Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/3137392e3139312e36322e302f32332d3233203d3e20323632333237.roa
File:                     3137392e3139312e36322e302f32332d3233203d3e20323632333237.roa (raw, json)
Hash identifier:          +M1GVvfF8txFqyfWa3ok9PYgL0wjXORp6A4Zh5OylPU=
Subject key identifier:   EA:50:6D:E2:FB:2C:2D:0D:5A:81:FD:2C:6A:C5:08:63:A2:FA:38:A9
Certificate issuer:       /CN=10A21AD56D90452B44D9C0D9643B7B2670A9A69C
Certificate serial:       557F1522B3935183B195160EE06E3E9536897B50
Authority key identifier: 10:A2:1A:D5:6D:90:45:2B:44:D9:C0:D9:64:3B:7B:26:70:A9:A6:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10A21AD56D90452B44D9C0D9643B7B2670A9A69C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/3137392e3139312e36322e302f32332d3233203d3e20323632333237.roa
Signing time:             Wed 19 Apr 2023 22:00:02 +0000
ROA not before:           Wed 19 Apr 2023 21:55:02 +0000
ROA not after:            Fri 19 Apr 2024 22:00:02 +0000
asID:                     262327
IP address blocks:        179.191.62.0/23 maxlen: 23
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:7f:15:22:b3:93:51:83:b1:95:16:0e:e0:6e:3e:95:36:89:7b:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10A21AD56D90452B44D9C0D9643B7B2670A9A69C
        Validity
            Not Before: Apr 19 21:55:02 2023 GMT
            Not After : Apr 19 22:00:02 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:56:9f:1f:d0:32:79:e3:08:9a:73:43:83:a6:
                    ce:cd:9a:e6:59:14:51:9c:d7:e0:58:57:de:b2:7f:
                    61:da:c9:48:a7:4c:88:5a:b4:e3:cb:07:b9:6b:76:
                    b8:69:11:1e:17:2c:80:9d:63:a3:8e:cc:06:28:b2:
                    11:37:cc:05:84:2d:f8:42:fa:59:67:22:35:4e:a7:
                    eb:9e:1b:75:1d:cd:7f:34:52:b0:73:17:7e:db:4e:
                    0d:79:d7:ee:f2:55:f9:81:4d:8b:72:73:1a:21:d3:
                    94:c5:d5:81:4e:4d:4c:36:ca:e9:79:20:b0:6b:37:
                    73:bb:34:ad:55:8a:56:75:f2:22:d6:54:55:c0:c9:
                    ae:28:fe:7b:b5:cf:a8:21:41:00:be:0d:72:a2:ad:
                    df:c9:9a:c0:c5:37:c1:93:d6:e1:24:88:e5:af:61:
                    22:02:34:a6:8a:28:34:d6:5b:37:7c:e4:f5:6f:95:
                    cd:a0:a4:61:68:2f:1f:5d:73:1b:37:31:91:f7:27:
                    cb:f9:1b:3d:05:cf:ca:46:1d:cd:32:c1:6d:3a:01:
                    c9:1b:ed:0a:de:99:b2:2b:0e:e5:0f:2f:46:dd:58:
                    43:e7:4a:52:9c:43:d3:45:18:45:29:15:4d:34:79:
                    73:d6:d7:f3:60:53:93:8a:20:54:6e:10:a6:61:de:
                    d3:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:50:6D:E2:FB:2C:2D:0D:5A:81:FD:2C:6A:C5:08:63:A2:FA:38:A9
            X509v3 Authority Key Identifier:
                keyid:10:A2:1A:D5:6D:90:45:2B:44:D9:C0:D9:64:3B:7B:26:70:A9:A6:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/10A21AD56D90452B44D9C0D9643B7B2670A9A69C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10A21AD56D90452B44D9C0D9643B7B2670A9A69C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/3137392e3139312e36322e302f32332d3233203d3e20323632333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c1:b5:1c:71:34:64:a8:ab:ea:36:7a:f0:fb:3b:a4:7c:c6:24:
         02:21:1f:42:4e:8f:7f:53:3e:6f:ae:c7:b4:b4:9e:51:7b:f2:
         00:93:fe:11:99:cf:a8:50:6a:0a:b1:dd:72:ee:9c:42:4c:2d:
         56:62:ee:64:22:ea:73:fe:a8:62:1b:69:b8:34:a7:7b:3d:30:
