AD56D90452B44D9C0D9643B7B2670A9A69C
        Validity
            Not Before: Apr 19 21:55:03 2023 GMT
            Not After : Apr 19 22:00:03 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:86:5c:1d:6b:9d:44:e9:66:a9:20:27:43:03:
                    61:e9:04:01:01:3c:0f:28:9a:8f:d9:d3:b1:dd:7d:
                    af:a1:21:57:ca:68:3a:6c:3e:11:da:a0:da:7e:db:
                    b7:f2:3f:6e:71:08:6f:fd:0d:41:e7:45:31:52:94:
                    99:c6:8b:7c:e4:34:71:e9:f8:1b:05:7c:c4:76:4d:
                    c6:94:7a:b2:e7:0f:71:b5:72:2d:79:b6:ca:87:d9:
                    09:34:2d:41:a4:a2:a6:42:f0:94:99:63:fe:6a:06:
                    cd:92:27:fa:dd:ab:52:42:43:60:b5:cd:e6:44:00:
                    18:9b:0e:0d:f0:f3:e6:f6:f4:5c:e3:04:41:ba:17:
                    e9:20:ca:8f:81:07:9e:fe:93:ef:6c:b6:8c:10:5f:
                    94:39:05:cd:be:7f:b6:56:13:33:9a:a8:f5:1b:e1:
                    f2:6f:3e:07:26:8b:5f:c4:b5:18:2d:52:fb:45:f1:
                    ff:b9:f4:34:ef:81:d7:34:53:b7:49:9f:14:49:ea:
                    69:b1:f7:cd:79:51:58:41:d9:20:21:38:9c:ff:fc:
                    18:10:50:0b:b4:ae:ac:d8:78:3c:b6:54:ad:53:e7:
                    b4:ca:64:d2:9c:81:10:f0:3d:24:51:cb:40:5c:ad:
                    c7:2e:8a:bd:70:97:4c:fa:ed:a7:d0:2e:a0:32:29:
                    54:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:B8:ED:54:3D:64:08:8D:00:90:12:9C:AB:DB:2A:B8:10:DE:1D:EF
            X509v3 Authority Key Identifier:
                keyid:10:A2:1A:D5:6D:90:45:2B:44:D9:C0:D9:64:3B:7B:26:70:A9:A6:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/10A21AD56D90452B44D9C0D9643B7B2670A9A69C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10A21AD56D90452B44D9C0D9643B7B2670A9A69C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/3137392e3139312e35392e302f32342d3234203d3e20323632333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:f6:f8:47:59:ee:10:7e:dd:b3:01:8e:49:a0:00:d1:55:1c:
         f8:2b:d8:79:4d:28:0b:5c:da:56:45:67:b4:6a:35:c8:81:96:
         cc:8c:79:33:03:f7:a4:ac:d9:5a:3f:d1:70:e9:6b:88:26:fd:
         6c:33:41:a9:3b:1d:a6:e0:f1:a1:99:41:f4:34:67:cb:22:25:
         06:c1:77:fa:34:52:08:7a:f3:e8:d9:f3:9f:df:fa:d3:66:34:
         42:b8:e4:28:ba:1e:93:26:46:38:32:81:74:fd:57:88:c3:b3:
         f9:d7:12:8d:d9:2b:63:89:d3:43:98:1a:fa:97:9a:00:cc:b5:
         bf:77:e5:9c:38:45:f9:56:17:37:ec:07:ea:cd:c1:2b:c9:df:
         c3:f4:f3:65:89:89:a1:44:6a:b1:c2:ab:d9:e3:7e:a7:b1:c1:
         3b:8b:93:f2:8f:93:67:ae:50:48:47:b3:09:e5:26:ad:2e:d4:
         dd:17:80:8e:25:06:a7:dd:e3:b4:8b:39:e9:5d:5f:90:5a:5a:
         17:37:1d:b6:70:d3:52:c6:1f:38:fb:f7:a1:bf:5b:7b:6f:20:
         5a:ed:1e:0f:a5:9a:5e:80:da:98:fb:ca:5a:2a:97:70:4f:1f:
         3f:69:03:3c:de:00:6c:b8:21:b3:03:e5:aa:dc:77:b2:b0:06:
         a9:d2:4b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:47 2024 by rpki-client on console-fra.rpki-client.org