Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/3137392e3139312e36302e302f32342d3234203d3e20323632333237.roa
File:                     3137392e3139312e36302e302f32342d3234203d3e20323632333237.roa (raw, json)
Hash identifier:          wFmTdVX04TZIGj2SG99gQgZtZmQEqw8K0/14rS1Oa3o=
Subject key identifier:   17:2F:D2:28:82:3B:B7:1E:21:5F:5E:FD:67:94:EE:CF:EB:66:5E:56
Certificate issuer:       /CN=10A21AD56D90452B44D9C0D9643B7B2670A9A69C
Certificate serial:       1274E18E78724AF32D6C6EDC551B1FAD4D9FAA8C
Authority key identifier: 10:A2:1A:D5:6D:90:45:2B:44:D9:C0:D9:64:3B:7B:26:70:A9:A6:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10A21AD56D90452B44D9C0D9643B7B2670A9A69C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/3137392e3139312e36302e302f32342d3234203d3e20323632333237.roa
Signing time:             Wed 19 Apr 2023 22:00:02 +0000
ROA not before:           Wed 19 Apr 2023 21:55:02 +0000
ROA not after:            Fri 19 Apr 2024 22:00:02 +0000
asID:                     262327
IP address blocks:        179.191.60.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:74:e1:8e:78:72:4a:f3:2d:6c:6e:dc:55:1b:1f:ad:4d:9f:aa:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10A21AD56D90452B44D9C0D9643B7B2670A9A69C
        Validity
            Not Before: Apr 19 21:55:02 2023 GMT
            Not After : Apr 19 22:00:02 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:14:63:95:b8:57:2d:6d:b1:fa:50:7b:e9:e8:
                    8e:70:85:43:5f:fc:15:02:94:62:a2:b4:40:81:e0:
                    d0:aa:80:5f:31:70:e4:10:5a:27:1e:79:c6:02:e7:
                    38:42:73:f8:b5:f3:12:28:2c:57:08:80:82:e7:3b:
                    06:5d:12:82:b6:2a:43:60:21:b2:04:f1:aa:41:93:
                    e9:ac:1c:eb:e4:29:07:eb:06:b2:45:6d:15:8d:c3:
                    91:34:68:f2:04:f2:6a:a6:5b:b5:91:db:15:a7:c2:
                    43:42:de:3f:db:13:f5:5d:88:50:7b:9a:ff:96:c5:
                    60:41:c1:68:fd:e2:8f:a7:5f:9b:7b:fc:21:84:e1:
                    0b:d0:2c:81:4d:6a:31:5a:25:20:4a:1b:92:48:d4:
                    37:a8:f9:13:fe:45:18:b5:f2:4c:d0:26:cb:0d:1d:
                    ca:4b:a8:f8:9f:ef:d4:57:57:b0:00:40:3f:59:de:
                    81:fa:b4:7d:cd:28:0f:f8:8c:48:06:88:51:31:0e:
                    57:24:30:89:cc:be:81:b7:cf:3d:06:14:46:fa:d0:
                    f6:3e:92:6c:b4:29:a7:23:79:ee:04:a5:8a:2d:75:
                    52:a7:86:bd:4e:90:04:7e:72:76:65:31:8e:91:66:
                    4d:3b:2a:96:ab:92:3f:86:14:e7:d7:2e:c8:30:95:
                    fc:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:2F:D2:28:82:3B:B7:1E:21:5F:5E:FD:67:94:EE:CF:EB:66:5E:56
            X509v3 Authority Key Identifier:
                keyid:10:A2:1A:D5:6D:90:45:2B:44:D9:C0:D9:64:3B:7B:26:70:A9:A6:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/10A21AD56D90452B44D9C0D9643B7B2670A9A69C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10A21AD56D90452B44D9C0D9643B7B2670A9A69C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/3137392e3139312e36302e302f32342d3234203d3e20323632333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:69:a2:e4:d3:f0:00:9a:c4:7e:06:53:cc:43:f8:0f:2f:29:
         2a:8f:fe:f8:bd:c1:7e:ad:74:0c:84:ed:86:01:bf:44:70:26:
         04:6e:23:ad:fc:a9:0c:10:c1:f0:19:e8:97:13:b9:9b:f6:93:
         54:53:72:86:e0:27:3d:21:e5:e9:84:56:dc:39:5f:93:8c:08:
         f3:a2:de:8f:b3:49:82:68:d7:0d:cb:64:c1:60:6a:ce:28:97:
         bd:4e:b5:1f:ab:4a:af:ff:e0:3c:f4:62:f5:12:15:c3:1b:91:
         96:0e:94:f1:99:4a:ee:55:cf:cc:51:2f:8b:67:b2:a8:9b:d7:
         49:08:cf:14:38:af:16:c3:39:d4:0c:ba:c6:6e:95:14:a0:a3:
         d2:1b:74:04:51:65:37:f0:21:47:da:77:e5:98:27:2a:99:75:
         35:13:10:65:95:70:36:b9:ec:91:da:b8:62:a0:40:05:19:d6:
         d7:a0:92:ac:c0:90:cb:a1:33:13:ce:8e:06:2a:4b:27:5a:d4:
         65:0b:d6:e4:db:c9:5b:e6:e7:f3:13:11:f3:55:51:02:89:ed:
         d1:bc:bd:1f:9b:7d:79:d6:df:29:d3:50:86:64:0d:f3:b1:b1:
         a9:ac:87:d6:62:52:3a:7e:57:96:df:1e:e6:9d:3f:51:c2:f3:
         68:da:5b:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:47 2024 by rpki-client on console-fra.rpki-client.org