         f6:5b:bd:60:31:a5:11:77:a1:af:7b:e2:0a:e2:9a:73:87:5b:
         08:63:2a:5f:62:1a:33:9b:d5:3c:3d:68:0b:ce:3a:92:bb:f8:
         3d:56:a5:ee:0a:05:b7:8a:70:73:81:1b:a5:f9:b3:b8:ab:5b:
         07:0e:50:8b:ab:70:cf:2a:75:7c:cc:1f:92:f5:38:6a:3a:52:
         0b:80:f2:8a:25:14:40:b2:9c:5a:e2:69:52:f5:cb:ab:94:32:
         b1:36:5b:b7:e7:8c:c7:f2:93:c8:c4:5f:43:d0:f9:07:31:3b:
         46:48:3d:24:68:bf:50:90:74:91:d8:46:de:8d:5f:16:e9:ae:
         92:5a:a1:36:07:84:42:f4:14:ad:56:59:55:3a:9f:56:1b:c8:
         90:99:da:39:17:a2:11:a1:23:c9:50:da:f5:57:67:b9:6c:fd:
         cd:18:61:fa:73:19:ca:2f:51:03:45:b2:f4:a2:c9:f4:8b:21:
         e5:dd:ca:81
-----BEGIN CERTIFICATE-----
MIIHQzCCBiugAwIBAgIUVX8VIrOTUYOxlRYO4G4+lTaJe1AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBBMjFBRDU2RDkwNDUyQjQ0RDlDMEQ5NjQzQjdCMjY3
MEE5QTY5QzAeFw0yMzA0MTkyMTU1MDJaFw0yNDA0MTkyMjAwMDJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0I1NjlGMUZEMDMyNzlFMzA4
OUE3MzQzODNBNkNFQ0Q5QUU2NTkxNDUxOUNEN0UwNTg1N0RFQjI3RjYxREFDOTQ4
QTc0Qzg4NUFCNEUzQ0IwN0I5NkI3NkI4NjkxMTFFMTcyQzgwOUQ2M0EzOEVDQzA2
MjhCMjExMzdDQzA1ODQyREY4NDJGQTU5NjcyMjM1NEVBN0VCOUUxQjc1MURDRDdG
MzQ1MkIwNzMxNzdFREI0RTBENzlEN0VFRjI1NUY5ODE0RDhCNzI3MzFBMjFEMzk0
QzVENTgxNEU0RDRDMzZDQUU5NzkyMEIwNkIzNzczQkIzNEFENTU4QTU2NzVGMjIy
RDY1NDU1QzBDOUFFMjhGRTdCQjVDRkE4MjE0MTAwQkUwRDcyQTJBRERGQzk5QUMw
QzUzN0MxOTNENkUxMjQ4OEU1QUY2MTIyMDIzNEE2OEEyODM0RDY1QjM3N0NFNEY1
NkY5NUNEQTBBNDYxNjgyRjFGNUQ3MzFCMzczMTkxRjcyN0NCRjkxQjNEMDVDRkNB
NDYxRENEMzJDMTZEM0EwMUM5MUJFRDBBREU5OUIyMkIwRUU1MEYyRjQ2REQ1ODQz
RTc0QTUyOUM0M0QzNDUxODQ1MjkxNTREMzQ3OTczRDZEN0YzNjA1MzkzOEEyMDU0
NkUxMEE2NjFERUQzRkYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAy1afH9AyeeMImnNDg6bOzZrmWRRRnNfgWFfesn9h2slIp0yIWrTj
ywe5a3a4aREeFyyAnWOjjswGKLIRN8wFhC34QvpZZyI1Tqfrnht1Hc1/NFKwcxd+
204Nedfu8lX5gU2LcnMaIdOUxdWBTk1MNsrpeSCwazdzuzStVYpWdfIi1lRVwMmu
KP57tc+oIUEAvg1yoq3fyZrAxTfBk9bhJIjlr2EiAjSmiig01ls3fOT1b5XNoKRh
aC8fXXMbNzGR9yfL+Rs9Bc/KRh3NMsFtOgHJG+0K3pmyKw7lDy9G3VhD50pSnEPT
RRhFKRVNNHlz1tfzYFOTiiBUbhCmYd7T/wIDAQABo4ICUTCCAk0wHQYDVR0OBBYE
FOpQbeL7LC0NWoH9LGrFCGOi+jipMB8GA1UdIwQYMBaAFBCiGtVtkEUrRNnA2WQ7
eyZwqaacMA4GA1UdDwEB/wQEAwIHgDCBlAYDVR0fBIGMMIGJMIGGoIGDoIGAhn5y
c3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL0ZwR0JVTXd6OE42N3N6
M3FDUmN2UUNiWFF5QXZKV1dvTVVrRmJpb1E4Z1Q5LzAvMTBBMjFBRDU2RDkwNDUy
QjQ0RDlDMEQ5NjQzQjdCMjY3MEE5QTY5Qy5jcmwweAYIKwYBBQUHAQEEbDBqMGgG
CCsGAQUFBzAChlxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBvL25p
Y2JyX3JlcG8vMC8xMEEyMUFENTZEOTA0NTJCNDREOUMwRDk2NDNCN0IyNjcwQTlB
NjlDLmNlcjCBrgYIKwYBBQUHAQsEgaEwgZ4wgZsGCCsGAQUFBzALhoGOcnN5bmM6
Ly9ycGtpLXJlcG8ucmVnaXN0cm8uYnIvcmVwby9GcEdCVU13ejhONjdzejNxQ1Jj
dlFDYlhReUF2SldXb01Va0ZiaW9ROGdUOS8wLzMxMzczOTJlMzEzOTMxMmUzNjMy
MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzIzNjMyMzMzMjM3LnJvYTAYBgNVHSAB
Af8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB
s78+MA0GCSqGSIb3DQEBCwUAA4IBAQDBtRxxNGSoq+o2evD7O6R8xiQCIR9CTo9/
Uz5vrse0tJ5Re/IAk/4Rmc+oUGoKsd1y7pxCTC1WYu5kIupz/qhiG2m4NKd7PTD2
W71gMaURd6Gve+IK4ppzh1sIYypfYhozm9U8PWgLzjqSu/g9VqXuCgW3inBzgRul
+bO4q1sHDlCLq3DPKnV8zB+S9ThqOlILgPKKJRRAspxa4mlS9curlDKxNlu354zH
8pPIxF9D0PkHMTtGSD0kaL9QkHSR2EbejV8W6a6SWqE2B4RC9BStVllVOp9WG8iQ
mdo5F6IRoSPJUNr1V2e5bP3NGGH6cxnKL1EDRbL0osn0iyHl3cqB
-----END CERTIFICATE-----
Generated at Fri Mar 14 02:39:49 2025 by rpki-client