Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/3137392e34332e31362e302f32322d3232203d3e20323730393736.roa
File:                     3137392e34332e31362e302f32322d3232203d3e20323730393736.roa (raw, json)
Hash identifier:          41Ur6l+0t/GWMAEbZeNpOU7gm7kliYM96SgR/ssb06o=
Subject key identifier:   2A:0D:09:E6:CA:71:2F:72:69:3D:39:69:9D:65:E7:66:72:E8:DA:C3
Certificate issuer:       /CN=D0FDDFD00693149E10422185188F22AE97C6A48A
Certificate serial:       0C1AFF609D972982C4702382446700AD982BF5ED
Authority key identifier: D0:FD:DF:D0:06:93:14:9E:10:42:21:85:18:8F:22:AE:97:C6:A4:8A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0FDDFD00693149E10422185188F22AE97C6A48A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/3137392e34332e31362e302f32322d3232203d3e20323730393736.roa
Signing time:             Sat 15 Jul 2023 22:00:00 +0000
ROA not before:           Sat 15 Jul 2023 21:55:00 +0000
ROA not after:            Sat 13 Jul 2024 22:00:00 +0000
asID:                     270976
IP address blocks:        179.43.16.0/22 maxlen: 22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:1a:ff:60:9d:97:29:82:c4:70:23:82:44:67:00:ad:98:2b:f5:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0FDDFD00693149E10422185188F22AE97C6A48A
        Validity
            Not Before: Jul 15 21:55:00 2023 GMT
            Not After : Jul 13 22:00:00 2024 GMT
        Subject: CN=3082010A0282010100B61178AE035D0306A3C09097BC8AAD13738DFB969694F3CECA8A2769ADD454F71CA84141DBAEC0C6E8D775BA092C7F69430F112BE82026495E231EAEB2995E1355694CDC3C1ABC74D526A17EC9FF8A203A3525EA43D3673C1140174BDEA8661E1CFB9C23FE75E025B150038D50A225C57921CA92CA3F000B332C85A9BC7CB7CFAD22CC4053F1AD00B072B6D9ABEED4D8AECE29882A8BC9A3164605F3B1A099E9598964A86575EB1C38922AEB1708BF7497CAD2F0A0ECC689A1F94561EED401CA3B3B08F2CE6A71376F9676D1C54D485C020EF9C51C67E498EA2966780F2B8DEE82849DA8DC5367F18282C202739A204A89E6C7BA37DFB91A35257CC253AE0D970203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:11:78:ae:03:5d:03:06:a3:c0:90:97:bc:8a:
                    ad:13:73:8d:fb:96:96:94:f3:ce:ca:8a:27:69:ad:
                    d4:54:f7:1c:a8:41:41:db:ae:c0:c6:e8:d7:75:ba:
                    09:2c:7f:69:43:0f:11:2b:e8:20:26:49:5e:23:1e:
                    ae:b2:99:5e:13:55:69:4c:dc:3c:1a:bc:74:d5:26:
                    a1:7e:c9:ff:8a:20:3a:35:25:ea:43:d3:67:3c:11:
                    40:17:4b:de:a8:66:1e:1c:fb:9c:23:fe:75:e0:25:
                    b1:50:03:8d:50:a2:25:c5:79:21:ca:92:ca:3f:00:
                    0b:33:2c:85:a9:bc:7c:b7:cf:ad:22:cc:40:53:f1:
                    ad:00:b0:72:b6:d9:ab:ee:d4:d8:ae:ce:29:88:2a:
                    8b:c9:a3:16:46:05:f3:b1:a0:99:e9:59:89:64:a8:
                    65:75:eb:1c:38:92:2a:eb:17:08:bf:74:97:ca:d2:
                    f0:a0:ec:c6:89:a1:f9:45:61:ee:d4:01:ca:3b:3b:
                    08:f2:ce:6a:71:37:6f:96:76:d1:c5:4d:48:5c:02:
                    0e:f9:c5:1c:67:e4:98:ea:29:66:78:0f:2b:8d:ee:
                    82:84:9d:a8:dc:53:67:f1:82:82:c2:02:73:9a:20:
                    4a:89:e6:c7:ba:37:df:b9:1a:35:25:7c:c2:53:ae:
                    0d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:0D:09:E6:CA:71:2F:72:69:3D:39:69:9D:65:E7:66:72:E8:DA:C3
            X509v3 Authority Key Identifier:
                keyid:D0:FD:DF:D0:06:93:14:9E:10:42:21:85:18:8F:22:AE:97:C6:A4:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/D0FDDFD00693149E10422185188F22AE97C6A48A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D0FDDFD00693149E10422185188F22AE97C6A48A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6kHPDGQKb5YAYP1a7rLmWhNqBJwghjGzXebhXQeQo6WA/0/3137392e34332e31362e302f32322d3232203d3e20323730393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:91:5c:65:36:18:98:34:98:37:2b:18:de:3d:25:c6:4c:86:
         8d:da:48:cd:d9:51:1a:69:53:9d:8e:1a:3d:9d:61:86:36:a3:
         32:a7:01:b5:fb:18:a5:ac:5c:dc:c7:3b:88:ff:85:32:e3:d5:
         5a:5f:73:93:87:56:ea:3a:43:d0:55:e4:e5:7e:ee:90:d7:a6:
         2a:12:90:13:ed:f1:6f:27:83:5d:a6:27:f0:f3:86:1b:e6:f3:
         8d:81:4d:7c:3b:52:59:20:b5:0e:57:b4:de:92:97:3c:e8:de:
         3a:a5:b2:c8:8b:56:b2:0f:e4:3c:82:c6:6f:ea:4b:fe:42:0f:
         c2:91:09:56:7a:bd:a3:37:b7:78:69:4b:62:6f:87:bd:11:e8:
         bf:80:78:10:d9:89:b7:d2:b2:da:26:d3:21:f2:58:bd:cb:1b:
         d5:9e:bb:25:6a:5b:1b:a0:ea:58:3d:4f:90:7d:38:e6:b6:c5:
         46:b5:f9:ad:ca:15:ac:ea:a7:04:9b:5e:51:d2:23:ad:71:52:
         d3:8f:66:f8:89:09:b1:7d:a2:10:26:50:c6:33:60:7f:bd:da:
         33:54:96:7f:c5:69:93:38:d7:8b:1f:ec:03:81:0b:46:8f:4b:
         b1:fc:85:2a:ba:0c:56:68:48:c2:81:16:d2:f7:2b:3f:a9:b0:
         74:6b:6f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org