Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/3137392e3139312e36322e302f32342d3234203d3e20323632333237.roa
File:                     3137392e3139312e36322e302f32342d3234203d3e20323632333237.roa (raw, json)
Hash identifier:          TMmVCNTNSLZUAbaNa6K2uAy0WvYFAaZM0mfltqATZ/E=
Subject key identifier:   4F:0B:AD:4D:9D:2F:F0:94:2B:DA:F2:C4:F0:22:FD:61:65:93:A2:45
Certificate issuer:       /CN=10A21AD56D90452B44D9C0D9643B7B2670A9A69C
Certificate serial:       78EBC6FCFDC86DEEFFF22EBA8805B0518A1BD9F7
Authority key identifier: 10:A2:1A:D5:6D:90:45:2B:44:D9:C0:D9:64:3B:7B:26:70:A9:A6:9C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10A21AD56D90452B44D9C0D9643B7B2670A9A69C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/3137392e3139312e36322e302f32342d3234203d3e20323632333237.roa
Signing time:             Wed 19 Apr 2023 22:00:01 +0000
ROA not before:           Wed 19 Apr 2023 21:55:01 +0000
ROA not after:            Fri 19 Apr 2024 22:00:01 +0000
asID:                     262327
IP address blocks:        179.191.62.0/24 maxlen: 24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:eb:c6:fc:fd:c8:6d:ee:ff:f2:2e:ba:88:05:b0:51:8a:1b:d9:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10A21AD56D90452B44D9C0D9643B7B2670A9A69C
        Validity
            Not Before: Apr 19 21:55:01 2023 GMT
            Not After : Apr 19 22:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:4f:fd:78:48:d1:c6:b5:2b:68:60:ac:be:5b:
                    a8:17:dd:50:be:cf:65:3f:2f:e7:5c:47:ba:b4:82:
                    2d:b3:c8:75:52:dd:94:61:14:83:d0:1b:28:f5:8f:
                    b6:2b:42:fa:b9:d3:8a:25:1e:a9:df:bf:af:b8:10:
                    15:c4:9a:73:58:9e:38:31:af:44:0b:98:c5:c6:e0:
                    0a:2c:fe:d5:8a:8c:6c:0d:1c:9a:1c:84:97:b2:a8:
                    04:06:85:8d:4a:c4:ce:64:51:f0:16:1d:b4:6b:2e:
                    0e:d8:72:d8:00:8f:3b:6c:c6:02:46:35:c3:81:21:
                    70:bf:cc:55:88:02:55:b7:81:9c:0a:5e:86:f5:aa:
                    79:4c:d9:4e:ec:04:cd:ae:c4:ae:5b:0e:6e:48:f4:
                    bb:74:0a:a4:6b:25:6a:b9:83:6f:87:be:bc:da:64:
                    d6:07:ca:2c:ad:5e:af:9c:ec:b3:8e:69:b1:87:16:
                    f0:06:98:12:f2:47:e1:c9:86:9c:aa:cf:59:e8:c5:
                    74:9b:40:19:74:96:82:97:45:38:04:06:bb:5f:9a:
                    8a:8d:72:ba:b1:74:2b:36:1d:fe:3f:71:aa:e9:03:
                    cf:e4:6d:85:64:a8:73:71:64:65:3e:52:b7:9c:b3:
                    03:90:ec:07:04:4a:9d:7e:c3:0a:f6:05:74:d1:fd:
                    d9:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:0B:AD:4D:9D:2F:F0:94:2B:DA:F2:C4:F0:22:FD:61:65:93:A2:45
            X509v3 Authority Key Identifier:
                keyid:10:A2:1A:D5:6D:90:45:2B:44:D9:C0:D9:64:3B:7B:26:70:A9:A6:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/10A21AD56D90452B44D9C0D9643B7B2670A9A69C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10A21AD56D90452B44D9C0D9643B7B2670A9A69C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FpGBUMwz8N67sz3qCRcvQCbXQyAvJWWoMUkFbioQ8gT9/0/3137392e3139312e36322e302f32342d3234203d3e20323632333237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.191.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:5c:6d:98:69:56:b8:44:fc:90:81:d3:ed:0f:7b:77:27:08:
         f5:a8:9d:5c:9a:d1:b7:a7:17:25:cd:f4:61:ce:9b:da:8c:ee:
         3f:a3:2b:20:9c:b8:be:c1:1d:22:3c:f9:46:d0:94:c0:9a:86:
         63:85:e7:3a:41:37:ee:6f:87:61:ef:8e:21:16:d2:ab:08:c6:
         91:f9:44:e5:db:68:45:ef:2f:6e:c2:51:e1:fa:09:15:71:92:
         85:c3:08:0b:4d:64:9f:14:28:83:30:45:64:c4:06:99:f7:6a:
         f9:ff:23:41:d0:c1:e5:a5:bf:67:b1:28:40:f6:65:60:3b:59:
         6f:e2:99:9f:27:8d:73:b4:fa:92:89:e0:6a:9d:5d:4b:14:a5:
         c2:d3:8c:1e:97:74:00:c5:05:2b:43:17:72:54:20:a8:72:cd:
         0d:b5:0f:04:f6:bd:10:07:ca:17:b1:70:1e:45:7c:d2:68:b1:
         d7:86:05:c6:a8:22:64:cb:d2:ab:08:07:2c:b6:7b:c1:4f:20:
         dc:65:c2:2f:f0:c2:d3:6a:bb:30:86:d3:6f:a5:d3:91:c8:3e:
         6d:d2:2a:37:18:56:ae:8a:4a:e1:a1:fb:42:07:e0:56:78:10:
         a5:b6:37:51:9a:40:56:cb:b5:19:0b:58:ac:15:8c:7d:11:93:
         3d:7c:78:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:47 2024 by rpki-client on console-fra.rpki-client.org