Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/3137392e3139312e36302e302f32332d3233203d3e20323632333237.roa
File:                     3137392e3139312e36302e302f32332d3233203d3e20323632333237.roa (raw, json)
Hash identifier:          U88v+BO0HQbQQwLYe3iHTE1EZIiMuyBRUBKXEmpeLzg=
Subject key identifier:   12:84:46:F7:4E:AF:8F:D0:40:08:35:80:4C:77:CB:B7:1C:15:CF:BA
Certificate issuer:       /CN=10A21AD56D90452B44D9C0D9643B7B2670A9A69C
Certificate serial:       37B484232250CED6015157C22D87A506B2DD7F69
Authority key identifier: 10:A2:1A:D5:6D:90:45:2B:44:D9:C0:D9:64:3B:7B:26:70:A9:A6:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10A21AD56D90452B44D9C0D9643B7B2670A9A69C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/3137392e3139312e36302e302f32332d3233203d3e20323632333237.roa
Signing time:             Wed 19 Apr 2023 22:00:02 +0000
ROA not before:           Wed 19 Apr 2023 21:55:02 +0000
ROA not after:            Fri 19 Apr 2024 22:00:02 +0000
asID:                     262327
IP address blocks:        179.191.60.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:b4:84:23:22:50:ce:d6:01:51:57:c2:2d:87:a5:06:b2:dd:7f:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10A21AD56D90452B44D9C0D9643B7B2670A9A69C
        Validity
            Not Before: Apr 19 21:55:02 2023 GMT
            Not After : Apr 19 22:00:02 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:cf:b3:88:bc:16:f4:d2:fe:5b:ba:41:f4:41:
                    ac:06:d5:dd:37:9e:ad:f3:67:4b:50:db:7e:f1:3a:
                    46:a0:71:98:15:d0:c1:e0:39:bd:a4:8f:b7:b3:e3:
                    fa:8b:19:77:44:66:7c:f5:9c:b4:f8:b8:85:f9:71:
                    f4:8a:b7:db:cd:6e:3a:d3:b5:af:d9:8f:0b:e2:f6:
                    46:0f:13:a2:21:42:cd:08:89:d9:91:b3:7e:7f:4e:
                    94:80:23:3c:40:16:d6:f4:1b:98:37:ac:8a:ab:a7:
                    52:9f:04:69:0f:22:71:ae:44:11:95:3d:9a:db:4c:
                    ac:11:29:7e:d8:f5:fc:8b:a0:8c:8e:02:24:ca:e8:
                    8d:35:b6:c8:67:a7:a1:51:1c:32:9c:13:a3:5e:df:
                    3a:72:41:4f:47:40:22:fd:b1:1d:d6:c4:28:87:02:
                    55:2c:f7:10:dc:bc:e4:0a:fa:02:da:f0:e0:88:34:
                    7a:40:df:0f:c2:82:4b:0c:ef:3a:64:20:a1:19:2e:
                    24:57:c8:e5:d6:5a:14:1d:69:a3:c0:2b:36:77:fe:
                    02:77:2e:7b:c2:5e:b8:28:7d:1d:0d:3c:51:86:04:
                    3f:f9:b8:68:00:27:f9:ea:01:45:e3:f1:ad:3c:fe:
                    5e:7f:3f:7f:e0:16:2d:2f:98:0f:0a:d9:d5:89:1d:
                    96:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:84:46:F7:4E:AF:8F:D0:40:08:35:80:4C:77:CB:B7:1C:15:CF:BA
            X509v3 Authority Key Identifier:
                keyid:10:A2:1A:D5:6D:90:45:2B:44:D9:C0:D9:64:3B:7B:26:70:A9:A6:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/10A21AD56D90452B44D9C0D9643B7B2670A9A69C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10A21AD56D90452B44D9C0D9643B7B2670A9A69C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/3137392e3139312e36302e302f32332d3233203d3e20323632333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d1:72:61:7c:b1:f3:d1:12:50:b0:25:1c:f5:d2:fc:aa:fc:94:
         44:8d:f0:e9:17:01:f4:3e:9b:f2:67:54:71:39:66:54:99:02:
         a3:92:c1:83:75:3e:70:bc:07:f7:50:0e:77:b3:0a:44:b8:e9:
         0c:1b:ec:6f:ad:e5:d1:e6:7a:9c:9a:13:05:a6:d2:54:71:c5:
         2b:8b:cb:19:9c:5c:fb:34:8b:9f:ed:e5:66:b1:d8:71:59:6b:
         90:86:dc:3a:2f:71:a0:73:81:64:b3:9d:23:b5:0e:6f:5e:7e:
         23:a9:1e:f9:b6:90:bb:4c:f4:0d:25:c5:92:da:27:ea:a1:11:
         2c:c3:4e:df:b2:68:5c:9c:d3:fb:b6:6d:c3:3e:f9:73:95:0c:
         a0:41:c8:63:76:07:2c:08:d0:a4:d4:cd:39:ef:15:06:32:1d:
         91:76:bc:0f:d4:de:0c:7a:c2:87:b5:bb:05:ea:de:fc:e1:b8:
         0f:02:a9:f3:1c:ba:29:05:b0:41:30:67:87:d3:e4:95:c1:e7:
         ef:97:9b:c4:41:0b:c1:12:11:25:34:8b:63:65:e0:55:3f:23:
         62:0f:c1:f1:56:2b:70:59:db:dc:e5:56:d0:7d:6d:59:82:1a:
         6b:e1:43:3f:71:a6:41:c7:c6:87:1b:b8:89:e9:0b:9a:d5:b4:
         1f:e2:23:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:08 2024 by rpki-client on console-ams.rpki-client.org