Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/3137392e3139312e36312e302f32342d3234203d3e20323632333237.roa
File:                     3137392e3139312e36312e302f32342d3234203d3e20323632333237.roa (raw, json)
Hash identifier:          5uyBC/0g4ZTu4NVMCdFLHC/4tRKcBHfwkGt27N1laws=
Subject key identifier:   E4:24:84:08:5C:D1:F7:B5:6E:EB:7D:41:19:95:F8:71:A3:8E:EB:62
Certificate issuer:       /CN=10A21AD56D90452B44D9C0D9643B7B2670A9A69C
Certificate serial:       3BFCD3CD57593369994E991045E3AE6FC661BCB4
Authority key identifier: 10:A2:1A:D5:6D:90:45:2B:44:D9:C0:D9:64:3B:7B:26:70:A9:A6:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10A21AD56D90452B44D9C0D9643B7B2670A9A69C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/3137392e3139312e36312e302f32342d3234203d3e20323632333237.roa
Signing time:             Wed 19 Apr 2023 22:00:01 +0000
ROA not before:           Wed 19 Apr 2023 21:55:01 +0000
ROA not after:            Fri 19 Apr 2024 22:00:01 +0000
asID:                     262327
IP address blocks:        179.191.61.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:fc:d3:cd:57:59:33:69:99:4e:99:10:45:e3:ae:6f:c6:61:bc:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10A21AD56D90452B44D9C0D9643B7B2670A9A69C
        Validity
            Not Before: Apr 19 21:55:01 2023 GMT
            Not After : Apr 19 22:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:01:77:40:67:b8:f2:37:16:03:7d:25:7f:b3:
                    62:c9:65:5a:10:9c:9a:62:bd:cc:31:38:32:60:aa:
                    b2:01:8a:0b:42:6e:7f:dc:49:da:ed:19:35:0c:7d:
                    12:5d:36:db:f2:d2:8e:79:26:e6:cd:9a:e4:40:14:
                    eb:b8:cd:77:98:6c:7e:57:fd:0c:91:49:65:bb:94:
                    0d:41:aa:bc:92:16:c5:81:76:fa:53:f0:c7:de:69:
                    4b:f7:f9:b6:34:51:d2:f9:1d:7d:f7:75:37:15:cd:
                    4e:e0:77:90:60:04:6f:ae:23:fa:e6:e1:3c:02:b9:
                    b8:56:b8:d7:91:41:e7:85:97:16:d6:a4:69:3b:1e:
                    f8:26:59:1b:42:42:63:8a:e1:50:ac:34:7b:d2:05:
                    c9:5c:46:ec:d0:ec:64:34:17:74:92:d2:b7:1d:f2:
                    13:73:4a:ff:32:92:f2:76:c4:bc:59:82:80:a5:e5:
                    72:df:91:2f:2c:6d:43:c0:f5:ae:a3:2b:96:fc:bf:
                    30:41:2d:ac:70:9c:06:a7:67:6b:b3:b0:93:22:c8:
                    47:a8:1e:00:85:72:f9:f1:f0:14:d3:d2:a7:df:c2:
                    a2:b3:e9:3e:d8:cb:b5:4f:29:e5:3e:f2:33:2d:3f:
                    a0:96:f0:de:7e:73:f1:a7:c9:23:12:d9:3c:84:a9:
                    f1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:24:84:08:5C:D1:F7:B5:6E:EB:7D:41:19:95:F8:71:A3:8E:EB:62
            X509v3 Authority Key Identifier:
                keyid:10:A2:1A:D5:6D:90:45:2B:44:D9:C0:D9:64:3B:7B:26:70:A9:A6:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/10A21AD56D90452B44D9C0D9643B7B2670A9A69C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10A21AD56D90452B44D9C0D9643B7B2670A9A69C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/3137392e3139312e36312e302f32342d3234203d3e20323632333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:23:a4:56:96:15:04:a9:c6:0b:60:51:08:26:37:71:1c:57:
         bf:6f:8f:4a:d8:07:c2:64:97:47:05:14:43:52:64:b7:a3:09:
         9f:c7:bc:93:5a:50:0a:6b:73:d3:6b:f2:41:56:2e:ca:76:a2:
         5b:46:5c:ef:a3:1e:91:58:41:45:4b:57:8c:2c:b6:3f:f9:26:
         da:82:0d:90:c1:a6:ce:0b:22:92:1d:97:1d:20:c2:1b:2d:58:
         7b:b6:00:79:69:00:01:e5:a3:f4:81:8c:fa:e9:11:a1:4a:c2:
         c2:ed:65:94:2f:48:fb:08:f6:c1:44:96:53:70:c5:f8:33:5a:
         0b:84:44:6e:e9:56:08:8e:9f:db:91:b4:df:c2:64:ec:a3:ed:
         67:c4:dc:df:0c:c0:07:be:ee:b3:0b:b6:95:b7:0a:6e:c7:b7:
         ce:92:d7:5f:4d:f0:8d:89:e1:99:55:32:cf:92:f5:03:3f:92:
         11:6f:07:59:d3:55:d9:2d:03:fc:b8:8b:f3:fd:33:c2:be:a1:
         4c:37:c8:01:0b:90:19:b7:a8:af:05:91:6b:79:79:ba:d6:d8:
         1f:d3:9b:04:1f:59:33:44:12:89:ce:31:84:3f:72:f8:e0:dd:
         c7:5a:15:2e:ec:e6:c8:f2:8c:f2:dc:17:cd:1f:14:33:d5:e1:
         eb:48:20:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:47 2024 by rpki-client on console-fra.rpki-client.org